---
title: "Get team SSO configuration"
method: GET
path: "/api/user/teams/{id}/sso"
tags: ["Teams"]
---

# Get team SSO configuration

`GET /api/user/teams/{id}/sso`

## Request

- Base URL: `https://demo.hitkeep.com`
- URL: `https://demo.hitkeep.com/api/user/teams/{id}/sso`
- Auth: API key in cookie `hk_token`

Returns the team's redacted OIDC configuration and callback URL. The client secret is never returned.

## Path parameters

- `id` string, uuid, required

## Response `200`

Redacted team SSO configuration

- TeamSSOConfig: Redacted team OIDC configuration. The client secret is never returned.
  - `allowed_domains` string[], required
  - `auto_provision` boolean, required
  - `callback_url` string, uri, required
  - `client_id` string, required
  - `client_secret_configured` boolean, required
  - `display_name_claim` string, required
  - `email_claim` string, required
  - `enabled` boolean, required
  - `issuer_url` string, uri, required
  - `provider_type` 'oidc', required
  - `updated_at` string, date-time

## Other responses

- `403`: Team settings permission or SSO entitlement required

---

[API](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api.md) · [All operations](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/revisions/bb2df36ab2a4?raw)