---
title: "Configure a saml connection"
method: POST
path: "/saml/{id}"
tags: ["Saml"]
---

# Configure a saml connection

`POST /saml/{id}`

Used to configure the saml connection for a company.

Core configuration changes (issuer_uri, login_urls) require the allow_core_config_update
flag to be set to true. This protects against accidental misconfiguration. Certificate updates
(x509cert, xml_metadata), domains, and active status changes are considered maintenance operations and
do not require this flag.

## Path parameters

- `id` string, required

## Query parameters

- `rebuild_provider_config` boolean

## Request body

- SamlConnection — Saml connection details
  - `id` string — The id of the connection
  - `company_id` string — the mabl company id this connection is associated with
  - `domains` string[] — Array of domains to associate with this connection (domain lock)
  - `active` boolean, required — true if the connection is active/live
  - `service_provider` ServiceProviderSpec — Service Provider details
    - `audience_uri` string — The entity id of the service provider
    - `reply_url` string — The callbackUri for the service providier
  - `identity_provider` IdentityProviderSpec — Identity provider details
    - `issuer_uri` string — The uri identifying the issuer
    - `login_url` string — the uri to login to use to login to the identity provider
    - `x509cert` string — The x509 cert for the connection
    - `xml_metadata` string — Base-64 encoded XML Metadata

## Response `200`

The setup connection

- SamlConnection — Saml connection details
  - `id` string — The id of the connection
  - `company_id` string — the mabl company id this connection is associated with
  - `domains` string[] — Array of domains to associate with this connection (domain lock)
  - `active` boolean, required — true if the connection is active/live
  - `service_provider` ServiceProviderSpec — Service Provider details
    - `audience_uri` string — The entity id of the service provider
    - `reply_url` string — The callbackUri for the service providier
  - `identity_provider` IdentityProviderSpec — Identity provider details
    - `issuer_uri` string — The uri identifying the issuer
    - `login_url` string — the uri to login to use to login to the identity provider
    - `x509cert` string — The x509 cert for the connection
    - `xml_metadata` string — Base-64 encoded XML Metadata

## Other responses

- `400` — Invalid or missing parameter
- `401` — User not authenticated
- `403` — User not authorized
- `default` — Unknown error

---

[API](https://skmtc.net/mabl/apis/mabl-api.md) · [All operations](https://skmtc.net/mabl/apis/mabl-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/mabl/mabl-api/revisions/d0fc0114da66/schema)