Start a single sign-on (SP-initiated)
const url = 'https://beta-api.plune.ai/v1/auth/sso/start';const options = {method: 'GET'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url https://beta-api.plune.ai/v1/auth/sso/startIssues a request for the company that has proven the domain, stores its id and a RelayState for ten minutes, and redirects the browser (302) to the company’s identity provider with the AuthnRequest (HTTP-Redirect binding; signed only if the company turned signing on). The same address is the bookmark for the provider’s application tile: a login started by the provider with no request of ours is refused at the ACS. The response sets an HttpOnly cookie (__Host-plune_sso_req over https, SameSite=None; Secure, path /, ten minutes) that names the request; the ACS accepts a response only from the browser that holds it. 404 when the domain has no single sign-on, whatever the reason (no company, off, no option). 30 a minute a client address. Every answer is Cache-Control: no-store, Referrer-Policy: no-referrer, X-Robots-Tag: noindex, nofollow and X-Content-Type-Options: nosniff.
Parameters
Section titled “ Parameters ”Query Parameters
Section titled “Query Parameters ”Responses
Section titled “ Responses ”To the identity provider
Headers
Section titled “Headers ”No usable email or domain
object
Example generated
{ "error": "example"}Single sign-on is not set up for this address
object
Example generated
{ "error": "example"}Rate-limited: the per-route throttle, or the per-minute request limit of the plan an API token counts by (#1442; the body names the plan, #2092). Retry-After carries the seconds until the window rolls over.
object
Example generated
{ "error": "example"}Headers
Section titled “Headers ”Seconds until the window rolls over