SamlSetupValues

Public, derived values an admin uses to configure the IdP side of a SAML provider. The URL fields are rooted at Better Auth's baseURL, which INCLUDES the /v1/auth basePath (e.g. https://api.example.com/v1/auth) — not the bare API origin. Treat these server-returned values as authoritative; a client that mirrors the URLs before the provider exists must use the same /v1/auth prefix.

  • acsUrl
    Type: string
    required

    The IdP Reply/ACS URL to paste — {betterAuthBaseURL}/sso/saml2/callback/{providerId}, where {betterAuthBaseURL} already ends in /v1/auth (e.g. https://api.example.com/v1/auth/sso/saml2/callback/corp-okta)

  • spEntityId
    Type: string
    required

    Platform-owned SP entityID/audience the SP advertises (provider-scoped, never the IdP issuer) — {betterAuthBaseURL}/sso/saml2/sp/metadata?providerId={providerId}, {betterAuthBaseURL} ending in /v1/auth

  • spMetadataUrl
    Type: string
    required

    Public SP metadata XML endpoint (equal to spEntityId by construction)

  • certExpiresAt
    Type: stringFormat: date-timenullable

    Expiry of the effective signing cert; null when no cert is in hand (metadata-only)

  • entryPoint
    Type: stringnullable

    Display copy of the effective (extracted-or-manual) IdP SSO entry point

  • issuer
    Type: stringnullable

    Display copy of the IdP entityID

Previous
SsoProvider
Next
SamlMetadataPreview