Get an Identity Provider

Retrieve details of an Identity Provider specified by ID for this Organization.

GET /identity-providers/{idp_id}

Get an Identity Provider

cURL

curl --request GET \
  --url https://{tenantDomain}/my-org/v1/identity-providers/{idp_id} \
  --header 'Authorization: Bearer <token>'

200

getIdPResponseExample

{
  "id": "con_zW1UHutvkVWSWdCC",
  "name": "oidcIdp",
  "display_name": "OIDC IdP",
  "strategy": "oidc",
  "show_as_button": true,
  "assign_membership_on_login": false,
  "access_level": "readonly",
  "domains": [
    "mydomain.com"
  ],
  "is_enabled": true,
  "options": {
    "type": "front_channel",
    "client_id": "a8f3b2e7-5d1c-4f9a-8b0d-2e1c3a5b6f7d",
    "discovery_url": "https://{yourDomain}/.well-known/openid-configuration"
  },
  "attributes": [
    {
      "sso_field": [
        "userName"
      ],
      "user_attribute": "preferred_username",
      "description": "Preferred Username",
      "label": "Preferred username",
      "is_required": true,
      "is_extra": false,
      "is_missing": false
    },
    {
      "sso_field": [
        "externalId"
      ],
      "user_attribute": "external_id",
      "is_required": true,
      "is_extra": true,
      "is_missing": false
    }
  ]
}

Authorizations

OAuth2ClientCredentialsOAuth2AuthCode

Authorization · string · header · required

The access token received from the authorization server in the OAuth 2.0 flow.

Path Parameters

idp_id · string · required · read-only

Identity provider identifier.

Pattern: ^con_[A-Za-z0-9]{16}$

Response

200

application/json

Identity provider successfully retrieved.

IdP ADFS Response

IdP Google Workforce Response

IdP OIDC Response

IdP Okta Response

IdP Ping Response

IdP SAML Response

IdP Microsoft Azure AD Response

Identity provider specific options.

strategy · enum<string> · required

The type of the identity provider

Available options: adfs, google-apps, oidc, okta, pingfederate, samlp, waad

Allowed value: "adfs"

options · adfs_server · object · required

Identity provider specific options.

adfs_server

fedMetadataXml

Show child attributes

id · string · read-only

Identity provider identifier.

Pattern: ^con_[A-Za-z0-9]{16}$

name · string | null

The name of the identity provider

Maximum string length: 128

domains · string[]

List of domains for Home Realm Discovery (HRD)

display_name · string

Identity provider name used on the login screen.

Required string length: 1 - 128

show_as_button · boolean

Enables showing a button for the connection in the login page (new experience only). If false, it will be usable only by Home Realm Discovery (HRD).

assign_membership_on_login · boolean

If true, the user will be made a member of the organization upon login.

is_enabled · boolean

True if the identity provider is enabled for the organization.

access_level · enum<string> · read-only

Available options: none, readonly, limited, full