Skip to content
GitmoapAPIBeta
Schema

SsoConnectionView

An organization's SSO connection, with secrets withheld.

Shape

  • attribute_mappingSsoAttributeMapping
    • The SsoAttributeMapping schema
    • emailstringThe claim or attribute carrying the person's email address. Defaults to email.
    • groupsstring or nulloptionalThe claim listing the person's groups at the identity provider, if any. Teams linked to those groups follow it.
    • usernamestring or nulloptionalThe claim a new account's username is derived from, if any.
  • auto_provisionboolean
  • cognito_idp_nameSsoIdpName (string)The name the identity provider is registered under for sign-in.
  • created_atstring
  • default_roleRoleViewThe role newcomers are given at the top-level group.
    • The RoleView schema
    • namestringThe role's display name: a built-in name such as Developer, or the custom role's name.
    • rankAccessLevelguestreporterdevelopermaintainerownerThe built-in rank the role counts as wherever a rank is compared, such as a protected branch's minimum.
    • builtinAccessLevelguestreporterdevelopermaintainerowneror nulloptionalSet when the role is built in.
    • customRoleId (string · uuid) or nulloptionalSet when the role is one the organization defined.
  • enforcedboolean
  • idp_sync_max_age_daysinteger · int320–∞Days a place on a team linked to an identity-provider group lasts without the person signing in again.
  • protocolSsoProtocolsamloidcThe IdP protocol an org's connection speaks.
  • root_group_idGroupId (string · uuid)
  • statusSsoConnectionStatuspendingprovisioningactivefaileddisabledWhere an organization's SSO connection is in being set up. A connection left provisioning or failed is retried by saving the connection again.
  • updated_atstring
  • verified_domainsarray of Domain (string)
  • created_byActorSummary or nulloptional
  • last_provision_errorstring or nulloptional
  • oidcOidcConfigView or nulloptional
    • The OidcConfigView schema
    • client_secret_setboolean
    • scopesarray of string
    • client_idstring or nulloptional
    • issuer_urlstring or nulloptional
  • samlSamlConfigView or nulloptional
    • The SamlConfigView schema
    • metadata_xml_setbooleanWhether a SAML metadata document was supplied directly rather than by URL.
    • metadata_urlstring or nulloptional

Example

Synthesized example
{
"attribute_mapping": {
"email": "mara@acme.example",
"groups": "groups-baf3",
"username": "mara"
},
"auto_provision": false,
"cognito_idp_name": "payments-api",
"created_at": "2026-10-13T22:48:14Z",
"default_role": {
"name": "payments-api",
"rank": "guest",
"builtin": "guest",
"custom": "e55c7621-7ff8-4c4d-b05f-a9bbe6fdcee2"
},
"enforced": false,
"idp_sync_max_age_days": 31,
"protocol": "saml",
"root_group_id": "4c1d8e2f-6a3b-4f90-b7c5-1e2d3c4b5a69",
"status": "active",
"updated_at": "2026-10-10T05:54:41Z",
"verified_domains": [
"verified-domains-bb48",
"verified-domains-5072"
],
"created_by": {
"email": "mara@acme.example",
"id": "id-f81c",
"username": "mara",
"avatar_url": "https://gitmoap.example/acme/405437c4"
},
"last_provision_error": "last-provision-error-3957",
"oidc": {
"client_secret_set": false,
"scopes": [
"scopes-3483"
],
"client_id": "f85ee775-8b52-4357-807b-e8d9c67ea186",
"issuer_url": "https://gitmoap.example/acme/78e34e8a"
},
"saml": {
"metadata_xml_set": false,
"metadata_url": "https://gitmoap.example/acme/a7392870"
}
}

Graph

Used inside

No schema contains this one.

Used by