The GET /{environmentId}/saml20/sp/sso operation initiates the SAML single sign-on action at the external identity provider. In the request URL, the idpId parameter specifies the external identity provider’s ID, and the flowId parameter specifies the PingOne flow ID.