---
title: "The org security policy: second factor, IdP trust, accepted sign-in methods (per role), open sign-in, platform lock"
method: GET
path: "/api/orgs/{orgId}/security"
tags: ["security"]
---

# The org security policy: second factor, IdP trust, accepted sign-in methods (per role), open sign-in, platform lock

`GET /api/orgs/{orgId}/security`

## Request

- Base URL: `https://api.wizbi.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.wizbi.ai/api/orgs/{orgId}/security`
- Auth: none declared

## Path parameters

- `orgId` string, required

## Response `200`

OK.

- OrgSecurity
  - `mfa` 'admins' | 'all'
  - `mfaTrustIdp` boolean
  - `signIn` object
    - `methods` string[]
    - `open` boolean
    - `byRole` object
      - `admin` object
        - `methods` string[]
        - `mfa` object
          - `required` boolean
      - `member` object
        - `methods` string[]
        - `mfa` object
          - `required` boolean
  - `externalAgentWrite` boolean
  - `lockedBy` 'platform'
  - `resolved` object, required
    - `admin` object, required
      - `signIn` object, required
        - `allowed` string[], required
        - `unrestricted` boolean, required
        - `disabled` object[], required
          - `method` 'google' | 'microsoft' | 'email_code' | 'phone_code' | 'sso', required
          - `by` 'platform' | 'org' | 'role' | 'module', required
        - `open` boolean, required
      - `mfa` object, required
        - `required` boolean, required
        - `requiredBy` 'platform' | 'org' | 'role' | 'module' | 'null', nullable, required
        - `trustIdp` boolean, required
    - `member` object, required
      - `signIn` object, required
        - `allowed` string[], required
        - `unrestricted` boolean, required
        - `disabled` object[], required
          - `method` 'google' | 'microsoft' | 'email_code' | 'phone_code' | 'sso', required
          - `by` 'platform' | 'org' | 'role' | 'module', required
        - `open` boolean, required
      - `mfa` object, required
        - `required` boolean, required
        - `requiredBy` 'platform' | 'org' | 'role' | 'module' | 'null', nullable, required
        - `trustIdp` boolean, required
  - `offered` string[], required
  - `ssoReady` boolean, required

---

[API](https://skmtc.dev/wizbi/apis/wizbi-core-api.md) · [All operations](https://skmtc.dev/wizbi/apis/wizbi-core-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wizbi/apis/wizbi-core-api/revisions/5a47416c82ec?raw)