Vendors

Get a vendor's SSO capabilities

Changed on

Full auth capabilities for one vendor — flows, scopes, classifications.

Never returns client_secret (authorization-code flow's secret is stripped at response build time). UnknownVendorError maps to a 404 problem detail via the handler registered in control/web/app.py.

get/vendors/{vendor_key}/auth-capabilities

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /vendors/{vendor_key}/auth-capabilities
  • Auth: HTTP bearer

Path parameters

vendor_keystring required

Query parameters

oauth_app_registration_idstring nullable

Pin to a specific admin-registered OAuth app when the vendor has more than one. Returns that registration's scopes + client_id, so the picker's tile and the connect payload stay aligned.

Response

Successful Response

unknown required

Changes