---
title: "POST /v1/inboundSsoAssignments"
method: POST
path: "/v1/inboundSsoAssignments"
tags: ["inboundSsoAssignments"]
---

# POST /v1/inboundSsoAssignments

`POST /v1/inboundSsoAssignments`

Creates an InboundSsoAssignment for users and devices in a `Customer` under a given `Group` or `OrgUnit`.

## Request body

- InboundSsoAssignment — Targets with "set" SSO assignments and their respective assignments.
  - `oidcSsoInfo` OidcSsoInfo — Details that are applicable when `sso_mode` is set to `OIDC_SSO`.
    - `inboundOidcSsoProfile` string — Required. Name of the `InboundOidcSsoProfile` to use. Must be of the form `inboundOidcSsoProfiles/{inbound_oidc_sso_profile}`.
  - `targetOrgUnit` string — Immutable. Must be of the form `orgUnits/{org_unit}`.
  - `rank` integer — Must be zero (which is the default value so it can be omitted) for assignments with `target_org_unit` set and must be greater-than-or-equal-to one for assignments with `target_group` set.
  - `customer` string — Immutable. The customer. For example: `customers/C0123abc`.
  - `samlSsoInfo` SamlSsoInfo — Details that are applicable when `sso_mode` == `SAML_SSO`.
    - `inboundSamlSsoProfile` string — Required. Name of the `InboundSamlSsoProfile` to use. Must be of the form `inboundSamlSsoProfiles/{inbound_saml_sso_profile}`.
  - `targetGroup` string — Immutable. Must be of the form `groups/{group}`.
  - `signInBehavior` SignInBehavior — Controls sign-in behavior.
    - `redirectCondition` 'REDIRECT_CONDITION_UNSPECIFIED' | 'NEVER' — When to redirect sign-ins to the IdP.
  - `name` string — Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Inbound SSO Assignment.
  - `ssoMode` 'SSO_MODE_UNSPECIFIED' | 'SSO_OFF' | 'SAML_SSO' | 'OIDC_SSO' | 'DOMAIN_WIDE_SAML_IF_ENABLED' — Inbound SSO behavior.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/cloudidentity.md) · [All operations](https://skmtc.net/google/apis/cloudidentity/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/cloudidentity/revisions/179b4eeed5a2/schema)