openapi: 3.2.0
info:
  title: uprest Handle App Click API
  version: '23.1'
servers:
- url: https://example.com/uprest
security:
- {}
tags:
- name: HandleAppClick
paths:
  /HandleAppClick:
    get:
      summary: HandleAppClick
      description: Returns a sample response containing SAML assertions for a configured application.
      operationId: handleappclick
      parameters:
      - name: appkey
        in: query
        description: The key GUID of the application whose SAML assert is to be returned.
        schema:
          type: string
      - name: antixss
        in: query
        schema:
          type: string
      - name: markAppVisited
        in: query
        schema:
          type: boolean
      - name: challengeId
        in: query
        description: The challengeID returned from a previous call to HandleAppClick. Required only when launching an app with an auth profile where  **Pass through duration** is set to **No Pass Through**. This can alternatively be specified in a header called **X-CFY-CHALLENGEID**.
        schema:
          type: string
      responses:
        '200':
          description: '200'
          content:
            application/json:
              examples:
                Result:
                  value: "<html>\n<head>\n</head>\n<body>\n<form name=\"myform\" method=\"post\" action=\"https://sso.services.box.net/sp/ACS.saml2\">\n  <input type=\"hidden\" name=\"SAMLResponse\" value=\"PD94bWwgdmVASDFWEFZvawdcew143...\" />\n  <input type=\"hidden\" name=\"TARGET\" value=\"https://sso.services.box.net/sp/ACS.saml2\"/>\n  \n  \n</form>\n<script type=\"text/JavaScript\">\ndocument.myform.submit();\n</script>\n</body>"
        '400':
          description: '400'
          content:
            application/json:
              examples:
                Result:
                  value: '{}'
              schema:
                type: object
                properties: {}
      deprecated: false
      x-readme:
        code-samples:
        - language: http
          code: 'GET /uprest/HandleAppClick?appkey=12341234-f77b-47e7-a519-e3b5b793905a&antixss=AOk1nyB5OyLW0ovo_iiyZw__&markAppVisited=true '
        samples-languages:
        - http
      tags:
      - HandleAppClick
x-readme-fauxas: true
x-provenance:
  method: searched
  source: https://developer.delinea.com/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://developer.delinea.com/reference/getssotoken.md
  - https://developer.delinea.com/reference/handleappclick.md
  merge:
    pages: 2
    deduped: 0
    conflicts_kept_first: 0