Create a workspace SSO configuration
curl --request POST \
--url https://app.hookie.ai/admin/api/sso \
--header 'Content-Type: application/json' \
--cookie hookie_session= \
--data '
{
"provider": "saml",
"enabled": false,
"idp_entity_id": "<string>",
"idp_sso_url": "<string>",
"idp_certificate": "<string>",
"acs_url": "<string>",
"allowed_domains": []
}
'const options = {
method: 'POST',
headers: {cookie: 'hookie_session=', 'Content-Type': 'application/json'},
body: JSON.stringify({
provider: 'saml',
enabled: false,
idp_entity_id: '<string>',
idp_sso_url: '<string>',
idp_certificate: '<string>',
acs_url: '<string>',
allowed_domains: []
})
};
fetch('https://app.hookie.ai/admin/api/sso', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://app.hookie.ai/admin/api/sso"
payload = {
"provider": "saml",
"enabled": False,
"idp_entity_id": "<string>",
"idp_sso_url": "<string>",
"idp_certificate": "<string>",
"acs_url": "<string>",
"allowed_domains": []
}
headers = {
"cookie": "hookie_session=",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"id": "<string>",
"ok": true
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}SSO
Create a workspace SSO configuration
POST
/
admin
/
api
/
sso
Create a workspace SSO configuration
curl --request POST \
--url https://app.hookie.ai/admin/api/sso \
--header 'Content-Type: application/json' \
--cookie hookie_session= \
--data '
{
"provider": "saml",
"enabled": false,
"idp_entity_id": "<string>",
"idp_sso_url": "<string>",
"idp_certificate": "<string>",
"acs_url": "<string>",
"allowed_domains": []
}
'const options = {
method: 'POST',
headers: {cookie: 'hookie_session=', 'Content-Type': 'application/json'},
body: JSON.stringify({
provider: 'saml',
enabled: false,
idp_entity_id: '<string>',
idp_sso_url: '<string>',
idp_certificate: '<string>',
acs_url: '<string>',
allowed_domains: []
})
};
fetch('https://app.hookie.ai/admin/api/sso', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://app.hookie.ai/admin/api/sso"
payload = {
"provider": "saml",
"enabled": False,
"idp_entity_id": "<string>",
"idp_sso_url": "<string>",
"idp_certificate": "<string>",
"acs_url": "<string>",
"allowed_domains": []
}
headers = {
"cookie": "hookie_session=",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"id": "<string>",
"ok": true
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}{
"error": "<string>",
"retry_after": 123,
"upgrade_url": "<string>"
}Authorizations
sessionbearerAuth
The console's sealed session cookie, set by WorkOS AuthKit. Mutating requests also require the X-Requested-With CSRF header.
Body
application/json
Every field is optional — an empty config is storable and simply reports as not ready from the test action.
Only the exact string 'oidc' selects oidc; anything else (including omission) becomes 'saml'. One config per provider per workspace.
Available options:
saml, oidc Only the literal true enables.
Trimmed; blank becomes null.
Must be https:// when present.
IdP signing certificate (PEM). Public material, not a secret — but never returned by the list endpoint.
Must be https:// when present.
Email domains allowed to SSO. Trimmed, lowercased; non-strings and blanks dropped.