---
title: "GET /endpoints/agents/psso/register/device/"
method: GET
path: "/endpoints/agents/psso/register/device/"
tags: ["endpoints"]
---

# GET /endpoints/agents/psso/register/device/

`GET /endpoints/agents/psso/register/device/`

## Request

- Base URL: `https://api.goauthentik.io/api/v3`
- URL: `https://api.goauthentik.io/api/v3/endpoints/agents/psso/register/device/`
- Auth: HTTP bearer+agent
- TypeScript: <https://skmtc.dev/goauthentik/apis/authentik/docs/endpoints/agents/psso/register/device/get.ts> (a function with typed inputs; its response is checked against the schema)

## Response `200`

- AgentPSSODeviceState: What authentik currently has stored for this device's Platform SSO registration, so the client can detect drift and repair it
  - `device_registered` boolean, required
  - `sign_key_id` string, required
  - `enc_key_id` string, required
  - `users` AgentPSSODeviceStateUser[], required
    - `username` string, required
    - `enclave_key_id` string, required

## Other responses

- `400`
- `403`

## Changes

- **2026-11-02** `9f3416dd75c8`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/goauthentik/apis/authentik/changes/endpoints/agents/psso/register/device/get.md)

---

[API](https://skmtc.dev/goauthentik/apis/authentik.md) - [All operations](https://skmtc.dev/goauthentik/apis/authentik/llms.txt) - [OpenAPI document](https://skmtc.dev/goauthentik/apis/authentik/revisions/536208a3af61?raw)