---
title: "Get Auth Settings"
method: GET
path: "/v3/portals/{portalId}/authentication-settings"
tags: ["Portal Auth Settings"]
---

# Get Auth Settings

`GET /v3/portals/{portalId}/authentication-settings`

## Request

- Base URL: `https://global.api.konghq.com`
- URL: `https://global.api.konghq.com/v3/portals/{portalId}/authentication-settings`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Returns the developer authentication configuration for a portal, which determines how developers can log in and how they are assigned to teams.

## Response `200`

Details about a portal's authentication settings.

- PortalAuthenticationSettingsResponse: The developer authentication settings for a portal.
  - `basic_auth_enabled` boolean, required: The portal has basic auth enabled or disabled.
  - `oidc_auth_enabled` boolean, required: The portal has OIDC enabled or disabled.
  - `saml_auth_enabled` boolean: A Konnect Identity Admin assigns teams to a developer.
  - `oidc_team_mapping_enabled` boolean, required: IdP groups determine the Portal Teams a developer has. Replaced by idp_mapping_enabled.
  - `idp_mapping_enabled` boolean: Whether IdP groups determine the Konnect Portal teams a developer has.
  - `konnect_mapping_enabled` boolean, required: A Konnect Identity Admin assigns teams to a developer.
  - `oidc_config` object: Configuration properties for an OpenID Connect Identity Provider.
    - `issuer` string, required
    - `client_id` string, required
    - `scopes` string[]
    - `claim_mappings` PortalClaimMappings: Mappings from a portal developer atribute to an Identity Provider claim.
      - `name` string
      - `email` string
      - `groups` string

## Other responses

- `401`: Unauthorized

## Changes

- **2026-09-18** `f324fb7610e4`: 5 info
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `401`
  - the response property `detail` became required for the status `401`
  - the response property `instance` became required for the status `401`
  - the response property `status` became required for the status `401`
  - …1 more
- **2026-01-29** `0c2eede22268`: 1 info
  - the response optional property `oidc_config` became read-only for the status `200`
- **2025-12-03** `581456e3279f`: 4 info
  - response property `oidc_auth_enabled` deprecated
  - response property `oidc_config` deprecated
  - response property `oidc_team_mapping_enabled` deprecated
  - response property `saml_auth_enabled` deprecated
- **2025-08-22** `3c0154b2053a`: 6 breaking, 5 info
  - the response property `detail` became nullable for the status `401`
  - the response property `idp_mapping_enabled` became nullable for the status `200`
  - the response property `instance` became nullable for the status `401`
  - the response property `saml_auth_enabled` became nullable for the status `200`
  - …7 more
- …earlier changes not shown

[Operation history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v3/portals/:portalId/authentication-settings/get.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-go-sdk/revisions/7aab863a6daa?raw)