> ## Documentation Index > Fetch the complete documentation index at: https://ona.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # List SSO Configurations > Lists and filters SSO configurations for an organization. `Unary` ยท [`Organizations`](/docs/api-reference/generated/organization/overview) Lists and filters SSO configurations for an organization. Use this method to: * View all SSO providers * Monitor authentication status * Audit security settings * Manage provider configurations ### Examples * List active configurations: Shows all active SSO providers. ```yaml theme={null} organizationId: "b0e12f6c-4c67-429d-a4a6-d9838b5da047" pagination: pageSize: 20 ``` * List by provider type: Shows custom SSO configurations. ```yaml theme={null} organizationId: "b0e12f6c-4c67-429d-a4a6-d9838b5da047" pagination: pageSize: 20 token: "next-page-token-from-previous-response" ``` ## Endpoint ```text theme={null} POST /api/gitpod.v1.OrganizationService/ListSSOConfigurations ``` Send a Bearer token as described in [Authentication](/docs/api-reference#authenticate-requests). If your organization uses a custom management-plane domain, replace `https://app.ona.com` with that domain. ## Request example ```bash cURL theme={null} export ONA_HOST=https://app.ona.com export ONA_API_KEY= curl --request POST \ --url "$ONA_HOST/api/gitpod.v1.OrganizationService/ListSSOConfigurations" \ --header "Authorization: Bearer $ONA_API_KEY" \ --header "Content-Type: application/json" \ --data '{ "organizationId": "" }' ``` ```python Python theme={null} import gitpod.v1.organization_pb2 as organization_pb2 from ona_sdk import create_client_from_env ona = create_client_from_env() request = organization_pb2.ListSSOConfigurationsRequest( organization_id="", ) response = ona.services.organization.list_sso_configurations(request) print(response) ``` ```typescript TypeScript theme={null} import { create } from "@bufbuild/protobuf"; import { createClientFromEnv } from "@gitpod/sdk"; import { ListSSOConfigurationsRequestSchema } from "@gitpod/sdk/gitpod/v1/organization_pb"; async function main() { const ona = createClientFromEnv(); const request = create(ListSSOConfigurationsRequestSchema, { organizationId: "", }); const response = await ona.services.organization.listSSOConfigurations(request); console.log(response); } main().catch(console.error); ``` ```go Go theme={null} package main import ( "context" "fmt" "log" "connectrpc.com/connect" "github.com/gitpod-io/gitpod-sdk-go/sdk" gitpodpb "github.com/gitpod-io/gitpod-sdk-go/v1" ) func main() { ona, err := sdk.NewFromEnv() if err != nil { log.Fatal(err) } request := connect.NewRequest(&gitpodpb.ListSSOConfigurationsRequest{ OrganizationId: "", }) response, err := ona.Services.Organization.ListSSOConfigurations(context.Background(), request) if err != nil { log.Fatal(err) } fmt.Println(response.Msg) } ``` ```json Request body theme={null} { "organizationId": "" } ``` ## Request `gitpod.v1.ListSSOConfigurationsRequest` | Field | Type | Required | Description | | ---------------- | ------------------------------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------ | | `pagination` | [PaginationRequest](#type-gitpod-v1-pagination-request) | No | | | `organizationId` | string | Yes | organization\_id is the ID of the organization to list SSO configurations for. Constraints: `required=true, string.uuid=true`. | ## Response `gitpod.v1.ListSSOConfigurationsResponse` | Field | Type | Required | Description | | ------------------- | -------------------------------------------------------------- | -------- | ------------------------------------------------------------------- | | `pagination` | [PaginationResponse](#type-gitpod-v1-pagination-response) | Yes | Constraints: `required=true`. | | `ssoConfigurations` | array of [SSOConfiguration](#type-gitpod-v1-sso-configuration) | No | sso\_configurations are the SSO configurations for the organization | ## Related types `gitpod.v1.PaginationRequest` | Field | Type | Required | Description | | ---------- | ------- | -------- | ---------------------------------------------------------------------------------------------------------------------------------------- | | `pageSize` | integer | No | Page size is the maximum number of results to retrieve per page. Defaults to 25. Maximum 100. Constraints: `int32.gte=0, int32.lte=100`. | | `token` | string | No | Token for the next set of results that was returned as next\_token of a PaginationResponse | `gitpod.v1.PaginationResponse` | Field | Type | Required | Description | | ----------- | ------ | -------- | --------------------------------------------------------------------------------------- | | `nextToken` | string | No | Token passed for retrieving the next set of results. Empty if there are no more results | `gitpod.v1.SSOConfiguration` | Field | Type | Required | Description | | ------------------ | ---------------------------------------------------------------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `id` | string | Yes | id is the unique identifier of the SSO configuration Constraints: `required=true, string.uuid=true`. | | `organizationId` | string | Yes | Constraints: `required=true, string.uuid=true`. | | `clientId` | string | No | client\_id is the client ID of the OIDC application set on the IdP | | `issuerUrl` | string | Yes | issuer\_url is the URL of the IdP issuer Constraints: `required=true`. | | `state` | [SSOConfigurationState](#enum-gitpod-v1-sso-configuration-state) | Yes | state is the state of the SSO configuration Constraints: `required=true`. | | `claims` | map of string to string | No | claims are key/value pairs that defines a mapping of claims issued by the IdP. | | `emailDomain` | string | No | | | `providerType` | [ProviderType](#enum-gitpod-v1-sso-configuration-provider-type) | Yes | provider\_type defines the type of the SSO configuration Constraints: `required=true`. | | `emailDomains` | array of string | No | Constraints: `repeated.items.string.max_len=253, repeated.items.string.min_len=4, repeated.items.string.pattern=^(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$, repeated.unique=true`. | | `displayName` | string | No | Constraints: `string.max_len=128`. | | `additionalScopes` | array of string | No | additional\_scopes are extra OIDC scopes requested from the identity provider during sign-in. | | `claimsExpression` | string | No | claims\_expression is a CEL (Common Expression Language) expression evaluated against the OIDC token claims during login. When set, the expression must evaluate to true for the login to succeed. The expression has access to a `claims` variable containing all token claims as a map. Example: `claims.email_verified && claims.email.endsWith("@example.com")` Constraints: `string.max_len=4096`. | | Value | Number | Description | | --------------------------- | -----: | ----------- | | `PROVIDER_TYPE_UNSPECIFIED` | 0 | | | `PROVIDER_TYPE_BUILTIN` | 1 | | | `PROVIDER_TYPE_CUSTOM` | 2 | | | Value | Number | Description | | ------------------------------------- | -----: | ----------- | | `SSO_CONFIGURATION_STATE_UNSPECIFIED` | 0 | | | `SSO_CONFIGURATION_STATE_INACTIVE` | 1 | | | `SSO_CONFIGURATION_STATE_ACTIVE` | 2 | |