---
title: "SAML Assertion Consumer Service"
method: POST
path: "/auth/saml/acs"
tags: ["sso"]
---

# SAML Assertion Consumer Service

`POST /auth/saml/acs`

Receives a SAML Response from the IdP, validates the assertion, provisions the user if needed, and returns JWT tokens.

## Response `200`

Authentication successful

- object
  - `accessToken` string, required
  - `refreshToken` string, required
  - `expiresAt` string, date-time, required
  - `userId` string, uuid, required

## Other responses

- `400` — Invalid SAML response
- `429` — Too many failed authentication attempts

---

[API](https://skmtc.net/quantum-chain-pte-ltd/apis/qustody-api.md) · [All operations](https://skmtc.net/quantum-chain-pte-ltd/apis/qustody-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/quantum-chain-pte-ltd/qustody-api/revisions/ecb2cea3c096/schema)