<Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Returns the app's own SSO provider and its settings. This is the provider set up for this app, not the workspace's SSO.

The client secret is never returned. client_secret reads as a fixed mask when one is stored. Each provider only returns the settings it uses, so the rest read as empty strings.

Change them with Update app SSO settings.

This is limited to 60 requests a minute per caller for each app. Some workspaces have a different limit.

<Note>This endpoint accepts a personal API key belonging to a user with editor access to the app, including a read-only key. Workspace API keys are not accepted.</Note>

{
  "settings": {
    "name": "okta",
    "client_id": "0oa8f2k1xyzAbCdE5d7",
    "client_secret": "XXXXXXXXXXXXXXXXXXXX",
    "discovery_url": "https://acme.okta.com/.well-known/openid-configuration",
    "scope": "openid email profile",
    "okta_domain": "acme.okta.com"
  }
}