---
title: "Create the SSO Configuration"
method: POST
path: "/v1/sso-configuration"
tags: ["SSO Configuration"]
---

# Create the SSO Configuration

`POST /v1/sso-configuration`

Creates the SSO Configuration for the company.

## Scopes

| Category | Read only Scope | Write only Scope (read access implicit) |
|---|---|---|
| Manage company resources (`company_admin`) | - | Manage SSO (`sso_configuration:write`) |

## Request body

- CreateSSOConfigurationParams — Parameters for setting up SAML SSO for a company. Requires the email domain, identity provider URL, and the IdP's SAML signing certificate.
  - `certificate` string, binary, required — The SAML signing certificate from your identity provider, base64-encoded.
  - `domain` string, required — The email domain(s) to route through SSO (e.g., "example.com").
  - `identity_provider_url` string, required — The URL of the SAML identity provider login endpoint.

## Response `201`

Created

- CreateSSOConfigurationResponse
  - `data` CreateSSOConfigurationResult, required
    - `audience_uri` string, required
    - `certificate` string, binary, required
    - `domain` string, required
    - `identity_provider_url` string, required
    - `sso_url` string, required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `404` — Not Found
- `409` — Conflict
- `422` — Unprocessable Entity
- `429` — Unprocessable Entity

---

[API](https://skmtc.net/remote-com/apis/remote.md) · [All operations](https://skmtc.net/remote-com/apis/remote/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/remote-com/remote/revisions/7e6a0c61ac82/schema)