curl --request GET \
--url https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"enforce_sso": true,
"mfa_policy": "none",
"accepted_acr_values": [
"phrh"
],
"break_glass_user_id": "8b1d4c2e-5f6a-4b7c-9d8e-0f1a2b3c4d5e",
"connection_status": "active"
}{
"error": "organization_id is required"
}{
"error": "organization_id is required"
}{
"error": "organization_id is required"
}{
"error": "organization_id is required"
}Get an organization's SSO policy
Returns the organization’s single sign-on policy: enforced SSO, the
MFA policy, the accepted acr values and the break-glass
administrator, with the connection’s status. The policy applies only
while the connection is active. 404 when the organization has no
OIDC connection.
curl --request GET \
--url https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.qumo-deploy.com/v1/organizations/{id}/sso/policy")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"enforce_sso": true,
"mfa_policy": "none",
"accepted_acr_values": [
"phrh"
],
"break_glass_user_id": "8b1d4c2e-5f6a-4b7c-9d8e-0f1a2b3c4d5e",
"connection_status": "active"
}{
"error": "organization_id is required"
}{
"error": "organization_id is required"
}{
"error": "organization_id is required"
}{
"error": "organization_id is required"
}Authorizations
A personal access token (POST /v1/auth/tokens) or a machine
identity token (POST /v1/projects/{project_id}/identities/{identity_id}/tokens),
both prefixed qumo_pat_. A token's scopes cap what it can do; see
Scopes and permissions. A personal
token names no organization: on a route whose path names no project or
organization, pass ?organization_id=.
Path Parameters
The organization's id.
Response
The organization's policy.
An organization's single sign-on policy. It is kept on the OIDC
connection and applies only while the connection is active.
Whether the organization's managed accounts must sign in through its IdP. Their Google and GitHub sign-ins are refused, except the break-glass administrator's.
true
Who must prove a second factor at the IdP to sign in through the
connection: nobody, Organization Admins, or everyone. Proof is an
amr value naming a second factor (mfa, mca, otp, hwk,
swk, sc, fpt, face, iris, retina, vbm) or an acr
in accepted_acr_values; missing claims prove nothing.
none, admins, all The acr values that prove MFA at this IdP.
["phrh"]
The Organization Admin exempt from enforced SSO, who signs in with Google or GitHub and Qumo TOTP; null for none.
"8b1d4c2e-5f6a-4b7c-9d8e-0f1a2b3c4d5e"
The connection's status. The policy applies only while it is active.
draft, active, disabled "active"