GET/api/sso/:tenantSlug/oidc/start
Starts the OIDC login handshake — redirects the browser to the configured identity provider. Not a JSON endpoint meaningful for API consumers, but a browser redirect target.
Auth & Security
No authentication required
Idempotent: Yes
Parameters
tenantSlug(path, string, required)Example Response
(302 redirect to the identity provider for a configured tenant)
Error Codes
404 - — OIDC is not configured for this tenant.Live Test Proof
Negative case (404 JSON) for unconfigured tenant live-verified. Pure browser redirect entry point, not intended for direct API calls with a JSON response.