> ## Documentation Index
> Fetch the complete documentation index at: https://docs.verify-group.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get SSO Configuration

> Returns the current SSO configuration for an organisation. Secrets (private keys, client secrets) are never returned.

<ParamField path="orgId" type="string" required>
  Your Organisation UUID.
</ParamField>

<ResponseField name="id" type="string">Configuration record UUID.</ResponseField>
<ResponseField name="organizationId" type="string">Organisation UUID.</ResponseField>
<ResponseField name="protocol" type="saml | oidc">Active SSO protocol.</ResponseField>
<ResponseField name="enabled" type="boolean">Whether SSO is currently active.</ResponseField>
<ResponseField name="samlIdpEntityId" type="string">SAML IdP entity ID / issuer.</ResponseField>
<ResponseField name="samlIdpSsoUrl" type="string">SAML IdP SSO redirect URL.</ResponseField>
<ResponseField name="samlSignRequests" type="boolean">Whether AuthnRequests are signed.</ResponseField>
<ResponseField name="samlNameIdFormat" type="string">SAML NameID format.</ResponseField>
<ResponseField name="oidcIssuer" type="string">External OIDC IdP issuer URL.</ResponseField>
<ResponseField name="oidcClientId" type="string">Client ID with the external IdP.</ResponseField>
<ResponseField name="jitProvisioningEnabled" type="boolean">Auto-create users on first SSO login.</ResponseField>
<ResponseField name="enforcedDomains" type="string[]">Email domains that must use SSO.</ResponseField>
<ResponseField name="attributeMapping" type="object">Mapping of IdP attributes to VG user fields.</ResponseField>
