SsoConnectionView
An organization's SSO connection, with secrets withheld.
Shape
attribute_mappingSsoAttributeMapping
- The SsoAttributeMapping schema
- emailstringThe claim or attribute carrying the person's email address. Defaults to
email. - groupsstring or nulloptionalThe claim listing the person's groups at the identity provider, if any. Teams linked to those groups follow it.
- usernamestring or nulloptionalThe claim a new account's username is derived from, if any.
- auto_provisionboolean
- cognito_idp_nameSsoIdpName (string)The name the identity provider is registered under for sign-in.
- created_atstring
default_roleRoleViewThe role newcomers are given at the top-level group.
- The RoleView schema
- namestringThe role's display name: a built-in name such as
Developer, or the custom role's name. - rankAccessLevelguestreporterdevelopermaintainerownerThe built-in rank the role counts as wherever a rank is compared, such as a protected branch's minimum.
- builtinAccessLevelguestreporterdevelopermaintainerowneror nulloptionalSet when the role is built in.
- customRoleId (string · uuid) or nulloptionalSet when the role is one the organization defined.
- enforcedboolean
- idp_sync_max_age_daysinteger · int320–∞Days a place on a team linked to an identity-provider group lasts without the person signing in again.
- protocolSsoProtocolsamloidcThe IdP protocol an org's connection speaks.
- root_group_idGroupId (string · uuid)
- statusSsoConnectionStatuspendingprovisioningactivefaileddisabledWhere an organization's SSO connection is in being set up. A connection left
provisioningorfailedis retried by saving the connection again. - updated_atstring
- verified_domainsarray of Domain (string)
created_byActorSummary or nulloptional
- The ActorSummary schema
- emailstring
- idstring
- usernamestring
- avatar_urlstring or nulloptional
- last_provision_errorstring or nulloptional
oidcOidcConfigView or nulloptional
- The OidcConfigView schema
- client_secret_setboolean
- scopesarray of string
- client_idstring or nulloptional
- issuer_urlstring or nulloptional
samlSamlConfigView or nulloptional
- The SamlConfigView schema
- metadata_xml_setbooleanWhether a SAML metadata document was supplied directly rather than by URL.
- metadata_urlstring or nulloptional
Example
Synthesized example{
"attribute_mapping": {
"email": "mara@acme.example",
"groups": "groups-baf3",
"username": "mara"
},
"auto_provision": false,
"cognito_idp_name": "payments-api",
"created_at": "2026-10-13T22:48:14Z",
"default_role": {
"name": "payments-api",
"rank": "guest",
"builtin": "guest",
"custom": "e55c7621-7ff8-4c4d-b05f-a9bbe6fdcee2"
},
"enforced": false,
"idp_sync_max_age_days": 31,
"protocol": "saml",
"root_group_id": "4c1d8e2f-6a3b-4f90-b7c5-1e2d3c4b5a69",
"status": "active",
"updated_at": "2026-10-10T05:54:41Z",
"verified_domains": [
"verified-domains-bb48",
"verified-domains-5072"
],
"created_by": {
"email": "mara@acme.example",
"id": "id-f81c",
"username": "mara",
"avatar_url": "https://gitmoap.example/acme/405437c4"
},
"last_provision_error": "last-provision-error-3957",
"oidc": {
"client_secret_set": false,
"scopes": [
"scopes-3483"
],
"client_id": "f85ee775-8b52-4357-807b-e8d9c67ea186",
"issuer_url": "https://gitmoap.example/acme/78e34e8a"
},
"saml": {
"metadata_xml_set": false,
"metadata_url": "https://gitmoap.example/acme/a7392870"
}
}
Graph
Used inside
No schema contains this one.
Used by
Sent by 0 operations
No operation takes it as a request body.