---
title: "GetSSOConfiguration"
method: POST
path: "/gitpod.v1.OrganizationService/GetSSOConfiguration"
tags: ["gitpod.v1.OrganizationService"]
---

# GetSSOConfiguration

`POST /gitpod.v1.OrganizationService/GetSSOConfiguration`

Retrieves a specific SSO configuration.

 Use this method to:
 - View SSO provider details
 - Check configuration status
 - Verify SSO settings

 ### Examples

 - Get SSO configuration:

   Retrieves details of a specific SSO configuration.

   ```yaml
   ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
   ```

## Request body

- GitpodV1GetSSOConfigurationRequest
  - `ssoConfigurationId` string, uuid, required — sso_configuration_id is the ID of the SSO configuration to get

## Response `200`

Success

- GitpodV1GetSSOConfigurationResponse
  - `ssoConfiguration` GitpodV1SSOConfiguration, required
    - `additionalScopes` string[] — additional_scopes are extra OIDC scopes requested from the identity provider during sign-in.
    - `claims` object — claims are key/value pairs that defines a mapping of claims issued by the IdP.
    - `claimsExpression` string — claims_expression is a CEL (Common Expression Language) expression evaluated against the OIDC token claims during login. When set, the expression must evaluate to true for the login to succeed. The expression has access to a `claims` variable containing all token claims as a map. Example: `claims.email_verified && claims.email.endsWith("@example.com")`
    - `clientId` string — client_id is the client ID of the OIDC application set on the IdP
    - `displayName` string
    - `emailDomain` string
    - `emailDomains` string[]
    - `id` string, uuid, required — id is the unique identifier of the SSO configuration
    - `issuerUrl` string, required — issuer_url is the URL of the IdP issuer
    - `organizationId` string, uuid, required
    - `providerType` 'PROVIDER_TYPE_UNSPECIFIED' | 'PROVIDER_TYPE_BUILTIN' | 'PROVIDER_TYPE_CUSTOM', required
    - `state` 'SSO_CONFIGURATION_STATE_UNSPECIFIED' | 'SSO_CONFIGURATION_STATE_INACTIVE' | 'SSO_CONFIGURATION_STATE_ACTIVE', required

## Other responses

- `default` — Error

## Changes

- **2026-04-02** `dabc0ff98cd7` — 1 info
  - added the optional property `ssoConfiguration/claimsExpression` to the response with the `200` status
- **2026-02-11** `b97dcde84128` — 1 info
  - added the optional property `ssoConfiguration/additionalScopes` to the response with the `200` status
- **2025-12-15** `d62ef4b9187c` — 2 info
  - added the optional property `ssoConfiguration/displayName` to the response with the `200` status
  - added the optional property `ssoConfiguration/emailDomains` to the response with the `200` status
- **2025-02-21** `3655d5ad0ac3` — 1 breaking, 9 info
  - the `ssoConfiguration` response's property type/format changed from ``/`` to `object`/`` for status `200`
  - added the optional property `ssoConfiguration/claims` to the response with the `200` status
  - added the optional property `ssoConfiguration/clientId` to the response with the `200` status
  - added the optional property `ssoConfiguration/emailDomain` to the response with the `200` status
  - …6 more
- **2025-02-18** `cd6a05ae99d2` — 1 warning
  - removed the optional property `detail` from the response with the `default` status

[Full history](https://skmtc.dev/gitpod-io/apis/gitpod-v1/changes/gitpod.v1.OrganizationService/GetSSOConfiguration/post.md)

---

[API](https://skmtc.dev/gitpod-io/apis/gitpod-v1.md) · [All operations](https://skmtc.dev/gitpod-io/apis/gitpod-v1/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gitpod-io/gitpod-v1/revisions/44d50c2ac284/schema)