---
title: "Get the SSO configuration for a site"
method: GET
path: "/shop/sites/{siteId}/shop-config/sso"
tags: ["Sites"]
---

# Get the SSO configuration for a site

`GET /shop/sites/{siteId}/shop-config/sso`

This endpoint retrieves the SSO configuration for a specific site.

## Response `200`

The SSO configuration for the site.

- object
  - `data` SsoConfig, required
    - `id` string, uuid, required — The ID of the SSO configuration.
    - `site_id` string, uuid, required — The ID of the site.
    - `type` string, required — The type of SSO configuration.
    - `enabled` boolean, required — Whether the SSO configuration is enabled.
    - `authorize_url` string, required — The URL to redirect to for authorization.
    - `credentials` object, required — The encrypted credentials required for the SSO configuration.
      - `client_id` string — The client ID for the SSO configuration.
      - `has_client_secret` boolean — Whether the SSO configuration has a client secret.
      - `masked_client_secret` string — The masked client secret for the SSO configuration.
      - `additional_authorize_query_params` object[] — Additional query parameters to include in the authorization request.
        - `key` string — The key of the additional query parameter.
        - `value` string — The value of the additional query parameter.
      - `additional_token_query_params` object[] — Additional query parameters to include in the token request.
        - `key` string — The key of the additional query parameter.
        - `value` string — The value of the additional query parameter.
    - `token_url` string, required — The URL to request an access token.
    - `user_info_url` string, required — The URL to request user information.
    - `scopes` string[], required — The scopes to request during authorization.
    - `include_existing_url_params` boolean — Whether to include existing URL parameters in the authorization request.
    - `token_request_style` 'form_params' | 'json' — The style of the token request.
    - `user_mappings` object[] — Mappings of user information fields.
      - `key` string — The key of the user information field.
      - `fields` string[] — The fields to map to the user information field.
    - `created_at` string, date-time, required — The date and time when the SSO configuration was created.
    - `updated_at` string, date-time, required — The date and time when the SSO configuration was last updated.

## Other responses

- `401` — The user is unauthenticated
- `404` — The resource couldn't be found

---

[API](https://skmtc.dev/try/apis/trybe-api.md) · [All operations](https://skmtc.dev/try/apis/trybe-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/try/trybe-api/revisions/f37f92702da5/schema)