getMspSso

{
  "type": "array",
  "items": {
    "type": "object",
    "description": "SSO",
    "required": [
      "name"
    ],
    "properties": {
      "created_time": {
        "type": "number"
      },
      "custom_logout_url": {
        "type": "string",
        "description": "optional, a URL we will redirect the user after user logout from Mist (for some IdP which supports a custom logout URL that is different from SP-initiated SLO process)"
      },
      "default_role": {
        "type": "string",
        "description": "default role to assign if there’s no match. By default, an assertion is treated as invalid when there’s no role matched"
      },
      "domain": {
        "type": "string"
      },
      "id": {
        "type": "string",
        "format": "uuid"
      },
      "idp_cert": {
        "type": "string",
        "description": "if `idp_type`==`saml`. IDP Cert (used to verify the signed response)"
      },
      "idp_sign_algo": {
        "type": "string",
        "description": "if `idp_type`==`saml`. Signing algorithm for SAML Assertion"
      },
      "idp_sso_url": {
        "type": "string",
        "description": "IDP Single-Sign-On URL"
      },
      "idp_type": {
        "type": "string",
        "enum": [
          "saml",
          "ldap",
          "oauth"
        ]
      },
      "ignore_unmatched_roles": {
        "type": "boolean",
        "description": "ignore any unmatched roles provided in assertion. By default, an assertion is treated as invalid for any unmatched role"
      },
      "issuer": {
        "type": "string",
        "description": "if `idp_type`==`saml`. IDP issuer URL"
      },
      "ldap_base_dn": {
        "type": "string",
        "description": "if `idp_type`==`ldap`"
      },
      "ldap_bind_dn": {
        "type": "string",
        "description": "if `idp_type`==`ldap`"
      },
      "ldap_bind_password": {
        "type": "string",
        "description": "if `idp_type`==`ldap`"
      },
      "ldap_certs": {
        "type": "array",
        "description": "if `idp_type`==`ldap`",
        "items": {
          "type": "string"
        }
      },
      "ldap_client_cert": {
        "type": "string",
        "description": "if `idp_type`==`ldap`"
      },
      "ldap_client_key": {
        "type": "string",
        "description": "if `idp_type`==`ldap`"
      },
      "ldap_group_attr": {
        "type": "string",
        "description": "if `idp_type`==`ldap`"
      },
      "ldap_group_dn": {
        "type": "string",
        "description": "if `ldap_type`==`custom`"
      },
      "ldap_group_filter": {
        "type": "string",
        "description": "if `ldap_type`==`custom`"
      },
      "ldap_server_hosts": {
        "type": "array",
        "description": "if `idp_type`==`ldap`",
        "items": {
          "type": "string"
        }
      },
      "ldap_type": {
        "type": "string",
        "description": "if `idp_type`==`ldap`",
        "enum": [
          "ad",
          "okta",
          "custom"
        ]
      },
      "ldap_user_filter": {
        "type": "string",
        "description": "* if `ldap_type`==`ad`: \"(CN=%s)\"\n* if `ldap_type`==`okta`: \"(uid=%s)\"\n* if `ldap_type`==`custom`"
      },
      "modified_time": {
        "type": "number"
      },
      "msp_id": {
        "type": "string",
        "format": "uuid"
      },
      "name": {
        "type": "string",
        "description": "name"
      },
      "nameid_format": {
        "type": "string",
        "description": "if `idp_type`==`saml`",
        "enum": [
          "email",
          "unspecified"
        ]
      },
      "oauth_cc_client_id": {
        "type": "string",
        "description": "if `oauth_type`==`okta`, Client Credentials"
      },
      "oauth_cc_client_secret": {
        "type": "string",
        "description": "if `oauth_type`==`okta`, oauth_cc_client_secret is RSA private key, of the form \"-----BEGIN RSA PRIVATE KEY--....\""
      },
      "oauth_discovery_url": {
        "type": "string",
        "description": "if `idp_type`==`oauth`"
      },
      "oauth_ropc_client_id": {
        "type": "string",
        "description": "ropc = Resource Owner Password Credentials"
      },
      "oauth_ropc_secret": {
        "type": "string",
        "description": "oauth_ropc_client_secret can be empty if oauth_type is azure"
      },
      "oauth_tenant_id": {
        "type": "string",
        "description": "if `oauth_type`==`okta`, oauth_tenant_id"
      },
      "oauth_type": {
        "type": "string",
        "enum": [
          "azure",
          "okta"
        ]
      },
      "org_id": {
        "type": "string",
        "format": "uuid"
      },
      "role_attr_extraction": {
        "type": "string",
        "description": "optional, custom role attribute parsing scheme\n\nSupported Role Parsing Schemes\n<table><tr><th>Name</th><th>Scheme</th></tr><tr><td>cn</td><td><ul><li>The expected role attribute format in SAML Assertion is “CN=cn,OU=ou1,OU=ou2,…”</li><li>CN (the key) is case insensitive and exactly 1 CN is expected (or the entire entry will be ignored)</li><li>E.g. if role attribute is “CN=cn,OU=ou1,OU=ou2” then parsed role value is “cn”</li></ul></td></tr></table>"
      },
      "role_attr_from": {
        "type": "string",
        "description": " name of the attribute in SAML Assertion to extract role from"
      },
      "site_id": {
        "type": "string",
        "format": "uuid"
      },
      "type": {
        "type": "string"
      }
    }
  }
}