GET/api/sso/:tenantSlug/oidc/callback
Receives the redirect from the identity provider after successful OIDC login and redirects to the dashboard, or back to login with an error hint on failure.
Auth & Security
No authentication required
Idempotent: No
Parameters
tenantSlug(path, string, required)Example Response
302 redirect to <FRONTEND_URL>/login?sso_error=SSO_STATE_MISSING (example without a valid state)
Error Codes
302 SSO_STATE_MISSING — Redirect back to login with an error query parameter if the OIDC state is missing/invalid.Live Test Proof
Redirect behavior (302, sso_error=SSO_STATE_MISSING without a valid state) live-verified.