POST /auth/sso/initiate

Generate an authorization URL and state parameter for the specified SSO provider (SAML or OIDC), protected by PKCE and CSRF state, redirecting the user to the enterprise identity provider for authentication. References: SAML 2.0 Core §3.4, OpenID Connect Core 1.0 §3, RFC 7636 (PKCE).

Request Body

Schema: dto.SSOInitiateRequest

Field	Type	Required	Example	Constraints	Description
provider	string	Yes	saml		Provider
return_url	string	No	https://app.example.com/callback		Return URL
tenant_id	string	No	tenant-001		Tenant ID

Responses

Status	Description	Schema
200	SSO initiated successfully, returns authorization URL and state parameter	dto.SSOInitiateResponse
400	Invalid request parameters or unsupported SSO provider	gitee_com_linmes_authms_base_dto.SimpleResponse
401	Unauthenticated or invalid token	gitee_com_linmes_authms_base_dto.SimpleResponse
500	Internal server error	gitee_com_linmes_authms_base_dto.SimpleResponse

Referenced Schemas

dto.SSOInitiateResponse

SSO login initiation response

Field	Type	Required	Example	Constraints	Description
auth_url	string	No			Authorization URL
provider	string	No			Provider
return_url	string	No			Return URL
state	string	No			State parameter
tenant_id	string	No			Tenant ID

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
message	string	No
timestamp	string	No