listOrgSsoRoles
List organization SSO role definitions that map identity-provider role assertions to organization, site, or site group privilege scopes.
Preferred authentication method for automation and integrations. Send the API token in the HTTP Authorization header.
Format:
Authorization: Token {apitoken}
Notes:
- An API token generated for a specific admin has the same privileges as that admin
- An API token is automatically removed if it is not used for more than 90 days
- SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed.
In: header
Path Parameters
uuidQuery Parameters
Maximum number of results to return per page
0 <= value100Select the page number to return when using page-based pagination; starts at 1
1 <= value1Response Body
curl -X GET "https://example.com/api/v1/orgs/000000ab-00ab-00ab-00ab-0000000000ab/ssoroles"[ { "created_time": 0.1, "for_site": true, "id": "53f10664-3ce8-4c27-b382-0ef66432349f", "modified_time": 0.1, "msp_id": "b9d42c2e-88ee-41f8-b798-f009ce7fe909", "name": "string", "org_id": "60f6bfdb-2f45-4022-8e2a-e00d977953fe", "privileges": [ { "org_id": "a40f5d1f-d889-42e9-94ea-b9b33585fc6b", "role": "admin", "scope": "org", "site_id": "72771e6a-6f5e-4de4-a5b9-1266c4197811", "sitegroup_id": "a95fde7a-d7c2-4294-bee0-117956339c67", "view": "string", "views": [ "lobby_admin" ] } ] }]listOrgSsoLatestFailures GET
List recent authentication failures for this organization SSO configuration, including failure details and captured SAML assertion data when available.
createOrgSsoRole POST
Create an organization SSO role definition with a display name and the privileges granted when the role is matched during SSO.