StatusDashboard
DashboardsSingle Sign-On

Get SSO config

Retrieve the SSO configuration for a dashboard, including service provider metadata.

View Markdown

GET /app/dashboards/{id}/sso

Returns the current SSO configuration for a dashboard, along with the service provider (SP) metadata values needed to configure an identity provider. Requires the SSO feature entitlement.

The client secret is never returned.


Path parameters

ParameterDescription
idThe UUID of the dashboard.

Request

See API Basics for required headers.

This endpoint takes no request body.


Sample request

curl https://api.statusdashboard.com/app/dashboards/a1b2c3d4-e5f6-7890-abcd-ef1234567890/sso \
  -H "Authorization: Bearer bcf847abf5c6:def456"

Sample response

Status: 200 OK

{
  "enabled": true,
  "providerType": "SAML",
  "cognitoProviderName": "DASHBOARD-A1B2C3D4",
  "samlMetadataXml": "<?xml version=\"1.0\"?>...",
  "idpLogoutUrl": "https://idp.example.com/logout",
  "idpDomainUrl": "https://auth.example.statusdashboard.com",
  "spEntityId": "urn:amazon:cognito:sp:us-east-1_abc123"
}

When no SSO provider is configured, the response still returns 200 with enabled: false and all provider fields omitted:

{
  "enabled": false,
  "idpDomainUrl": "https://auth.example.statusdashboard.com",
  "spEntityId": "urn:amazon:cognito:sp:us-east-1_abc123"
}

Response fields

FieldTypeDescription
enabledbooleanWhether SSO is currently enforced for visitors.
providerType"SAML" | "OIDC" | undefinedThe configured provider protocol. Absent if no provider is configured.
cognitoProviderNamestring | undefinedInternal provider name. Absent if no provider is configured.
samlMetadataXmlstring | undefinedThe IdP metadata XML (SAML only).
oidcIssuerstring | undefinedIssuer URL (OIDC only).
oidcClientIdstring | undefinedClient ID (OIDC only).
oidcAuthorizationEndpointstring | undefinedAuthorization endpoint URL (OIDC only).
oidcTokenEndpointstring | undefinedToken endpoint URL (OIDC only).
oidcUserInfoEndpointstring | undefinedUserInfo endpoint URL (OIDC only).
oidcJwksUristring | undefinedJWKS URI (OIDC only).
idpLogoutUrlstring | undefinedThe IdP's single logout URL, auto-extracted from SAML metadata on save. Used to redirect visitors after they sign out.
idpDomainUrlstringThe Cognito base URL for this dashboard's user pool. Use this to derive the ACS URL ({idpDomainUrl}/saml2/idpresponse) and other SP endpoints.
spEntityIdstringThe entity ID (audience URI) to use when registering this SP in your IdP.

Error responses

StatusWhen
403SSO feature not enabled on the plan.
404Dashboard not found or does not belong to the caller's organization.

On this page

We use cookies

We use essential cookies to keep the site working, and optional analytics cookies to understand how it's used. Read our Privacy Policy.