Show Sso Strategy

{
  "type": "object",
  "description": "List Sso Strategies",
  "properties": {
    "deprovision_behavior": {
      "type": "string",
      "description": "Method used for deprovisioning users.",
      "enum": [
        "disable",
        "delete"
      ]
    },
    "deprovision_groups": {
      "type": "boolean",
      "description": "Auto-deprovision group membership based on group memberships on the SSO side?"
    },
    "deprovision_users": {
      "type": "boolean",
      "description": "Auto-deprovision users?"
    },
    "enabled": {
      "type": "boolean",
      "description": "Is strategy enabled?  This may become automatically set to `false` after a high number and duration of failures."
    },
    "id": {
      "type": "integer",
      "format": "int32",
      "description": "ID"
    },
    "label": {
      "type": "string",
      "description": "Custom label for the SSO provider on the login page."
    },
    "ldap_base_dn": {
      "type": "string",
      "description": "Base DN for looking up users in LDAP server"
    },
    "ldap_domain": {
      "type": "string",
      "description": "Domain name that will be appended to LDAP usernames"
    },
    "ldap_host": {
      "type": "string",
      "description": "LDAP host"
    },
    "ldap_host_2": {
      "type": "string",
      "description": "LDAP backup host"
    },
    "ldap_host_3": {
      "type": "string",
      "description": "LDAP backup host"
    },
    "ldap_port": {
      "type": "integer",
      "format": "int32",
      "description": "LDAP port"
    },
    "ldap_secure": {
      "type": "boolean",
      "description": "Use secure LDAP?"
    },
    "ldap_username": {
      "type": "string",
      "description": "Username for signing in to LDAP server."
    },
    "ldap_username_field": {
      "type": "string",
      "description": "LDAP username field",
      "enum": [
        "sAMAccountName",
        "userPrincipalName"
      ]
    },
    "logo_url": {
      "type": "string",
      "description": "URL holding a custom logo for the SSO provider on the login page."
    },
    "protocol": {
      "type": "string",
      "description": "SSO Protocol",
      "enum": [
        "oauth2",
        "_unused_openid2",
        "saml",
        "active_directory",
        "open_ldap",
        "scim"
      ]
    },
    "provider": {
      "type": "string",
      "description": "Provider name",
      "enum": [
        "google",
        "auth0",
        "okta",
        "atlassian",
        "azure",
        "box",
        "dropbox",
        "slack",
        "_unused_ubuntu",
        "onelogin",
        "saml",
        "idaptive",
        "ldap",
        "scim"
      ]
    },
    "provision_attachments_permission": {
      "type": "boolean",
      "description": "DEPRECATED: Auto-provisioned users get Sharing permission. Use a Group with the Bundle permission instead."
    },
    "provision_company": {
      "type": "string",
      "description": "Default company for auto provisioned users."
    },
    "provision_dav_permission": {
      "type": "boolean",
      "description": "Auto-provisioned users get WebDAV permission?"
    },
    "provision_email_signup_groups": {
      "type": "string",
      "description": "Comma-separated list of group names whose members will be created with email_signup authentication."
    },
    "provision_ftp_permission": {
      "type": "boolean",
      "description": "Auto-provisioned users get FTP permission?"
    },
    "provision_group_default": {
      "type": "string",
      "description": "Comma-separated list of group names for groups to automatically add all auto-provisioned users to."
    },
    "provision_group_exclusion": {
      "type": "string",
      "description": "Comma-separated list of group names for groups (with optional wildcards) that will be excluded from auto-provisioning."
    },
    "provision_group_inclusion": {
      "type": "string",
      "description": "Comma-separated list of group names for groups (with optional wildcards) that will be auto-provisioned."
    },
    "provision_group_required": {
      "type": "string",
      "description": "Comma or newline separated list of group names (with optional wildcards) to require membership for user provisioning."
    },
    "provision_groups": {
      "type": "boolean",
      "description": "Auto-provision group membership based on group memberships on the SSO side?"
    },
    "provision_sftp_permission": {
      "type": "boolean",
      "description": "Auto-provisioned users get SFTP permission?"
    },
    "provision_site_admin_groups": {
      "type": "string",
      "description": "Comma-separated list of group names whose members will be created as Site Admins."
    },
    "provision_time_zone": {
      "type": "string",
      "description": "Default time zone for auto provisioned users."
    },
    "provision_users": {
      "type": "boolean",
      "description": "Auto-provision users?"
    },
    "saml_provider_cert_fingerprint": {
      "type": "string",
      "description": "Identity provider sha256 cert fingerprint if saml_provider_metadata_url is not available."
    },
    "saml_provider_issuer_url": {
      "type": "string",
      "description": "Identity provider issuer url"
    },
    "saml_provider_metadata_content": {
      "type": "string",
      "description": "Custom identity provider metadata"
    },
    "saml_provider_metadata_url": {
      "type": "string",
      "description": "Metadata URL for the SAML identity provider"
    },
    "saml_provider_slo_target_url": {
      "type": "string",
      "description": "Identity provider SLO endpoint"
    },
    "saml_provider_sso_target_url": {
      "type": "string",
      "description": "Identity provider SSO endpoint if saml_provider_metadata_url is not available."
    },
    "scim_authentication_method": {
      "type": "string",
      "description": "SCIM authentication type.",
      "enum": [
        "none",
        "basic",
        "token"
      ]
    },
    "scim_oauth_access_token": {
      "type": "string",
      "description": "SCIM OAuth Access Token."
    },
    "scim_oauth_access_token_expires_at": {
      "type": "string",
      "description": "SCIM OAuth Access Token Expiration Time."
    },
    "scim_username": {
      "type": "string",
      "description": "SCIM username."
    },
    "subdomain": {
      "type": "string",
      "description": "Subdomain"
    }
  }
}