---
title: "Generate embedded SSO session"
method: POST
path: "/api/v1/embed/sso/generate-session"
tags: ["Embed"]
---

# Generate embedded SSO session

`POST /api/v1/embed/sso/generate-session`

## Request body

- EmbedSsoGenerateSessionBody
  - `externalId` string, required — External identifier for the user (from your system)
  - `groups` string[] — Optional list of non-entity group names to assign to the user. Entity-group membership is managed by the entity parameter.
  - `name` string, required — Display name for the user
  - `userAttributes` object — Optional user attributes for row-level security

## Response `200`

Session token generated

- EmbedSsoGenerateSessionResponse
  - `sessionId` string, required — Session ID to use for embedding Omni content

## Other responses

- `400` — Invalid request body
- `401` — Authentication required (API key with embed scope)
- `403` — Permission denied - embed not enabled

---

[API](https://skmtc.net/omniapp/apis/omni-api.md) · [All operations](https://skmtc.net/omniapp/apis/omni-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/omniapp/omni-api/versions/de7cac8b5983/schema)