Skip to content
Single sign-on module/
/
Create an SSO group

Single Sign-On Overview

Frontegg’s Single Sign-On (SSO) enables users to sign in using their existing credentials, removing the need to create new usernames and passwords specifically for your application.

Our SSO solution supports two popular protocols: SAML and OpenID Connect (OIDC). These protocols facilitate user authentication across multiple applications and can be configured via Frontegg’s Management Portal or the Self-Service menu within your application.

This section lists all relevant API endpoints, organized into Management and Self-Service categories:

Management Endpoints: Require environment-level authorization and provide comprehensive control over SSO (SAML and OIDC) resources.

Self-Service Endpoints: Accessible with a user token (JWT), allowing users with appropriate permissions to create, update, and delete SSO connections on their accounts.

Download OpenAPI description
Users, Auth and Security
Single Sign-On
SCIM Provisioning
Entitlements
Entitlements Agent
Accounts (Tenants)
Languages
Servers
EU Region
https://api.frontegg.com/team/
US Region
https://api.us.frontegg.com/team/
CA Region
https://api.ca.frontegg.com/team/
AU Region
https://api.au.frontegg.com/team/
Frontegg sub-domain for use with user tokens
https://{domain}.frontegg.com/team/

SSO Settings

Operations

SAML Configurations Details

Operations

OIDC Configurations Details

Operations

SSO Configurations

Operations

Get SSO default roles

Request

Get SSO default roles

Path
configurationIdstringrequired
Headers
frontegg-tenant-idstringrequired

The tenant ID identifier

curl -i -X GET \
  'https://api.frontegg.com/team/resources/sso/v1/configurations/{configurationId}/roles' \
  -H 'frontegg-tenant-id: string'

Responses

Create an SSO group

Request

Create an SSO group

Path
configurationIdstringrequired
Headers
frontegg-tenant-idstringrequired

The tenant ID identifier

Bodyapplication/jsonrequired
groupstringrequired
roleIdsArray of stringsrequired
curl -i -X POST \
  'https://api.frontegg.com/team/resources/sso/v1/configurations/{configurationId}/groups' \
  -H 'Content-Type: application/json' \
  -H 'frontegg-tenant-id: string' \
  -d '{
    "group": "string",
    "roleIds": [
      "string"
    ]
  }'

Responses

Get SSO group

Request

Get SSO group

Path
configurationIdstringrequired
Headers
frontegg-tenant-idstringrequired

The tenant ID identifier

curl -i -X GET \
  'https://api.frontegg.com/team/resources/sso/v1/configurations/{configurationId}/groups' \
  -H 'frontegg-tenant-id: string'

Responses