---
title: "Create SAML Connection"
method: POST
path: "/v1/saml-connections"
tags: ["BackendService"]
---

# Create SAML Connection

`POST /v1/saml-connections`

Create a SAML Connection.

## Request body

- SAMLConnection — SAMLConnection represents a SAML configuration for an Organization.
  - `id` string — The SAML Connection ID. Starts with `saml_connection_...`.
  - `organizationId` string — The Organization this SAML Connection belongs to.
  - `createTime` string, date-time — When the SAML Connection was created.
  - `updateTime` string, date-time — When the SAML Connection was last updated.
  - `primary` boolean — Whether this is the primary SAML Connection for the Organization.
  - `spAcsUrl` string — The Service Provider Assertion Consumer Service (ACS) URL.
  - `spEntityId` string — The Service Provider Entity ID.
  - `idpRedirectUrl` string — The Identity Provider Redirect URL.
  - `idpX509Certificate` string — The Identity Provider certificate, in PEM-encoded X.509 format. Starts with `----BEGIN CERTIFICATE----`.
  - `idpEntityId` string — The Identity Provider Entity ID.

## Response `200`

OK

- CreateSAMLConnectionResponse
  - `samlConnection` SAMLConnection — SAMLConnection represents a SAML configuration for an Organization.
    - `id` string — The SAML Connection ID. Starts with `saml_connection_...`.
    - `organizationId` string — The Organization this SAML Connection belongs to.
    - `createTime` string, date-time — When the SAML Connection was created.
    - `updateTime` string, date-time — When the SAML Connection was last updated.
    - `primary` boolean — Whether this is the primary SAML Connection for the Organization.
    - `spAcsUrl` string — The Service Provider Assertion Consumer Service (ACS) URL.
    - `spEntityId` string — The Service Provider Entity ID.
    - `idpRedirectUrl` string — The Identity Provider Redirect URL.
    - `idpX509Certificate` string — The Identity Provider certificate, in PEM-encoded X.509 format. Starts with `----BEGIN CERTIFICATE----`.
    - `idpEntityId` string — The Identity Provider Entity ID.

## Other responses

- `400` — API Error
- `401` — API Error
- `403` — API Error
- `404` — API Error

---

[API](https://skmtc.net/tesseral-labs/apis/backendservice-api.md) · [All operations](https://skmtc.net/tesseral-labs/apis/backendservice-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tesseral-labs/backendservice-api/versions/fe83f78ae20a/schema)