---
title: "List SAML service provider certificates (Beta)"
method: GET
path: "/v2/saml/service-providers/{samlServiceProviderId}/certificates"
tags: ["SAML"]
---

# List SAML service provider certificates (Beta)

`GET /v2/saml/service-providers/{samlServiceProviderId}/certificates`

## Request

- Base URL: `https://api.sigmacomputing.com`
- URL: `https://api.sigmacomputing.com/v2/saml/service-providers/{samlServiceProviderId}/certificates`
- Auth: HTTP bearer

List all certificates for a given SAML service provider.

**Beta**: This documentation describes a public beta feature and is subject to the [Beta features](/docs/sigma-product-releases#beta-features) disclaimer.

### Usage notes
- To perform this operation, you must use API credentials owned by a user assigned the Admin account type.
- Retrieve the `samlServiceProviderId` by calling the [/saml/service-providers](https://help.sigmacomputing.com/reference/list-saml-service-providers) endpoint.

## Path parameters

- `samlServiceProviderId` string, required

## Query parameters

- `pageToken` string
- `pageSize` integer

## Response `200`

The response body.

- SamlListSamlServiceProviderCertificatesResponse200
  - `entries` V2SamlServiceProvidersSamlServiceProviderIdCertificatesGetResponsesContentApplicationJsonSchemaEntriesItems[], required: Array of results returned by the endpoint
    - `samlServiceProviderCertificateId` string, required: Unique identifier of the SAML service provider certificate
    - `samlServiceProviderId` string, required: Unique identifier of the SAML service provider
    - `purpose` 'signing' | 'encryption', required: Purpose of the certificate. Use `signing` for signing SAML requests and `encryption` for encrypting SAML responses.
    - `publicKeyCertificate` string, required: PEM-encoded X.509 certificate
    - `isActive` boolean, required: Whether the certificate is currently active
    - `notBefore` string, date-time, required: Date and time when the certificate becomes valid
    - `notAfter` string, date-time, required: Date and time when the certificate expires
    - `createdAt` string, date-time, required: When the certificate was created
    - `createdBy` string, required: Identifier of the user who created the certificate
    - `updatedAt` string, date-time, required: When the certificate was last updated
    - `updatedBy` string, required: Identifier of the user who last updated the certificate
  - `nextPageToken` string: A string that can be passed to the `pageToken` parameter in the next request to fetch the next page of results. Not present in the last page of results. **Must be treated as an opaque string.**

---

[API](https://skmtc.dev/sigmacomputing/apis/sigma-rest-api.md) - [All operations](https://skmtc.dev/sigmacomputing/apis/sigma-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sigmacomputing/apis/sigma-rest-api/revisions/fb6036208c49?raw)