The GET /{environmentId}/saml20/sp/sso operation initiates the SAML single sign-on action at the external identity provider. In the request URL, the idpId parameter specifies the external identity provider’s ID, and the flowId parameter specifies the PingOne flow ID.

Note: When a login hint is specified, the value should be included on the SAML authorization request as the subject element. When the OIDC equivalent of acr_values are specified, the values should be included on the SAML authorization request as AuthnContextClassRef elements. The authentication context references list, if more than one value is specified, are separated by a space.