---
title: "List Identity Providers"
method: GET
path: "/v3/portals/{portalId}/identity-providers"
tags: ["Portal Auth Settings"]
---

# List Identity Providers

`GET /v3/portals/{portalId}/identity-providers`

## Request

- Base URL: `https://global.api.konghq.com`
- URL: `https://global.api.konghq.com/v3/portals/{portalId}/identity-providers`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

Retrieves the identity providers available within the portal. This operation provides information about
various identity providers for SAML or OIDC authentication integrations.

## Query parameters

- `filter` object
  - `type` StringFieldEqualsFilter: Filters on the given string field value by exact match.
    - `eq` string

## Response `200`

A collection of identity providers. This response contains a collection of identity providers, which may  include both OIDC and SAML identity providers.

- PortalIdentityProvider[]
  - `id` string, uuid: Contains a unique identifier used for this resource.
  - `type` 'oidc' | 'saml': Specifies the type of identity provider.
  - `enabled` boolean: Indicates whether the identity provider is enabled. Only one identity provider can be active at a time, such as SAML or OIDC.
  - `config` union
    - object: The identity provider that contains configuration data for the OIDC authentication integration.
      - `issuer_url` string, uri, required: The issuer URI of the identity provider. This is the URL where the provider's metadata can be obtained.
      - `client_id` string, required: The client ID assigned to your application by the identity provider.
      - `client_secret` string: The Client Secret assigned to your application by the identity provider.
      - `scopes` string[]: The scopes requested by your application when authenticating with the identity provider.
      - `claim_mappings` OIDCIdentityProviderClaimMappings: Defines the mappings between OpenID Connect (OIDC) claims and local claims used by your application for authentication.
        - `name` string: The claim mapping for the user's name.
        - `email` string: The claim mapping for the user's email address.
        - `groups` string: The claim mapping for the user's group membership information.
    - object: The identity provider that contains configuration data for the SAML authentication integration.
      - `idp_metadata_url` string, uri: The identity provider's metadata URL where the identity provider's metadata can be obtained.
      - `idp_metadata_xml` string: The identity provider's SAML metadata. If the identity provider supports a metadata URL, you can use the `idp_metadata_url` field instead.
      - `sp_metadata_url` string, path
      - `sp_entity_id` string: The entity ID of the service provider (SP).
      - `callback_url` string, path: The path URL where the SAML identity provider sends authentication responses after successful login attempts.
  - `created_at` string, date-time: An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time: An ISO-8601 timestamp representation of entity update date.

## Other responses

- `401`: Unauthorized
- `403`: Forbidden

## Changes

- **2026-09-25** `68d43091b84d`: 1 warning
  - added the new `403.00` enum value to the `status` response property for the response status `403`
- **2026-09-18** `f324fb7610e4`: 1 breaking, 11 info
  - the response's body type changed from no type to `object` for status `403`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `401`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `403`
  - added the optional property `type` to the response with the `403` status
  - …8 more
- **2026-05-20** `ccc33535acb5`: 1 breaking, 1 warning, 1 info
  - added `#/components/schemas/PortalSAMLIdentityProviderConfig` to the `items/config` response property `oneOf` list for the response status `200`
  - removed the optional property `items/login_path` from the response with the `200` status
  - removed `#/components/schemas/SAMLIdentityProviderConfig` from the `items/config` response property `oneOf` list for the response status `200`
- **2026-02-20** `8715e5b7ad96`: 1 info
  - added the optional write-only property `items/config/oneOf[subschema #1: OIDC Identity Provider Config]/client_secret` to the response with the `200` status
- **2025-09-11** `396c243e49dc`: 1 warning
  - for the `query` request parameter `filter`, the type of property `type` changed from `string` to no type

[Operation history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v3/portals/:portalId/identity-providers/get.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc.dev/kong/apis/konnect-api-go-sdk/revisions/7aab863a6daa?raw)