OAuth / SAML callback

The redirect URI registered with the external OAuth/OIDC provider or the SAML Assertion Consumer Service (ACS) endpoint. TIB uses this to exchange the authorization code (or process the SAML response) and complete the login action.

After a successful callback, TIB executes the profile’s ActionType and redirects the user to ReturnURL.

GET /auth/{id}/{provider}/callback

OAuth / SAML callback

cURL

curl --request GET \
  --url http://localhost:3010/auth/{id}/{provider}/callback

400

{
  "Status": "error",
  "Error": "Profile not found"
}

Path Parameters

id · string · required

The unique identifier of the authentication profile.

provider · string · required

The provider sub-path. For Social/OIDC providers this is the Goth provider name (e.g. github, linkedin, openid-connect). For SAML it is saml. For LDAP/Proxy it matches the configured provider identifier.

Query Parameters

code · string

OAuth 2.0 authorization code (OAuth flows only).

state · string

OAuth 2.0 state parameter for CSRF protection.

Response

302

Redirect to ReturnURL after successful authentication and action.