ApiManagementTenantsSso
GET
/v3/mgmt/sso/settingsAuthorization
Descope Project ID and Management Key AuthorizationBearer <token>
Project ID:Management Key as bearer token.
In: header
Get the project's SSO settings, using a valid management key.
curl -X GET "https://api.descope.com/v3/mgmt/sso/settings"{ "enabled": true, "mergeUsers": true, "redirectUrl": "string", "allowDuplicateSSODomainsInOtherTenants": true, "groupPriorityEnabled": true, "allowOverrideRoles": true, "limitMappingToMandatoryAttributes": true, "blockIfEmailDomainMismatch": true, "markEmailAsUnverified": true, "mandatoryUserAttributes": null, "emailServiceProvider": "string", "emailTemplateId": "string", "ssoSuiteStyleId": "string", "hideSsoSuiteScim": true, "hideSsoSuiteGroupsMapping": true, "hideSsoSuiteDomains": true, "hideSsoSuiteSaml": true, "hideSsoSuiteOidc": true, "ssoSuiteForceDomainVerification": true, "ssoSuiteSupportEmail": "string", "ssoSuiteShowHelpContact": true, "hideSsoSuiteJitGuide": true, "oidcLoginIdMappingDefaultOverride": "string"}/** * Project-level SSO auth-method settings (Terraform: descope_sso_settings). Carries the same * representation used in exported snapshots, and the Get response and Set request are the same * message. The mandatoryUserAttributes entries may carry a "customAttributes." prefix and the * "ssoDomains"/"group" sentinel values verbatim. * Patch semantics: omitted fields are left untouched; present fields are written. */export interface Response {enabled?: booleanmergeUsers?: booleanredirectUrl?: stringallowDuplicateSSODomainsInOtherTenants?: booleangroupPriorityEnabled?: booleanallowOverrideRoles?: booleanlimitMappingToMandatoryAttributes?: booleanblockIfEmailDomainMismatch?: booleanmarkEmailAsUnverified?: boolean/** * JSON array of strings; Value makes empty and absent distinct: null/absent = keep, [] = clear, values = set. Validated in the service */mandatoryUserAttributes?: {[k: string]: unknown}emailServiceProvider?: string/** * Active template selection by id. Absent = keep the current selection; "" = reset to the * built-in System template; a template id = select that stored template. */emailTemplateId?: stringssoSuiteStyleId?: stringhideSsoSuiteScim?: booleanhideSsoSuiteGroupsMapping?: booleanhideSsoSuiteDomains?: booleanhideSsoSuiteSaml?: booleanhideSsoSuiteOidc?: booleanssoSuiteForceDomainVerification?: booleanssoSuiteSupportEmail?: stringssoSuiteShowHelpContact?: booleanhideSsoSuiteJitGuide?: booleanoidcLoginIdMappingDefaultOverride?: string} Was this helpful?