---
title: "Retrieve SSO Provider"
method: GET
path: "/tenants/{tenant_id}/sso_provider"
tags: ["Users"]
---

# Retrieve SSO Provider

`GET /tenants/{tenant_id}/sso_provider`

Retrieve the provider for Single Sign-On

---

For more on SSO, see [OpenID Connect specification](http://openid.net/developers/specs/) and our [tutorial](https://docs.aurorasolar.com/docs/configure-single-sign-on).

## Path parameters

- `tenant_id` string, uuid, required

## Response `200`

SSO Provider successfully retrieved.

- object
  - `sso_provider` object
    - `provider` string — Name of provider used in URLs
    - `auth_uri` string — Authorization URI
    - `token_uri` string — URI that provides the access and id tokens
    - `openid_key` string — Key used to authenticate with the `token_uri`
    - `openid_secret_last_four` string — Last four characters of the secret used to authenticate with the `token_uri`
    - `openid_discovery_doc_url` string — Discovery document URL. Must contain a jwks_uri
    - `openid_base_url` string — Base URL used to build SSO-enabled links. Contains `provider`
    - `openid_callback_url` string — Callback URL used to handle authorization code. Contains `provider`. Must be added to the identity provider

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found

---

[API](https://skmtc.net/aurorasolar/apis/sync-api.md) · [All operations](https://skmtc.net/aurorasolar/apis/sync-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aurorasolar/sync-api/revisions/5b41808d104d/schema)