List SSO connections

GET

/api/v1/team/sso/connections

curl --request GET \
  --url https://api.deploybase.eu/api/v1/api/v1/team/sso/connections \
  --header 'Authorization: <Authorization>'

Lists the team’s enterprise identity provider connections, oldest first. Client secrets are never returned in any form; has_client_secret reports only whether one is stored. Team admin or owner.

Authorizations

• BearerAuth

Responses

200

OK

Media type application/json

object

data

meta

object

request_id

string

timestamp

string

trace_id

string

data

Array<object>

object

client_id

string

created_at

string

has_client_secret

boolean

id

string

is_active

boolean

is_id_token_mapping

boolean

issuer

string

jit_enabled

JitEnabled is the admin’s decision that a sign-in through this provider may create the membership it does not find. On by default; an invite-only team turns it off.

boolean

jit_role

JitRole is the role such a created member lands on: member or viewer, never more.

string

last_login_at

LastLoginAt is the last successful sign-in through this connection, or nil when there has never been one. The settings page turns nil into “No one has signed in yet” — the proof an admin wants before handing the link to their team — so it is a pointer rather than a zero time nothing can distinguish from 1 January year 1.

string

member_count

MemberCount is how many of the team’s members sign in through this connection. It is what the delete confirmation counts: those members lose their SSO link and fall back to email until they are linked again.

integer

name

string

provider

string

redirect_uri

RedirectURI is the callback the admin must register in their own IdP. It is Zitadel’s, not ours, and it is the same for every connection — which is exactly why it rides on every view instead of living in the frontend: the value depends on which Zitadel this deployment talks to, and a hard-coded copy would be wrong on every other environment.

string

scopes

Array<string>

trust_unverified_email

TrustUnverifiedEmail is the admin’s statement that this provider’s addresses may be used to match a user even when it does not report them as verified. Stored and returned in phase 1; read by phase 2 matching.

boolean

updated_at

string

warnings

Warnings are the discovery advisories for the issuer, present only on the responses to Create and Update — the two moments the admin is looking at the form and can still act on them. A list or a get does not re-fetch the issuer.

Array<object>

object

code

string

docs_url

string

message

string

Example ^generated

{
  "data": [
    {
      "client_id": "example",
      "created_at": "example",
      "has_client_secret": true,
      "id": "example",
      "is_active": true,
      "is_id_token_mapping": true,
      "issuer": "example",
      "jit_enabled": true,
      "jit_role": "example",
      "last_login_at": "example",
      "member_count": 1,
      "name": "example",
      "provider": "example",
      "redirect_uri": "example",
      "scopes": [
        "example"
      ],
      "trust_unverified_email": true,
      "updated_at": "example",
      "warnings": [
        {
          "code": "example",
          "docs_url": "example",
          "message": "example"
        }
      ]
    }
  ],
  "meta": {
    "request_id": "example",
    "timestamp": "example",
    "trace_id": "example"
  }
}

401

Unauthorized

Media type application/json

object

code

string

details

error

string

meta

object

request_id

string

timestamp

string

trace_id

string

Example ^generated

{
  "code": "example",
  "details": "example",
  "error": "example",
  "meta": {
    "request_id": "example",
    "timestamp": "example",
    "trace_id": "example"
  }
}

403

Forbidden

Media type application/json

object

code

string

details

error

string

meta

object

request_id

string

timestamp

string

trace_id

string

Example ^generated

{
  "code": "example",
  "details": "example",
  "error": "example",
  "meta": {
    "request_id": "example",
    "timestamp": "example",
    "trace_id": "example"
  }
}

500

Internal Server Error

Media type application/json

object

code

string

details

error

string

meta

object

request_id

string

timestamp

string

trace_id

string

Example ^generated

{
  "code": "example",
  "details": "example",
  "error": "example",
  "meta": {
    "request_id": "example",
    "timestamp": "example",
    "trace_id": "example"
  }
}