Process SAML 2.0 Callback

Handles the SAML 2.0 assertion callback from an enterprise Identity Provider.

This endpoint receives the SAML Response (via HTTP POST binding) after the user authenticates at the IDP.

Flow:

User authenticates at the SAML Identity Provider
IDP posts a SAML Response to POST /api2/saml/callback
GIS validates the SAML assertion (signature, conditions, audience)
GIS resolves or creates the guest identity from the assertion attributes
GIS redirects to the original redirect_uri with a one-time code parameter

This endpoint is called by the IDP (HTTP POST binding), not by the client directly.

Headers

X-Correlation-Id
Type: string

Optional caller-provided correlation ID; echoed in responses when present.

Body

required

application/json

SAML 2.0 Response from the Identity Provider (HTTP POST binding).

Responses

application/json
application/json
application/json
application/json
application/json
application/json

post/api2/saml/callback

curl https://SERVER_NAME_GOES_HERE/api2/saml/callback \
  --request POST \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data-urlencode 'SAMLResponse=' \
  --data-urlencode 'RelayState='

No Body

Redirect to the client's redirect_uri with a one-time code.