SSO Get Token

Verifies the signature, then creates or updates the user and company described in payload — identical provisioning behavior to SSO Dashboard Login — and returns just the JWT, without a redirect URL.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
required

Minified JSON string containing the user/company SSO Payload (name, email, externalId, accountData, etc.) — see the SSO Payload reference for the full schema.

string
required

HMAC-SHA-256 signature (hex-encoded) of the minified payload, computed with the tenant's SignedLoginPrivateKey.

Responses

400

Bad signature, or the payload is missing a required field (see SSO Payload).

409

The email in the payload is already taken by a different user.

500

Internal server error.

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json