COconductorone
SSF Receiver

Test

Changed on

Test validates an SSF receiver stream's configuration by checking JWKS reachability, identity resolution, and action preview without processing real events.

post/api/v1/ssf-receiver-streams/{id}/test

Request

  • Base URL
    https://example.conductor.one
  • URL
    https://example.conductor.one/api/v1/ssf-receiver-streams/{id}/test
  • Auth
    HTTP bearer and OAuth 2
    Client credentials
    Token URL: /auth/v1/token

Path parameters

idstring required

The ID of the SSF receiver stream to test.

Request body

testSubjectstring

The upstream identifier to test resolution with. Typically an email address (e.g., "alice@company.com") — the same value the IdP would send in a SET subject. The Test RPC runs resolveSubject on this to verify the identity mapping works. Optional: upstream identifier (email) to test identity resolution. If empty, only JWKS reachability is tested.

Response

SSFReceiverStreamServiceTestResponse reports the results of the stream configuration test across JWKS, identity, and action readiness checks.

activeRefreshTokenCountinteger

Number of active refresh tokens for the matched user that would be affected.

activeSessionCountinteger

Number of active sessions for the matched user that would be affected.

configuredSessionRevokedAction'SSF_REVOCATION_ACTION_UNSPECIFIED' | 'SSF_REVOCATION_ACTION_REVOKE_ALL' | 'SSF_REVOCATION_ACTION_LOG_ONLY'

Step 3: Action preview. The action configured for session-revoked events on this stream.

identityLinkFoundboolean

Step 2: Identity mapping. Whether the test subject was resolved to a ConductorOne user.

jwksErrorstring

Error message if the JWKS endpoint could not be reached or returned invalid data.

jwksKeyCountinteger

Number of signing keys found at the JWKS endpoint.

jwksReachableboolean

Step 1: JWKS reachability. Whether the JWKS endpoint was reachable and returned valid keys.

matchedUserIdstring

The ConductorOne user ID the test subject maps to, if an identity link was found.

readyboolean

Overall readiness. Whether the stream passed all test checks and is ready to process events.

upstreamSubjectstring

The upstream IdP subject identifier (e.g., Okta user ID "00u1234") resolved from the test subject.

Changes