---
title: "Get"
method: GET
path: "/api/v1/step-up/providers/{id}"
tags: ["Step Up Authentication Providers"]
---

# Get

`GET /api/v1/step-up/providers/{id}`

Get retrieves a single step-up authentication provider by its ID.

## Path parameters

- `id` string, required — The unique identifier of the step-up provider to retrieve.

## Response `200`

Successful response

- C1ApiStepupV1GetStepUpProviderResponse — The GetStepUpProviderResponse message.
  - `stepUpProvider` C1ApiStepupV1StepUpProvider — StepUpProvider represents a configured step-up authentication integration (e.g., Duo, custom OIDC). This message contains a oneof named settings. Only a single field of the following list may be set at a time: - oauth2 - microsoft
    - `clientId` string — The OAuth2 client ID used to authenticate with the step-up provider.
    - `createdAt` string, date-time
    - `displayName` string — The human-readable name of the step-up provider.
    - `enabled` boolean — Whether the step-up provider is active and available for use.
    - `id` string — The unique identifier of the step-up provider.
    - `issuerUrl` string — The OIDC issuer URL for the step-up provider.
    - `lastTestedAt` string, date-time
    - `microsoft` C1ApiStepupV1StepUpMicrosoftSettings, nullable — StepUpMicrosoftSettings configures a Microsoft Entra step-up provider using Conditional Access.
      - `conditionalAccessIds` string[], nullable — Authentication context IDs (C1-C99). Required for ACRS mode; ignored for OIDC mode.
      - `tenant` string — Microsoft Entra tenant ID (GUID or domain). Used for response validation.
      - `validationMode` 'MICROSOFT_VALIDATION_MODE_UNSPECIFIED' | 'MICROSOFT_VALIDATION_MODE_ACRS' | 'MICROSOFT_VALIDATION_MODE_OIDC' — Validation approach. See MicrosoftValidationMode for details on each mode.
    - `oauth2` C1ApiStepupV1StepUpOAuth2Settings, nullable — StepUpOAuth2Settings repersents an OAuth2 provider that supports RFC 9470 <https://www.rfc-editor.org/rfc/rfc9470> Common ACR values for OAuth2 providers include: - "urn:okta:loa:1fa:any" (okta) - "urn:okta:loa:1fa:pwd" (okta) - "urn:okta:loa:2fa:any" (okta) - "urn:okta:loa:2fa:any:ifpossible" (okta) - "phr" (okta) - "phrh" (okta)
      - `acrValues` string[], nullable — The acrValues field.
    - `updatedAt` string, date-time

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)