Handle SAML authentication request (POST binding)

Add MCP server to your AI tool

Allow AI tools and LLMs to interact with the API documentation portal through MCP.

MCP server URL

https://openapi.logto.io/mcp

Standard setup for AI tools providing an mcp.json file

mcp.json 
{
  "Logto API references MCP server": {
    "url": "https://openapi.logto.io/mcp"
  }
}
Close
POST /api/saml/{id}/authn
O auth2

Process SAML authentication request using HTTP POST binding. The application policy or ForceAuthn can require fresh authentication; otherwise an existing session may be reused. The response assertion preserves the actual authentication time. When authnRequestConfig.requireSignedAuthnRequests is true, the request must be signed using the configured service provider signing certificate.

Path parameters

  • id string Required

    The ID of the SAML application.

Body Required

  • SAMLRequest string Required

    Minimum length is 1.

  • RelayState string | null

    Maximum length is 512.

Body Required

  • SAMLRequest string Required

    Base64-encoded SAML request message.

  • RelayState string

    Optional state parameter to be returned in the response.

Responses

  • 200 application/json

    OK

  • 302

    Redirects to the sign-in page.

  • 400

    Invalid SAML request.

  • 404

    The SAML application was not found.

POST /api/saml/{id}/authn 
curl \
 --request POST 'https://[tenant_id].logto.app/api/saml/{id}/authn' \
 --header "Authorization: Bearer $ACCESS_TOKEN" \
 --header "Content-Type: application/json" \
 --data '{
  "SAMLRequest": "string",
  "RelayState": "string"
}'
curl \
 --request POST 'https://[tenant_id].logto.app/api/saml/{id}/authn' \
 --header "Authorization: Bearer $ACCESS_TOKEN" \
 --header "Content-Type: application/x-www-form-urlencoded" \
 --data 'SAMLRequest=string&RelayState=string'
Request examples 
{
  "SAMLRequest": "string",
  "RelayState": "string"
}