List cumulative OIDC mapping failure observations.

GET

/api/admin/identity-mapping/failures

Code sample: Shell / cURL

curl --request GET \
  --url 'https://auth.example.com/api/admin/identity-mapping/failures?limit=50' \
  --header 'Authorization: Bearer <token>'

Requires settings read access for the calling tenant. Returns only configuration identifiers, fixed failure codes, first and last occurrence times, and cumulative counts. User identifiers and claim values are not recorded. The client filter does not require the client to still exist. Unknown clients and clients belonging to another tenant return an empty list. Since selects tuples by their last occurrence; counts remain lifetime totals, including earlier occurrences. Rows are ordered by last_at descending and id descending. Cursors are bound to the tenant, client filter and since filter. These mutable aggregates are a live view: concurrent observations can move rows between pages. Responses use Cache-Control no-store. Rate limited with the moderate profile.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Query Parameters

client_id

string

>= 1 characters <= 256 characters

Optional exact client identifier, without surrounding whitespace or control characters.

since

integer

<= 9007199254740991

Inclusive lower bound for last_at, in Unix milliseconds; does not reset counts.

limit

integer

default: 50 >= 1 <= 100

cursor

string

<= 2048 characters

Opaque next_cursor from the previous page with the same filters.

Responses

200

A page of cumulative observations.

Media type application/json

object

entries

required

Array<object>

<= 100 items

object

id

required

string

/^[0-9a-f]{64}$/

tenant_id

required

string

client_id

required

string

code

required

A fixed mapping failure code, or mapping_failed for unclassified failures.

string

tier

required

string | null

Allowed values: client tenant_default platform_default

set_id

required

string | null

first_at

required

First observed occurrence, in Unix milliseconds.

integer

<= 9007199254740991

last_at

required

Last observed occurrence, in Unix milliseconds.

integer

<= 9007199254740991

count

required

Cumulative observations for the tenant, client, code, tier and set tuple.

integer

>= 1 <= 9007199254740991

key

additional properties

next_cursor

required

string | null

key

additional properties

Example

{
  "entries": [
    {
      "tier": "client"
    }
  ]
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

429

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

503

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}