MspsSSO Roles
listMspSsoRoles
List MSP SSO role definitions that map identity-provider role assertions to MSP privilege scopes.
Authorization<token>
Preferred authentication method for automation and integrations. Send the API token in the HTTP Authorization header.
Format:
Authorization: Token {apitoken}
Notes:
- An API token generated for a specific admin has the same privileges as that admin
- An API token is automatically removed if it is not used for more than 90 days
- SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed.
In: header
Path Parameters
msp_id*string
Format
uuidResponse Body
curl -X GET "https://example.com/api/v1/msps/000000ab-00ab-00ab-00ab-0000000000ab/ssoroles"[ { "created_time": 0.1, "for_site": true, "id": "53f10664-3ce8-4c27-b382-0ef66432349f", "modified_time": 0.1, "msp_id": "b9d42c2e-88ee-41f8-b798-f009ce7fe909", "name": "string", "org_id": "a97c1b22-a4e9-411e-9bfd-d8695a0f9e61", "privileges": [ { "org_id": "a40f5d1f-d889-42e9-94ea-b9b33585fc6b", "org_name": "string", "orggroup_id": "4b44d612-2b39-4677-af94-547bf894b06d", "role": "admin", "scope": "msp", "views": [ "lobby_admin" ] } ] }]listMspSsoLatestFailures GET
List recent authentication failures for this MSP SSO configuration, including failure details and captured SAML assertion data when available.
createMspSsoRole POST
Create an MSP SSO role definition with a display name and the MSP privileges granted when the role is matched during SSO.