---
title: "Get Identity Provider"
method: GET
path: "/v3/identity-providers/{id}"
tags: ["Auth Settings"]
---

# Get Identity Provider

`GET /v3/identity-providers/{id}`

Retrieves the configuration of a single identity provider. This operation returns information about a
specific identity provider's settings and authentication integration details.

## Response `200`

An identity provider configuration. This response represents the configuration of a specific identity provider, which can be either OIDC or SAML.

- IdentityProvider — The identity provider that contains configuration data for authentication integration.
  - `id` string, uuid — Contains a unique identifier used for this resource.
  - `type` 'oidc' | 'saml' — Specifies the type of identity provider.
  - `enabled` boolean — Indicates whether the identity provider is enabled. Only one identity provider can be active at a time, such as SAML or OIDC.
  - `login_path` string — The path used for initiating login requests with the identity provider.
  - `config` union
    - object — The identity provider that contains configuration data for the OIDC authentication integration.
      - `issuer_url` string, uri, required — The issuer URI of the identity provider. This is the URL where the provider's metadata can be obtained.
      - `client_id` string, required — The client ID assigned to your application by the identity provider.
      - `client_secret` string — The Client Secret assigned to your application by the identity provider.
      - `scopes` string[] — The scopes requested by your application when authenticating with the identity provider.
      - `claim_mappings` OIDCIdentityProviderClaimMappings — Defines the mappings between OpenID Connect (OIDC) claims and local claims used by your application for authentication.
        - `name` string — The claim mapping for the user's name.
        - `email` string — The claim mapping for the user's email address.
        - `groups` string — The claim mapping for the user's group membership information.
    - object — The identity provider that contains configuration data for the SAML authentication integration.
      - `idp_metadata_url` string, uri — The identity provider's metadata URL where the identity provider's metadata can be obtained.
      - `idp_metadata_xml` string — The identity provider's SAML metadata. If the identity provider supports a metadata URL, you can use the `idp_metadata_url` field instead.
      - `sp_metadata_url` string, uri
      - `sp_entity_id` string — The entity ID of the service provider (SP).
      - `login_url` string — The URL to redirect users to for initiating login with the identity provider.
      - `callback_url` string, uri — The URL where the SAML identity provider sends authentication responses after successful login attempts.
  - `created_at` string, date-time — An ISO-8601 timestamp representation of entity creation date.
  - `updated_at` string, date-time — An ISO-8601 timestamp representation of entity update date.

## Other responses

- `400` — Bad Request
- `401` — Unauthenticated
- `403` — Permission denied
- `404` — Not Found

---

[API](https://skmtc.net/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.net/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/kong/konnect-api-go-sdk/versions/0261aef4b1e2/schema)