Single Sign-On Overview

Frontegg’s Single Sign-On (SSO) enables users to sign in using their existing credentials, removing the need to create new usernames and passwords specifically for your application.

Our SSO solution supports two popular protocols: SAML and OpenID Connect (OIDC). These protocols facilitate user authentication across multiple applications and can be configured via Frontegg’s Management Portal or the Self-Service menu within your application.

This section lists all relevant API endpoints, organized into Management and Self-Service categories:

Management Endpoints: Require environment-level authorization and provide comprehensive control over SSO (SAML and OIDC) resources.

Self-Service Endpoints: Accessible with a user token (JWT), allowing users with appropriate permissions to create, update, and delete SSO connections on their accounts.

Languages
Servers
EU Region

https://api.frontegg.com/team/

US Region

https://api.us.frontegg.com/team/

CA Region

https://api.ca.frontegg.com/team/

AU Region

https://api.au.frontegg.com/team/

Frontegg sub-domain for use with user tokens

https://{domain}.frontegg.com/team/

SSO settings

Operations

SAML configurations

Operations

Get vendor's SAML config

Request

Retrieve the environment’s SAML configuration.

Returns the current SAML identity provider settings configured for the environment.

curl -i -X GET \
  https://api.frontegg.com/team/resources/sso/v1/saml/configurations/vendor-config

Responses

Bodyapplication/json
object(VendorSamlConfigurationResponse)
Response
application/json
{}

Get service provider certificate

Request

Retrieve the service provider (SP) certificate used for SAML authentication.

curl -i -X GET \
  https://api.frontegg.com/team/resources/sso/v1/saml/configurations/sp-certificate

Responses

OIDC configurations

Operations

SSO configurations

Operations