Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

An access token in Infisical

Body

application/json
organizationId
string
required

The ID of the organization to create the SAML config for.

authProvider
enum<string>
required

Authentication provider to use for SAML authentication.

Available options:
okta-saml,
azure-saml,
jumpcloud-saml,
google-saml,
keycloak-saml,
auth0-saml
isActive
boolean
required

Whether to enable or disable this SAML configuration.

entryPoint
string
required

The entry point for the SAML authentication. This is the URL that the user will be redirected to after they have authenticated with the SAML provider.

issuer
string
required

The SAML provider issuer URL or entity ID.

cert
string
required

The certificate to use for SAML authentication.

enableGroupSync
boolean

Whether to enable automatic synchronization of group memberships from the SAML provider to Infisical groups.

mfaSignalAttribute
string | null

The SAML attribute that lists the authentication methods the user completed, such as an Okta attribute with value session.amr. Set to null to use the provider's default: http://schemas.microsoft.com/claims/authnmethodsreferences for Azure / Entra ID, amr for every other provider.

Required string length: 1 - 512
mfaAuthnContexts
string[] | null

Additional AuthnContextClassRef values, besides the built-in two-factor classes, that prove the identity provider completed MFA.

Maximum array length: 20
Required string length: 1 - 512

Response

Default Response

id
string<uuid>
required
orgId
string<uuid>
required
isActive
boolean
required
createdAt
string<date-time>
required
updatedAt
string<date-time>
required
authProvider
string
required
lastUsed
string<date-time> | null
mfaSignalAttribute
string | null
mfaAuthnContexts
string[] | null