Log in via an LDAP provider bind

POST 
/api/v1/auth/providers/:provider/login

Log in via an LDAP provider bind

Request

Responses

200

Authenticated (or MFA step-up required)

Response Headers

Set-Cookie

Either full auth cookies (safebucket_access_token + safebucket_refresh_token) if no MFA step-up is needed, or a single restricted safebucket_mfa_token cookie if mfa_required: true is returned in the body.

401

Invalid LDAP credentials (INVALID_CREDENTIALS)

403

Email domain not allowed for this provider (FORBIDDEN)

404

Provider not configured or not of type ldap (PROVIDER_NOT_FOUND)

503

LDAP directory unreachable (AUTH_PROVIDER_UNAVAILABLE)