# Create SAML provider

Create a SAML access-based service provider in a specific tenant. Required permissions: service-providers:create, apps:create, [appId]:create.

Endpoint: POST /v1/serviceprovider/saml2
Security: ClientAccessToken

## Request fields (application/json):

  - `name` (string, required)
    Name of the service provider
    Example: "My service provider"

  - `description` (string)
    Short description of the service provider

  - `assertion_consumer_service_URL` (string, required)
    Assertion consumer service URL, which receives the SAML response
    Example: "https://example.com/sso/saml"

  - `entity_id` (string, required)
    Entity ID (Also referred to as Audience)
    Example: "https://example.com"

  - `name_qualifier` (string)
    Name Qualifier
    Example: "https://yourdomain.example.com/"

## Response 201 fields (application/json):

  - `result` (object, required)

  - `result.service_provider_id` (string, required)
    Service provider ID autogenerated upon creation

  - `result.tenant_id` (string, required)
    Transmit tenant ID

  - `result.name` (string, required)
    Service provider friendly name

  - `result.description` (string)
    Service provider description

  - `result.assertion_consumer_service_URL` (string, required)
    Assertion consumer service URL, which receives the SAML response

  - `result.entity_id` (string, required)
    Entity ID (Also referred to as Audience)

  - `result.name_qualifier` (string)
    Name Qualifier

  - `result.saml_url` (string)
    Transmit's SAML SSO endpoint that receives authentication requests

  - `result.issuer` (string)
    Identifies Transmit as the issuer of the SAML response

  - `result.pub_cert` (string)
    X.509 certificate containing Transmit's public key, used to validate the signed SAML assertion

## Response 400 fields (application/json):

  - `message` (array, required)
    Example: "Bad request"

  - `error_code` (number, required)
    Example: 400