API reference · Access
List saved Access identity provider configuration
GET
/v1/orgs/{org}/access/providers- Permission
access.providers.read- Operation
access.providers.list
Parameters
| Name | In | Type | Required | Notes |
|---|---|---|---|---|
org | path | string | yes | for example "org_01h455vb4pex5vsknk084sn02q" |
limit | query | integer | no | 1 to 100; default 50 |
cursor | query | string | no | for example "idp_01h455vb4pex5vsknk084sn02q" |
x-obhut-management-assignment | header | string | no | Select one staff assignment. Direct membership remains the default. Bound API tokens use their stored source and ignore this selector. For example "masg_01h455vb4pex5vsknk084sn02q" |
Response 200
| Field | Type | Required | Notes |
|---|---|---|---|
items | array of object | yes | |
items[].id | string | yes | for example "idp_01h455vb4pex5vsknk084sn02q" |
items[].orgId | string | yes | for example "org_01h455vb4pex5vsknk084sn02q" |
items[].name | string | yes | |
items[].enabled | boolean | yes | |
items[].configuration | object | yes | |
items[].configuration.protocol | "oidc" | yes | |
items[].configuration.vendor | string | yes | one of "entra", "okta", "google", "custom" |
items[].configuration.issuer | string (uri) | yes | |
items[].configuration.clientId | string | yes | 1 to 200 characters |
items[].configuration.emailClaim | string | yes | 1 to 128 characters |
items[].configuration.groupsClaim | string or null | yes | |
items[].revision | string | yes | Opaque revision: dot-joined counters. |
items[].secretStatus | "missing" | yes | |
items[].readiness | object | yes | |
items[].readiness.state | string | yes | one of "unconfigured", "pending", "applied" |
items[].readiness.savedRevision | string or null | yes | |
items[].readiness.appliedRevision | string or null | yes | |
items[].readiness.identity | object or null | yes | |
items[].readiness.identity.signInHost | string or null | yes | |
items[].readiness.identity.issuer | string or null | yes | |
items[].readiness.identity.failure | object or null | yes | |
items[].readiness.identity.failure.code | string | yes | one of "keycloak_unavailable", "keycloak_refused", "realm_conflict", "realm_drifted", "issuer_mismatch", "issuer_migration_required", "edge_client_keys_missing", "provider_egress_unavailable", "provider_refused", "sign_in_host_unreachable" |
items[].readiness.identity.failure.at | string (date-time) | yes | UTC, ISO 8601. |
items[].readiness.identity.publicCheckAt | string (date-time) or null | yes | |
items[].readiness.serving | "unavailable" | yes | |
items[].readiness.blockers | array of string | yes | 0 to 16 items |
items[].createdAt | string (date-time) | yes | UTC, ISO 8601. |
items[].updatedAt | string (date-time) | yes | UTC, ISO 8601. |
nextCursor | string or null | yes |