ApiManagementTenantsSso
GET
/v3/mgmt/sso/settings

Authorization

Descope Project ID and Management Key
AuthorizationBearer <token>

Project ID:Management Key as bearer token.

In: header

Get the project's SSO settings, using a valid management key.

curl -X GET "https://api.descope.com/v3/mgmt/sso/settings"
{  "enabled": true,  "mergeUsers": true,  "redirectUrl": "string",  "allowDuplicateSSODomainsInOtherTenants": true,  "groupPriorityEnabled": true,  "allowOverrideRoles": true,  "limitMappingToMandatoryAttributes": true,  "blockIfEmailDomainMismatch": true,  "markEmailAsUnverified": true,  "mandatoryUserAttributes": null,  "emailServiceProvider": "string",  "emailTemplateId": "string",  "ssoSuiteStyleId": "string",  "hideSsoSuiteScim": true,  "hideSsoSuiteGroupsMapping": true,  "hideSsoSuiteDomains": true,  "hideSsoSuiteSaml": true,  "hideSsoSuiteOidc": true,  "ssoSuiteForceDomainVerification": true,  "ssoSuiteSupportEmail": "string",  "ssoSuiteShowHelpContact": true,  "hideSsoSuiteJitGuide": true,  "oidcLoginIdMappingDefaultOverride": "string"}
/** * Project-level SSO auth-method settings (Terraform: descope_sso_settings). Carries the same *  representation used in exported snapshots, and the Get response and Set request are the same *  message. The mandatoryUserAttributes entries may carry a "customAttributes." prefix and the *  "ssoDomains"/"group" sentinel values verbatim. *  Patch semantics: omitted fields are left untouched; present fields are written. */export interface Response {enabled?: booleanmergeUsers?: booleanredirectUrl?: stringallowDuplicateSSODomainsInOtherTenants?: booleangroupPriorityEnabled?: booleanallowOverrideRoles?: booleanlimitMappingToMandatoryAttributes?: booleanblockIfEmailDomainMismatch?: booleanmarkEmailAsUnverified?: boolean/** * JSON array of strings; Value makes empty and absent distinct: null/absent = keep, [] = clear, values = set. Validated in the service */mandatoryUserAttributes?: {[k: string]: unknown}emailServiceProvider?: string/** * Active template selection by id. Absent = keep the current selection; "" = reset to the *  built-in System template; a template id = select that stored template. */emailTemplateId?: stringssoSuiteStyleId?: stringhideSsoSuiteScim?: booleanhideSsoSuiteGroupsMapping?: booleanhideSsoSuiteDomains?: booleanhideSsoSuiteSaml?: booleanhideSsoSuiteOidc?: booleanssoSuiteForceDomainVerification?: booleanssoSuiteSupportEmail?: stringssoSuiteShowHelpContact?: booleanhideSsoSuiteJitGuide?: booleanoidcLoginIdMappingDefaultOverride?: string}
Was this helpful?