---
title: "The org identity provider, its domains, the SP details and the SCIM state"
method: GET
path: "/api/orgs/{orgId}/sso"
tags: ["sso"]
---

# The org identity provider, its domains, the SP details and the SCIM state

`GET /api/orgs/{orgId}/sso`

## Request

- Base URL: `https://api.wizbi.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.wizbi.ai/api/orgs/{orgId}/sso`
- Auth: none declared

## Path parameters

- `orgId` string, required

## Response `200`

OK.

- SsoView
  - `config` object, nullable, required
    - `orgId` string, required
    - `enabled` boolean
    - `protocol` 'saml' | 'oidc'
    - `providerId` string
    - `preset` 'entra' | 'google_workspace' | 'oidc' | 'saml'
    - `entra` object
      - `tid` string, required
    - `googleWorkspace` object
      - `customerId` string, required
      - `primaryDomain` string
    - `saml` object
      - `idpEntityId` string, required
      - `ssoUrl` string, uri, required
      - `certificates` string[], required
    - `oidc` object
      - `issuer` string, uri, required
      - `clientId` string, required
      - `hasSecret` boolean
    - `required` boolean
    - `jit` object
      - `enabled` boolean
      - `role` 'org_admin' | 'member'
      - `groupIds` string[]
    - `domains` object[]
      - `domain` string, required
      - `token` string, required
      - `verified` boolean
      - `verifiedAt` string, date-time
      - `verifiedBy` string
      - `verifiedVia` 'dns' | 'super_admin' | 'microsoft_tenant' | 'google_workspace'
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `updatedBy` string
  - `serviceProvider` object, required
    - `entityId` string, required
    - `acsUrl` string, required
    - `redirectUri` string, required
  - `available` boolean, required
  - `status` 'connected' | 'attention' | 'available', required
  - `attentionReason` 'microsoft_disconnected' | 'google_workspace_disconnected' | 'no_verified_domains' | 'disabled'
  - `scim` object, required
    - `available` boolean, required
    - `enabled` boolean, required
    - `baseUrl` string, required
    - `prefix` string
    - `createdAt` string
    - `lastUsedAt` string

## Other responses

- `403`: Insufficient role.

---

[API](https://skmtc.dev/wizbi/apis/wizbi-core-api.md) · [All operations](https://skmtc.dev/wizbi/apis/wizbi-core-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wizbi/apis/wizbi-core-api/revisions/5a47416c82ec?raw)