Discover how an email signs in

curl --request POST \
  --url https://auth.sandbox.lerian.net/v1/sso/discover \
  --header 'Content-Type: application/json' \
  --data '
{
  "email": "user@acme.com"
}
'

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://auth.sandbox.lerian.net/v1/sso/discover"

	payload := strings.NewReader("{\n  \"email\": \"user@acme.com\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({email: 'user@acme.com'})
};

fetch('https://auth.sandbox.lerian.net/v1/sso/discover', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://auth.sandbox.lerian.net/v1/sso/discover"

payload = { "email": "user@acme.com" }
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "passkeyEnabled": true,
  "passwordEnabled": true,
  "provider": {
    "displayName": "<string>",
    "id": "<string>",
    "type": "<string>"
  }
}

{
  "availableMethods": [
    "<string>"
  ],
  "code": "AUT-0009",
  "fields": {},
  "message": "<string>",
  "mfaToken": "<string>",
  "title": "Bad Request"
}

{
  "availableMethods": [
    "<string>"
  ],
  "code": "AUT-0009",
  "fields": {},
  "message": "<string>",
  "mfaToken": "<string>",
  "title": "Bad Request"
}

{
  "availableMethods": [
    "<string>"
  ],
  "code": "AUT-0009",
  "fields": {},
  "message": "<string>",
  "mfaToken": "<string>",
  "title": "Bad Request"
}

Discover how an email signs in

Tells the login screen, from an email address alone, how that person can sign in: whether password login is enabled for their tenant and which SSO provider, if any, it offers. It is called before login, by an unauthenticated browser, so the login screen can skip a manual tenant field; it changes nothing.

It fails open: an email that resolves to no tenant answers 200 with passwordEnabled=true and no provider. The resolved tenant is never returned; the email is what the browser carries forward to GET /v1/sso/start.

Errors use the envelope, plus fields on body validation errors. 400: Content-Type missing or not application/json (AUT-0009), email missing (AUT-0001) or not an email address (AUT-0009), an unexpected member (AUT-0003). When the authorization server cannot be reached, is too slow to answer, or is failing, the answer is 503 AUT-0033: nothing about the request was wrong, and it may be retried later.

POST

sso

discover

Discover how an email signs in

curl --request POST \
  --url https://auth.sandbox.lerian.net/v1/sso/discover \
  --header 'Content-Type: application/json' \
  --data '
{
  "email": "user@acme.com"
}
'

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://auth.sandbox.lerian.net/v1/sso/discover"

	payload := strings.NewReader("{\n  \"email\": \"user@acme.com\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({email: 'user@acme.com'})
};

fetch('https://auth.sandbox.lerian.net/v1/sso/discover', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://auth.sandbox.lerian.net/v1/sso/discover"

payload = { "email": "user@acme.com" }
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "passkeyEnabled": true,
  "passwordEnabled": true,
  "provider": {
    "displayName": "<string>",
    "id": "<string>",
    "type": "<string>"
  }
}

{
  "availableMethods": [
    "<string>"
  ],
  "code": "AUT-0009",
  "fields": {},
  "message": "<string>",
  "mfaToken": "<string>",
  "title": "Bad Request"
}

{
  "availableMethods": [
    "<string>"
  ],
  "code": "AUT-0009",
  "fields": {},
  "message": "<string>",
  "mfaToken": "<string>",
  "title": "Bad Request"
}

{
  "availableMethods": [
    "<string>"
  ],
  "code": "AUT-0009",
  "fields": {},
  "message": "<string>",
  "mfaToken": "<string>",
  "title": "Bad Request"
}

Cuerpo

application/json

string

requerido

Ejemplo:

"user@acme.com"

Respuesta

passkeyEnabled

boolean

requerido

passwordEnabled

boolean

requerido

provider

object

Show child attributes

Resumen

Autenticación

Inicio de sesión único

Autorización

Información del usuario

MFA de inicio de sesión

Passkey de inicio de sesión

Resumen de identidad

Grupos

Aplicaciones

Socios

Usuarios

MFA de cuenta

Passkey de cuenta

Proveedores de identidad

Proveedores de aplicaciones

Permisos

Roles

Políticas de seguridad

Declaraciones de plugins

Manejo de errores

Discover how an email signs in

Cuerpo

Respuesta