SSO Identity Provider

Identity SSO lets an organization admin use SpaceMedia as the identity provider for an organization-owned application.

Admin flow

Enter the external application’s redirect URI.
Generate the OAuth client for the organization.
Store the returned client credentials securely.
Optionally configure JWT return settings when the external app expects JWT handoff.
Enable or disable the identity SSO configuration from the dashboard.

Field	Meaning
`client_id`	Organization OAuth client identifier.
`client_secret`	Organization OAuth client secret. Store it securely.
`oauth_client_id`	OAuth client ID persisted for the organization.
`oauth_client_secret`	OAuth client secret persisted for the organization.
`redirect_uri`	External app redirect URI.

Field	Meaning
`jwt_secret`	Secret used for JWT handoff.
`jwt_return_url`	URL that receives the JWT handoff.

Only organization admins can manage identity SSO. API examples must not expose client secrets, JWT secrets, or return URLs from real organizations.