POST
/v1/mgmt/sso/idp/app/wsfed/create

Authorization

Descope Project ID and Management Key
AuthorizationBearer <token>

Project ID:Management Key as bearer token.

In: header

Request Body

application/json

id?string
name*string
Length1 <= length <= 254
description?string
Lengthlength <= 100000
enabled?boolean
logo?string
Lengthlength <= 2097152
loginPageUrl?string
realm?string
Lengthlength <= 10000
replyUrl?string
attributeMapping?array<SAMLIDPAttributeMappingInfo>
groupsMapping?array<SAMLIDPGroupsMappingInfo>
forceAuthentication?boolean
logoutRedirectUrl?string
errorRedirectUrl?string
replyAllowedCallbacks?array<string>
string
customAttributes?object

Custom attributes as key-value pairs. Keys must be strings; values can be strings, numbers, booleans, or arrays.

Example{ "attribute-key": "attribute-value" }
darkLogo?string
Lengthlength <= 2097152
assignedRoleIds?array<string>
string

assignedRoleIds lists project-level roles that grant access to this application. A user holding any of them can access it, in addition to users assigned directly or through their tenant. Additive: it never removes access, so it only changes the outcome for projects that deny applications by default. Tenant scoped roles are rejected.

Create a new SSO WS-Fed IDP application, using a valid management key.

curl -X POST "https://api.descope.com/v1/mgmt/sso/idp/app/wsfed/create" \  -H "Content-Type: application/json" \  -d '{    "name": "string"  }'
{  "id": "string"}
export interface Response {id?: string}
Was this helpful?