---
title: "OIDC SSO configuration details"
source_url: https://dev.digicert.com/certcentral-apis/services-api/account/oidc-sso-configuration-details.html
api_method: GET
api_endpoint: "/services/v2/sso/oidc/entity"
api_url: "https://www.digicert.com/services/v2/sso/oidc/entity"
---

**GET** `https://www.digicert.com/services/v2/sso/oidc/entity`

Use this endpoint to get configuration details for your OpenID Connect (OIDC) SSO configuration.

## Example requests and responses

## cURL

```bash
curl --request GET 'https://www.digicert.com/services/v2/sso/oidc/entity' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json'
```

## 200 Created

```json
{
  "provider_url": "https://provider.example.com/",
  "friendly_name": "OIDC Test",
  "slug_name": "oidc-test",
  "client_id": "client_id",
  "client_secret": "client_secret",
  "discoverable": false,
  "scope_parameter": "preferred_username",
  "date_created": "2022-11-30 14:55:40"
}
```

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>provider_url</td>
<td>string</td>
<td>URL for your Identity Provider (IdP).</td>
</tr>
<tr>
<td>friendly_name</td>
<td>string</td>
<td>Custom SSO provider friendly name. If <code>discoverable</code> is true, this friendly name is visible to anyone who visits DigiCert's public SSO login pages.</td>
</tr>
<tr>
<td>slug_name</td>
<td>string</td>
<td>String used in the login initiation URL that users can access to sign in to CertCentral using OIDC-based SSO. The <code>slug_name</code> value is based on the <code>friendly_name</code> value. When you change the friendly name, the slug name also changes.</td>
</tr>
<tr>
<td>client_id</td>
<td>string</td>
<td>Client ID from your IdP that CertCentral can use to identify itself in requests to your OIDC service.</td>
</tr>
<tr>
<td>client_secret</td>
<td>string</td>
<td>Password from your IdP that CertCentral can use to authenticate requests to your OIDC service.</td>
</tr>
<tr>
<td>discoverable</td>
<td>boolean</td>
<td>If true, your provider friendly name appears in the list of IdPs for anyone who visits DigiCert's public SSO pages. Otherwise, false.</td>
</tr>
<tr>
<td>scope_parameter</td>
<td>string</td>
<td>ID token claim attribute to match with the username.<br><strong>Possible values:</strong><br><ul><li><code>email</code>: Email</li><li><code>sub</code>: Subject</li><li><code>preferred_username</code>: Preferred username</li><li><code>username</code>: Username</li></ul></td>
</tr>
<tr>
<td>date_created</td>
<td>string</td>
<td>Date and time OIDC was configured for the account.<br><strong>Format:</strong> UTC timezone and ISO 8601 date</td>
</tr>
</tbody>
</table>