workos-openapi-agent/skills/sso/SKILL.md

name, description

name	description
sso-routes	Handle 6 OpenAPI operation(s) under /sso for the sso route group.

sso API Routes

Handle 6 OpenAPI operation(s) under /sso for the sso route group.

Use the generated operation tools to make real API calls. Do not invent API responses. If a tool reports missing setup, return the exact setup field name to the caller. For write, update, or delete operations, state the intended action before calling the tool.

Operations

sso_controller_authorize

• Operation ID: sso_controller_authorize
• Route: GET /sso/authorize
• Mode: READ
• Summary: Initiate SSO
• Parameters:
  • provider_scopes in query
  • provider_query_params in query
  • client_id in query required
  • domain in query
  • provider in query
  • redirect_uri in query required
  • response_type in query required
  • state in query
  • connection in query
  • organization in query
  • domain_hint in query
  • login_hint in query
  • nonce in query

sso_controller_json_web_key_set

• Operation ID: sso_controller_json_web_key_set
• Route: GET /sso/jwks/{clientId}
• Mode: READ
• Summary: Get JWKS
• Parameters:
  • clientId in path required

sso_controller_logout

• Operation ID: sso_controller_logout
• Route: GET /sso/logout
• Mode: READ
• Summary: Logout Redirect
• Parameters:
  • token in query required

sso_controller_logout_authorize

• Operation ID: sso_controller_logout_authorize
• Route: POST /sso/logout/authorize
• Mode: WRITE
• Summary: Logout Authorize
• Body: JSON request body accepted.

sso_controller_get_profile

• Operation ID: sso_controller_get_profile
• Route: GET /sso/profile
• Mode: READ
• Summary: Get a User Profile

sso_controller_token

• Operation ID: sso_controller_token
• Route: POST /sso/token
• Mode: WRITE
• Summary: Get a Profile and Token
• Parameters:
  • client_id in query required
  • client_secret in query required
  • code in query required
  • grant_type in query required
• Body: JSON request body accepted.