> ## Documentation Index
> Fetch the complete documentation index at: https://docs.spacemedia.uk/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO Consumer

> Connect your SpaceMedia organization to an external OAuth identity provider by configuring client credentials, authorize URL, and token exchange.

# SSO Consumer

Consumer SSO lets a SpaceMedia organization authenticate against an external identity provider.

## Required fields

| Field                 | Validation and behavior                      |
| --------------------- | -------------------------------------------- |
| `oauth-client-id`     | Required string, max 255 characters.         |
| `oauth-client-secret` | Required secret for the external provider.   |
| `oauth-authorize-url` | Required URL for authorization.              |
| `oauth-token-url`     | Required URL for token exchange.             |
| `user-info-url`       | Required URL for fetching user profile data. |

## Response shape

The saved configuration is returned with normalized snake\_case fields such as `oauth_client_id`, `oauth_authorize_url`, `oauth_token_url`, and `user_info_url`. Secrets should be treated as sensitive even when a response includes them during setup.

## Operational notes

* Use HTTPS URLs for every provider endpoint.
* Keep provider scopes minimal and aligned to login/profile requirements.
* Test the login round trip before making SSO mandatory for production users.