---
title: "POST /v1/{+parent}/idpCredentials:add"
method: POST
path: "/v1/{+parent}/idpCredentials:add"
tags: ["inboundSamlSsoProfiles"]
---

# POST /v1/{+parent}/idpCredentials:add

`POST /v1/{+parent}/idpCredentials:add`

Adds an IdpCredential. Up to 2 credentials are allowed. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448), the `Operation` in the response will have `"done": false`, it will not have a response, and the metadata will have `"state": "awaiting-multi-party-approval"`.

## Path parameters

- `parent` string, required

## Request body

- AddIdpCredentialRequest — The request for creating an IdpCredential with its associated payload. An InboundSamlSsoProfile can own up to 2 credentials.
  - `pemData` string — PEM encoded x509 certificate containing the public key for verifying IdP signatures.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/cloudidentity.md) · [All operations](https://skmtc.net/google/apis/cloudidentity/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/cloudidentity/revisions/179b4eeed5a2/schema)