Activate an organization's SSO connection
/api/v1/organizations/{id}/sso-connection/activatePromotes the connection from configuring to active. The protocol's required fields must be present and the organization must hold at least one verified domain (400 otherwise). Refused on a developer-managed connection. Requires hierarchy.manage or canopy:organization.manage at the organization.
Authentication
Bearer Token
Authorization Option A JWT access token. Never send alongside X-API-Key: a request carrying both is refused.
API Key
X-API-Key Option B API key for management-tier access. Never send alongside an Authorization header: a request carrying both is refused.
Path Parameters
idstring Required Responses
application/json
data *OrganizationSsoConnectionDetailResponseDto
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
application/json
error *ApiErrorBodyDto
Returned object
curl -X POST "https://auth.canopy-io.com/api/v1/organizations/value/sso-connection/activate" \ -H "X-API-Key: $CANOPY_API_KEY"
{ "data": { "connection": { "id": "string", "account_id": "string", "scope": "admin", "type": "saml", "name": "string", "status": "configuring", "saml_entity_id": "string", "saml_sso_url": "string", "saml_slo_url": "string", "saml_signing_cert": "string", "saml_signature_algorithm": "string", "saml_want_assertions_signed": false, "saml_name_id_format": "string", "force_authn": false, "oidc_discovery_url": "string", "oidc_client_id": "string", "oidc_scopes": [ "string" ], "has_oidc_client_secret": false, "jit_provisioning_enabled": false, "attribute_mapping": {}, "last_login_at": "2026-04-20T12:00:00.000Z", "last_login_failure_at": "2026-04-20T12:00:00.000Z", "consecutive_failures": 0, "auto_disabled_at": "2026-04-20T12:00:00.000Z", "created_at": "2026-04-20T12:00:00.000Z", "updated_at": "2026-04-20T12:00:00.000Z" }, "default_role": { "id": "string", "name": "string" }, "owned_by_organization": false, "service_provider": { "protocol": "saml", "acs_url": "string", "entity_id": "string", "metadata_url": "string", "redirect_uri": "string" } } }
Tell us how we can improve this guide.