Users

Retrieve a user's enterprise SSO identity and associated token secret (if token storage is enabled).

Changed on

This API retrieves the user's enterprise SSO identity and associated token set record from the Logto Secret Vault. The token set will only be available if token storage is enabled for the corresponding SSO connector.

get/api/users/{userId}/sso-identities/{ssoConnectorId}

Request

  • Base URL: https://[tenant_id].logto.app
  • URL: https://[tenant_id].logto.app/api/users/{userId}/sso-identities/{ssoConnectorId}
  • Auth: OAuth 2 (client credentials, token URL /oidc/token, scopes: all)

Path parameters

userIdstring required

The unique identifier of the user.

ssoConnectorIdstring required

The unique identifier of the sso connector.

Query parameters

includeTokenSecretstring

Whether to include the token secret in the response. Defaults to false. Token storage must be supported and enabled by the connector to return the token secret.

Response

Returns the user's enterprise SSO identity and associated token secret.

Changes

  • f6be196bc327Revision changes
    • breaking

      the / response property's maxLength was increased from 12 to 128 for the response status

    • breaking

      the / response property's maxLength was increased from 21 to 128 for the response status