Single Sign-on

SSO-Richtlinie abrufen

Authentifizierung

http

AuthentifizierungBearer <token>

Bearer-Token, erhalten über den Login-Endpunkt (POST /rest/login).

Ort: header

curl -X GET "https://example.com/sso/policy"

{  "enforce_sso": true,  "allow_password_for_admins": true}

SSO-Verbindung löschen DELETE

Removes one provider's configuration entirely; the audit trail in sso_login_attempts is deliberately kept.

SSO-Richtlinie ändern PUT

Tenant-wide, not per provider: with Microsoft and Google side by side "password login is off" is one decision.