Skip to main content
GET
Get an organization's OIDC connection

Authorizations

Authorization
string
header
required

A personal access token (POST /v1/auth/tokens) or a machine identity token (POST /v1/projects/{project_id}/identities/{identity_id}/tokens), both prefixed qumo_pat_. A token's scopes cap what it can do; see Scopes and permissions. A personal token names no organization: on a route whose path names no project or organization, pass ?organization_id=.

Path Parameters

id
string<uuid>
required

The organization's id.

Response

The organization's connection.

id
string<uuid>
required
Example:

"8b1d3f5a-2c4e-4f6a-8b0d-1e3f5a7c9b2d"

organization_id
string<uuid>
required
Example:

"3f8c2a1e-7b4d-4e9a-9c61-2d5e8f0a1b7c"

protocol
enum<string>
required
Available options:
oidc
issuer
string<uri>
required
Example:

"https://acme.okta.com"

client_id
string
required
Example:

"0oa8f2k3l9XyZ1abc357"

client_secret
object
required

What the API says about the client secret; never the secret itself.

scopes
string[]
required
Example:
claims
object
required

The ID token claims read for each attribute, by name.

status
enum<string>
required

draft until activated: a draft connection can be tested but is not used to sign in. active once a test login of the current configuration passed and it was activated. disabled when turned off.

Available options:
draft,
active,
disabled
redirect_uri
string<uri>
required

The redirect URI to register at the IdP.

Example:

"https://console.qumo-deploy.com/oauth/sso/callback"

created_at
string<date-time>
required
updated_at
string<date-time>
required
last_tested_at
string<date-time> | null
required

When the current configuration last finished a test login; cleared when the configuration changes.

last_test_succeeded_at
string<date-time> | null
required

When the current configuration last passed a test login.

last_test_result
enum<string>

The last test login's result; absent before the first.

Available options:
passed,
exchange_failed,
invalid_token,
email_missing,
email_unverified,
discovery_failed,
configuration_changed,
idp_denied