/signup

Hosted account-creation page for the M7 SSO flow.

Endpoint

  • Method: GET
  • URL: https://sso.user.m7.org/signup
  • Response: hosted HTML page

When to use it

Use this route when you want to send the user directly to the hosted sign-up experience for an OAuth client.

Most applications still begin at /authorize and let the hosted flow decide whether sign-in or sign-up is appropriate.

Query parameters

The page accepts authorization context such as:

  • client_id
  • redirect_uri
  • response_type
  • scope
  • state
  • code_challenge
  • code_challenge_method
  • nonce
  • max_age
  • prompt
  • login_hint
  • request_uri

Example

https://sso.user.m7.org/signup?client_id=CLIENT_ID&redirect_uri=https%3A%2F%2Fapp.example.com%2Fcallback&response_type=code&scope=openid%20profile&state=STATE123&code_challenge=PKCE_CHALLENGE&code_challenge_method=S256

What happens next

The hosted page collects the required account details, creates the account, and then returns the user to the surrounding SSO flow.

Notes

  • client_id and redirect_uri are validated before the page is shown.
  • Current hosted cancel behavior may return error=access_denied with error_description=signup_cancelled to the supplied redirect_uri.
  • This route is a hosted browser page, not a JSON API.