Auth — SSO
Create SSO Token
Creates a short-lived Single Sign-On token and returns the hosted login URL. Redirect the user to that URL, then poll sso_check to receive the session token.
POST
/api/vaneltonid/sso_create.php
Requires
Authorization: AppID:AppKey header — WebKey not accepted
Request body
| Field | Type | Required | Description |
|---|---|---|---|
| redirect_uri | string | optional | URL to redirect the user to after authorization. Receives ?sso=TOKEN appended. Omit for desktop apps that use polling without a redirect. |
Test this endpoint
Headers
Body
Success response 200
{
"success": true,
"sso_token": "a3f9...64chars",
"expires_in": 600,
"login_url": "https://vaneltonmedia.com/login?sso=a3f9...64chars"
}Response fields
| Field | Type | Description |
|---|---|---|
| sso_token | string | 64-character token — pass to sso_check.php |
| expires_in | number | Seconds until the token expires (always 600 — 10 minutes) |
| login_url | string | Full URL to redirect the user to. Opens the Vanelton ID hosted login page with the token pre-filled. |
Errors
| Code | Cause |
|---|---|
| 401 | Missing, malformed, or invalid AppID:AppKey credentials |
After creating the token, redirect the user to
login_url and begin polling sso_check every 3 seconds. The token expires in 10 minutes if not authorized.