saml-redirect.php

<?php
// This is the page users visit when they submit the "Log in with SAML" form in
// this demo app.
require 'vendor/autoload.php';

$ssoready = new SSOReady\SSOReadyClient(
    // Do not hard-code or leak your SSOReady API key in production!
    //
    // In production, instead you should configure a secret SSOREADY_API_KEY
    // environment variable. The SSOReady SDK automatically loads an API key
    // from SSOREADY_API_KEY.
    //
    // This key is hard-coded here for the convenience of logging into a test
    // app, which is hard-coded to run on http://localhost:8000. It's only
    // because of this very specific set of constraints that it's acceptable to
    // hard-code and publicly leak this API key.
    "ssoready_sk_2qk9g5m9doai5k7abmmfcc41w"
);

// To start a SAML login, you need to redirect your user to their employer's
// particular Identity Provider. This is called "initiating" the SAML login.
//
// Use `saml->getSAMLRedirectURL` to initiate a SAML login.
$redirectUrl = $ssoready->saml->getSAMLRedirectURL(new SSOReady\Saml\Requests\GetSamlRedirectUrlRequest([
    // OrganizationExternalId is how you tell SSOReady which company's identity
    // provider you want to redirect to.
    //
    // In this demo, we identify companies using their domain. This code
    // converts "john.doe@example.com" into "example.com".
    "organizationExternalId" => explode("@", $_GET["email"])[1],
]))->redirectUrl;

// Redirect the user to $redirectUrl
http_response_code(302);
header("Location: " . $redirectUrl)

?>