Skip to main content

Redirect to an upstream identity provider

GET 
/oauth2/federation/start

Sends the browser to the upstream provider's login. Reads the flow from the __Host-esp_flow_id cookie, refuses a provider the client does not allow, and records this leg's own state, nonce and PKCE verifier on the flow. The client's values never reach the provider.

Request​

Responses​

Redirect to the provider's hosted login page.

Response Headers
    Location