---
title: "Validate SSO Web API Session"
method: GET
path: "/sso/validate"
tags: ["tradingSession"]
---

# Validate SSO Web API Session

`GET /sso/validate`

Validates the current session for the SSO user.

## Response `200`

An array of objects detailing contract information.

- SsoValidateResponse
  - `USER_ID` integer — Internal user identifier.
  - `USER_NAME` string — current username logged in for the session.
  - `RESULT` boolean — Confirms if validation was successful. True if session was validated; false if not.
  - `AUTH_TIME` integer — Returns the time of authentication in epoch time.
  - `SF_ENABLED` boolean — (Internal use only)
  - `IS_FREE_TRIAL` boolean — Returns if the account is a trial account or a funded account.
  - `CREDENTIAL` string — Returns the underlying username of the account.
  - `IP` string — Internal use only. Does not reflect the IP address of the user.
  - `EXPIRES` integer — Returns the time until SSO session expiration in milliseconds.
  - `QUALIFIED_FOR_MOBILE_AUTH` boolean — Returns if the customer requires two factor authentication.
  - `LANDING_APP` string — Used for Client Portal (Internal use only)
  - `IS_MASTER` boolean — Returns whether the account is a master account (true) or subaccount (false).
  - `lastAccessed` integer — Returns the last time the user was accessed in epoch time.
  - `loginType` integer — Returns the login type. 1 for Live, 2 for Paper
  - `PAPER_USER_NAME` string — Returns the paper username for the account.
  - `features` SsoValidateResponseFeatures — Returns supported features such as bonds and option trading.
    - `envs` string — Returns the connecting environment to distinguish production or paper.
    - `wlms` boolean — Internal Use Only
    - `realtime` boolean — Returns if realtime market data is available
    - `bond` boolean — Returns if bonds can be traded.
    - `optionChains` boolean — Returns if option chains can be retrieved in the account.
    - `calendar` boolean — Returns if trading calendars are enabled
    - `newMf` boolean — Internal Use Only
  - `region` string — Returns the region connected to internally.

## Other responses

- `401` — Missing, invalid, or unparseable Authorization token.

---

[API](https://skmtc.net/interactivebrokers/apis/api-reference.md) · [All operations](https://skmtc.net/interactivebrokers/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/interactivebrokers/api-reference/revisions/67f9f562c2c6/schema)