---
title: "GET /orgs/{org_id}/identity-providers"
method: GET
path: "/orgs/{org_id}/identity-providers"
tags: ["orgs"]
---

# GET /orgs/{org_id}/identity-providers

`GET /orgs/{org_id}/identity-providers`

List SSO identity connections for the organization.

## Path parameters

- `org_id` string, required

## Response `200`

Connections listed

- ListIdentityProvidersResBody
  - `identity_providers` IdentityProviderView[], required
    - `allowed_domains` string[], required
    - `client_id` string, nullable — OIDC client id. `null` for non-OIDC kinds.
    - `client_secret_set` boolean, required — Whether a client secret is configured. The secret itself is never returned.
    - `created_at` integer, required
    - `default_role_id` string, nullable — Catch-all role granted to JIT members with no matching group mapping. `null` = no catch-all role.
    - `display_name` string, nullable
    - `enabled` boolean, required
    - `enforced` boolean, required — Read-only here: SSO enforcement isn't configurable via the API yet.
    - `groups_claim` string, nullable
    - `id` string, required
    - `issuer` string, nullable — OIDC issuer. `null` for non-OIDC kinds (e.g. SAML), whose connection details live in kind-specific fields added when those kinds ship.
    - `kind` string, required
    - `org_id` string, required
    - `provider_key` string, required
    - `scopes` string, nullable
    - `updated_at` integer, required

---

[API](https://skmtc.net/timbal-ai/apis/timbal-platform-api.md) · [All operations](https://skmtc.net/timbal-ai/apis/timbal-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/timbal-ai/timbal-platform-api/versions/dd7e398ce0d3/schema)