The assertion-consumer endpoint your Identity Provider posts to (SAML HTTP-POST binding) after authenticating the user. Validates the signed assertion, creates or updates the user and company described in its CUSTOMER/COMPANY claims — identical provisioning behavior to SSO Dashboard Login — and redirects the browser to the Business Health Dashboard with a JWT included.

This isn't a call you make directly; your Identity Provider posts here as part of the SAML handshake.