Get SSO Configuration

GET /v1/sso/config/{uuid}

Read the full configuration of one SSO connection on your active account. Same shape as a single entry from /sso/config. The client_secret is never returned — it's encrypted at rest and only used internally for the OAuth code exchange. Requires the settings:read account permission.

Path parameters

uuid string (uuid) Req
The SSO config's uuid, from /sso/config.

Deprecated: the legacy integer id is still accepted in the path until the sunset, answered with Deprecation and Sunset headers. Use the uuid.

Response (200 OK)

Same fields as list entries. provider_type is one of google, github or oidc (an old saml config never signs anyone in; see list). The domain_verify_record_name and domain_verify_record_value fields are only present while an oidc config is unverified (domain_verified is false) — publish that DNS TXT record, then call POST /v1/sso/config/{uuid}/verify-domain. google/github configs are auto-verified and omit these fields.

Deprecated: until the sunset this response also carries the legacy integer id and *_id fields. Don't use them; read uuid and the *_uuid fields.

Errors

401 Unauthorized
Missing auth.
403 Forbidden
No active account, or the caller lacks the settings:read permission on it.
404 Not Found
SSO configuration not found — unknown uuid, or a config of another account.
Request
curl "https://api.ngris.com/v1/sso/config/019af662-7814-75fe-ac3c-b767d84325a9" \ -H "X-API-KEY: <your_api_key>"
Python
from ngris import Ngris client = Ngris(api_key="<your_api_key>") s = client.sso.get("019af662-7814-75fe-ac3c-b767d84325a9") print(s.email_domain, s.provider_type)
Response — 200 OK
{ "uuid": "019af662-7814-75fe-ac3c-b767d84325a9", "account_uuid": "019a68b9-1a79-7820-a884-41f554aba6bd", "email_domain": "acme.com", "provider_type": "oidc", "client_id": "0oa1234abc", "auth_url": "https://acme.example-idp.com/oauth2/v1/authorize", "token_url": "https://acme.example-idp.com/oauth2/v1/token", "userinfo_url": "https://acme.example-idp.com/oauth2/v1/userinfo", "issuer": "https://acme.example-idp.com/oauth2", "jwks_url": "https://acme.example-idp.com/oauth2/v1/keys", "scopes": "openid profile email", "status": "active", "enforced": true, "domain_verified": false, "domain_verify_record_name": "_ngris-sso-verify.acme.com", "domain_verify_record_value": "ngris-sso-verify=3f9a0c21b7e4", "last_error_message": "", "last_tested_at": "2026-06-30T12:00:00Z", "created_at": "2026-06-01T09:00:00Z", "updated_at": "2026-06-30T12:00:00Z" }
Was this helpful?
On this page
Get SSO Configuration
Was this helpful?
Homepage Docs Dashboard Docs API Docs nvelox Dashboard