---
title: "Get Identity Provider"
method: GET
path: "/v3/portals/{portalId}/identity-providers/{id}"
tags: ["Portal Auth Settings"]
---

# Get Identity Provider

`GET /v3/portals/{portalId}/identity-providers/{id}`

## Request

- Base URL: `https://global.api.konghq.com`
- URL: `https://global.api.konghq.com/v3/portals/{portalId}/identity-providers/{id}`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Retrieves the configuration of a single identity provider. This operation returns information about a
specific identity provider's settings and authentication integration details.

## Response `200`

An identity provider configuration. This response represents the configuration of a specific identity provider, which can be either OIDC or SAML.

- PortalIdentityProvider: The identity provider that contains configuration data for authentication integration.
  - `id` string, uuid: Contains a unique identifier used for this resource.
  - `type` 'oidc' | 'saml': Specifies the type of identity provider.
  - `enabled` boolean: Indicates whether the identity provider is enabled. Only one identity provider can be active at a time, such as SAML or OIDC.
  - `config` union
    - object: The identity provider that contains configuration data for the OIDC authentication integration.
      - `issuer_url` string, uri, required: The issuer URI of the identity provider. This is the URL where the provider's metadata can be obtained.
      - `client_id` string, required: The client ID assigned to your application by the identity provider.
      - `client_secret` string: The Client Secret assigned to your application by the identity provider.
      - `scopes` string[]: The scopes requested by your application when authenticating with the identity provider.
      - `claim_mappings` OIDCIdentityProviderClaimMappings: Defines the mappings between OpenID Connect (OIDC) claims and local claims used by your application for authentication.
        - `name` string: The claim mapping for the user's name.
        - `email` string: The claim mapping for the user's email address.
        - `groups` string: The claim mapping for the user's group membership information.
    - object: The identity provider that contains configuration data for the SAML authentication integration.
      - `idp_metadata_url` string, uri: The identity provider's metadata URL where the identity provider's metadata can be obtained.
      - `idp_metadata_xml` string: The identity provider's SAML metadata. If the identity provider supports a metadata URL, you can use the `idp_metadata_url` field instead.
      - `sp_metadata_url` string, path
      - `sp_entity_id` string: The entity ID of the service provider (SP).
      - `callback_url` string, path: The path URL where the SAML identity provider sends authentication responses after successful login attempts.
  - `created_at` string, date-time: An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time: An ISO-8601 timestamp representation of entity update date.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found

## Changes

- **2026-10-15** `7aab863a6daa`: 1 breaking, 2 warning
  - added `#/components/schemas/InvalidParameterMinimumTime, #/components/schemas/InvalidParameterMaximumTime` to the `invalid_parameters/items/` response property `oneOf` list for the response status `400`
  - added the new `key_invalid` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
  - added the new `unique` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
- **2026-09-25** `68d43091b84d`: 3 warning
  - added the new `400.00` enum value to the `status` response property for the response status `400`
  - added the new `403.00` enum value to the `status` response property for the response status `403`
  - added the new `404.00` enum value to the `status` response property for the response status `404`
- **2026-09-18** `f324fb7610e4`: 3 breaking, 24 info
  - the response's body type changed from no type to `object` for status `400`
  - the response's body type changed from no type to `object` for status `403`
  - the response's body type changed from no type to `object` for status `404`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `400`
  - …23 more
- …earlier changes not shown

[Operation history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v3/portals/:portalId/identity-providers/:id/get.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-go-sdk/revisions/7aab863a6daa?raw)