Browse the API reference

Complete SSO Authentication

post/v1/auth/sso-complete

Part of Auth.

Step 3 of 3. Exchanges the session ID for a full JWT token. Called by the target app after redirect.

Authentication

This operation does not require an API key.

Required, application/json.

Field	Type	Description
`session_id`required	string	Temporary session ID from secure handoff

curl

curl -X POST "https://api.robosystems.ai/v1/auth/sso-complete" \
  -H "Content-Type: application/json" \
  -d '{
  "session_id": "string"
}'

200 Successful Response

Field	Type	Description
`user`required	object	User information
`org`optional	object	Organization information (personal org created automatically on registration)
`message`required	string	Success message
`status`optional	string	Login flow state: authenticated (token present), or a passkey MFA step is required before a session is issued (mfa_token present) One of: `authenticated`, `mfa_required`, `mfa_enrollment_required` Default: `authenticated`
`mfa_token`optional	string	Short-lived token authorizing the MFA second step or forced enrollment; present only when status is not 'authenticated'
`token`optional	string	JWT authentication token (optional for cookie-based auth)
`expires_in`optional	integer	Token expiry time in seconds from now
`refresh_threshold`optional	integer	Recommended refresh threshold in seconds before expiry