---
title: "GET /api/v1/identity-templates"
method: GET
path: "/api/v1/identity-templates"
---

# GET /api/v1/identity-templates

`GET /api/v1/identity-templates`

Get identity auth templates by authentication method

## Query parameters

- `authMethod` 'ldap' | 'kubernetes', required

## Response `200`

Default Response

- union[]
  - union
    - object
      - `id` string, uuid, required
      - `templateFields` object, required
        - `url` string
        - `bindDN` string
        - `searchBase` string
        - `ldapCaCertificate` string
        - `hasBindPass` boolean, required — Whether a bind password is stored for this template
      - `orgId` string, uuid, required
      - `name` string, required
      - `authMethod` 'ldap', required
      - `createdAt` string, date-time, required
      - `updatedAt` string, date-time, required
    - object
      - `id` string, uuid, required
      - `templateFields` object, required
        - `tokenReviewMode` 'api' | 'gateway' — The mode to use for token review. Must be one of: 'api', 'gateway'
        - `kubernetesHost` string, nullable — The host string, host:port pair, or URL to the base of the Kubernetes API server
        - `caCert` string — The PEM-encoded CA certificate used to validate the Kubernetes API server's TLS certificate
        - `verifyTlsCertificate` boolean — Whether to verify the Kubernetes API server's TLS certificate against the configured CA certificate
        - `gatewayId` string, uuid, nullable — The ID of the gateway to use when performing Kubernetes API requests
        - `gatewayPoolId` string, uuid, nullable — The ID of the gateway pool to use when performing Kubernetes API requests
        - `allowedAudience` string — The optional audience claim that service account JWT tokens must have to authenticate with Infisical
        - `hasTokenReviewerJwt` boolean, required — Whether a token reviewer JWT is stored for this template
      - `orgId` string, uuid, required
      - `name` string, required
      - `authMethod` 'kubernetes', required
      - `createdAt` string, date-time, required
      - `updatedAt` string, date-time, required

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

## Changes

- **2026-08-31** `763e38e78337` — 8 breaking, 2 info
  - the `items/` response's property type/format changed from `object`/`` to ``/`` for status `200`
  - removed the required property `items/authMethod` from the response with the `200` status
  - removed the required property `items/createdAt` from the response with the `200` status
  - removed the required property `items/id` from the response with the `200` status
  - …6 more

[Change history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/identity-templates/get.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) · [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/infisical/infisical-api/revisions/763e38e78337/schema)