---
title: "List all Custom OIDC persona mappings"
method: GET
path: "/api/v2/wif/oidc/persona_mapping"
tags: ["Cloud Authentication"]
---

# List all Custom OIDC persona mappings

`GET /api/v2/wif/oidc/persona_mapping`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/wif/oidc/persona_mapping`
- Auth: one of:
  - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`
  - OAuth 2
    - Authorization code: `/oauth2/v1/authorize`
    - Token URL: `/oauth2/v1/token` scopes: `workload_identity_federation_read`
- TypeScript: <https://skmtc.dev/datadog/apis/datadog-api-v2-collection/docs/api/v2/wif/oidc/persona_mapping/get.ts> (a function with typed inputs; its response is checked against the schema)

List all Custom OIDC persona mappings in the organization.

## Response `200`

OK

- OIDCCloudAuthPersonaMappingsResponse: List of Custom OIDC persona mapping resources.
  - `data` OIDCCloudAuthPersonaMappingDataResponse[], required: Configured resources.
    - `attributes` OIDCCloudAuthPersonaMappingAttributesResponse, required: Stored Custom OIDC persona mapping attributes.
      - `account_identifier` string: Handle resolved when the mapping was created; not updated if the account handle changes.
      - `account_uuid` string: UUID of the Datadog user or service account to authenticate as.
      - `claim_matchers` OIDCCloudAuthClaimMatcher[]: Every claim condition must match. Supply claim_matchers or identity_pattern, but not both.
        - `claim` string, required: Name of the token claim.
        - `mode` 'exact' | 'glob': Case-sensitive matching mode. Exact compares strings. Glob matches the entire value: * matches any number of characters, including /, and ? matches one character. Other characters are literal; escaping is not supported.
        - `values` string[], required: Accepted values for this claim.
      - `created_at` string, date-time: Time the configuration was created.
      - `created_by` string, uuid: UUID of the user who created the configuration.
      - `identity_pattern` string: Legacy glob pattern matched against the provider identity claim. Supply this or claim_matchers, but not both. Prefer claim_matchers with exact mode for a single Kubernetes service account.
      - `provider_id` string, uuid: UUID of the registered Custom OIDC provider.
    - `id` string, uuid, required: Unique resource identifier.
    - `type` 'custom_oidc_identity_mapping', required: Resource type returned by the existing Custom OIDC persona mapping API.

## Other responses

- `400`: Bad Request
- `403`: Forbidden
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/3f70db624329?raw)