1. Docs
  2. API Reference
  3. OrganizationSsoConnectionDetailResponseDto

OrganizationSsoConnectionDetailResponseDto

Example

JSON
{
  "connection": {
    "id": "string",
    "account_id": "string",
    "scope": "admin",
    "type": "saml",
    "name": "string",
    "status": "configuring",
    "owner_organization_node_id": "string",
    "owned_by_organization": false,
    "saml_metadata_url": "string",
    "last_test_sign_in": {
      "test_id": "string",
      "outcome": "success",
      "reason": "string",
      "email": "string",
      "domain_outcome": "accepted",
      "completed_at": "2026-04-20T12:00:00.000Z"
    },
    "saml_entity_id": "string",
    "saml_sso_url": "string",
    "saml_slo_url": "string",
    "saml_signing_cert": "string",
    "saml_signature_algorithm": "string",
    "saml_want_assertions_signed": false,
    "saml_name_id_format": "string",
    "force_authn": false,
    "oidc_discovery_url": "string",
    "oidc_client_id": "string",
    "oidc_scopes": [
      "string"
    ],
    "has_oidc_client_secret": false,
    "jit_provisioning_enabled": false,
    "attribute_mapping": {},
    "last_login_at": "2026-04-20T12:00:00.000Z",
    "created_at": "2026-04-20T12:00:00.000Z",
    "updated_at": "2026-04-20T12:00:00.000Z",
    "version": 0
  },
  "default_role": {
    "id": "string",
    "name": "string"
  },
  "owned_by_organization": false,
  "service_provider": {
    "protocol": "saml",
    "acs_url": "string",
    "entity_id": "string",
    "metadata_url": "string",
    "redirect_uri": "string"
  },
  "certificate_expiry": {
    "expires_at": "string",
    "days_remaining": 0,
    "expired": false,
    "expiring_soon": false
  }
}

Properties

5 properties 3 required

connection SsoConnectionResponseDto Required
default_role object Optional

The membership role a sign-in joins with. `null` until chosen; activation requires one.

nullable
owned_by_organization boolean Required

True when the organization set the connection up itself; false when the developer manages it from the Console, in which case its configuration, activation, and removal are refused here.

service_provider ServiceProviderDetailsResponseDto Required
certificate_expiry object Optional

When the SAML signing certificate runs out. Null for an OIDC connection, and for a certificate that cannot be read.

nullable
Was this page helpful?

Tell us how we can improve this guide.

Canopy