GET /accounts/self/ssoAuthSettings

No Single Sign On enabled and ssoOidcIdpConfigUrls include requested.

Generic OpenID Connect SSO config.

Google OpenID Connect SSO config.

Okta OpenID Connect SSO config.

If the "Microsoft Global" OIDC SSO type is configured, users with personal Microsoft accounts and users under any active directory can use it to login to the system. Guest users of an active directory can't use this configuration to login. As it is impossible to authoritatively decide which account an unknown user belongs to, Auto User Provisioning is not possible.

With the "Microsoft Active Directory" OIDC SSO type, a specific active directory is configured as identity provider for the account. The specific directory is identified by the required tenantId. Any user and guest under this specific active directory can use this configuration to login. "Microsoft Accounts", also known as "Personal accounts" can only be used to identify as a user if that account has been invited as a guest account in the Active Directory. Auto User Provisioning can be enabled for this configuration.

Brivo Security Suite (BSS) SSO config. Only available for BSS clients. Only the "Brivo Management User" Service Account (BMU) can update this setting.