> ## Documentation Index > Fetch the complete documentation index at: https://ona.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Get SSO Configuration > Retrieves a specific SSO configuration. `Unary` ยท [`Organizations`](/docs/api-reference/generated/organization/overview) Retrieves a specific SSO configuration. Use this method to: * View SSO provider details * Check configuration status * Verify SSO settings ### Examples * Get SSO configuration: Retrieves details of a specific SSO configuration. ```yaml theme={null} ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68" ``` ## Endpoint ```text theme={null} POST /api/gitpod.v1.OrganizationService/GetSSOConfiguration ``` Send a Bearer token as described in [Authentication](/docs/api-reference#authenticate-requests). If your organization uses a custom management-plane domain, replace `https://app.ona.com` with that domain. ## Request example ```bash cURL theme={null} export ONA_HOST=https://app.ona.com export ONA_API_KEY= curl --request POST \ --url "$ONA_HOST/api/gitpod.v1.OrganizationService/GetSSOConfiguration" \ --header "Authorization: Bearer $ONA_API_KEY" \ --header "Content-Type: application/json" \ --data '{ "ssoConfigurationId": "" }' ``` ```python Python theme={null} import gitpod.v1.organization_pb2 as organization_pb2 from ona_sdk import create_client_from_env ona = create_client_from_env() request = organization_pb2.GetSSOConfigurationRequest( sso_configuration_id="", ) response = ona.services.organization.get_sso_configuration(request) print(response) ``` ```typescript TypeScript theme={null} import { create } from "@bufbuild/protobuf"; import { createClientFromEnv } from "@gitpod/sdk"; import { GetSSOConfigurationRequestSchema } from "@gitpod/sdk/gitpod/v1/organization_pb"; async function main() { const ona = createClientFromEnv(); const request = create(GetSSOConfigurationRequestSchema, { ssoConfigurationId: "", }); const response = await ona.services.organization.getSSOConfiguration(request); console.log(response); } main().catch(console.error); ``` ```go Go theme={null} package main import ( "context" "fmt" "log" "connectrpc.com/connect" "github.com/gitpod-io/gitpod-sdk-go/sdk" gitpodpb "github.com/gitpod-io/gitpod-sdk-go/v1" ) func main() { ona, err := sdk.NewFromEnv() if err != nil { log.Fatal(err) } request := connect.NewRequest(&gitpodpb.GetSSOConfigurationRequest{ SsoConfigurationId: "", }) response, err := ona.Services.Organization.GetSSOConfiguration(context.Background(), request) if err != nil { log.Fatal(err) } fmt.Println(response.Msg) } ``` ```json Request body theme={null} { "ssoConfigurationId": "" } ``` ## Request `gitpod.v1.GetSSOConfigurationRequest` | Field | Type | Required | Description | | -------------------- | ------ | -------- | ---------------------------------------------------------------------------------------------------------------- | | `ssoConfigurationId` | string | Yes | sso\_configuration\_id is the ID of the SSO configuration to get Constraints: `required=true, string.uuid=true`. | ## Response `gitpod.v1.GetSSOConfigurationResponse` | Field | Type | Required | Description | | ------------------ | ----------------------------------------------------- | -------- | ---------------------------------------------------------------------------------------------- | | `ssoConfiguration` | [SSOConfiguration](#type-gitpod-v1-sso-configuration) | Yes | sso\_configuration is the SSO configuration identified by the ID Constraints: `required=true`. | ## Related types `gitpod.v1.SSOConfiguration` | Field | Type | Required | Description | | ------------------ | ---------------------------------------------------------------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `id` | string | Yes | id is the unique identifier of the SSO configuration Constraints: `required=true, string.uuid=true`. | | `organizationId` | string | Yes | Constraints: `required=true, string.uuid=true`. | | `clientId` | string | No | client\_id is the client ID of the OIDC application set on the IdP | | `issuerUrl` | string | Yes | issuer\_url is the URL of the IdP issuer Constraints: `required=true`. | | `state` | [SSOConfigurationState](#enum-gitpod-v1-sso-configuration-state) | Yes | state is the state of the SSO configuration Constraints: `required=true`. | | `claims` | map of string to string | No | claims are key/value pairs that defines a mapping of claims issued by the IdP. | | `emailDomain` | string | No | | | `providerType` | [ProviderType](#enum-gitpod-v1-sso-configuration-provider-type) | Yes | provider\_type defines the type of the SSO configuration Constraints: `required=true`. | | `emailDomains` | array of string | No | Constraints: `repeated.items.string.max_len=253, repeated.items.string.min_len=4, repeated.items.string.pattern=^(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$, repeated.unique=true`. | | `displayName` | string | No | Constraints: `string.max_len=128`. | | `additionalScopes` | array of string | No | additional\_scopes are extra OIDC scopes requested from the identity provider during sign-in. | | `claimsExpression` | string | No | claims\_expression is a CEL (Common Expression Language) expression evaluated against the OIDC token claims during login. When set, the expression must evaluate to true for the login to succeed. The expression has access to a `claims` variable containing all token claims as a map. Example: `claims.email_verified && claims.email.endsWith("@example.com")` Constraints: `string.max_len=4096`. | | Value | Number | Description | | --------------------------- | -----: | ----------- | | `PROVIDER_TYPE_UNSPECIFIED` | 0 | | | `PROVIDER_TYPE_BUILTIN` | 1 | | | `PROVIDER_TYPE_CUSTOM` | 2 | | | Value | Number | Description | | ------------------------------------- | -----: | ----------- | | `SSO_CONFIGURATION_STATE_UNSPECIFIED` | 0 | | | `SSO_CONFIGURATION_STATE_INACTIVE` | 1 | | | `SSO_CONFIGURATION_STATE_ACTIVE` | 2 | |