Get Native SSO settings

GET

/api/admin/settings/native-sso

Code sample: Shell / cURL

curl --request GET \
  --url https://auth.example.com/api/admin/settings/native-sso \
  --header 'Authorization: Bearer <token>'

Returns Native SSO device secret, replay protection, cross-client, and rate-limit settings with source metadata.

Authorizations

• adminBearer
• adminSessionCookie

Responses

200

Native SSO settings with source metadata.

Media type application/json

object

settings

object

key

additional properties

object

value

Resolved setting value.

source

Source for the resolved setting.

string

default

Default value.

metadata

Setting metadata and validation constraints.

object

key

additional properties

description

string

min

number

max

number

validOptions

Array

key

additional properties

note

string

key

additional properties

Example

{
  "settings": {
    "enabled": {
      "value": true,
      "source": "kv",
      "default": true
    },
    "deviceSecretTTLDays": {
      "value": 30,
      "source": "kv",
      "default": 30,
      "min": 1,
      "max": 365,
      "description": "Device secret TTL in days"
    },
    "maxDeviceSecretsPerUser": {
      "value": 5,
      "source": "kv",
      "default": 5,
      "min": 1,
      "max": 50
    },
    "maxUseCountPerSecret": {
      "value": 10,
      "source": "kv",
      "default": 10,
      "min": 1,
      "max": 100
    },
    "maxSecretsBehavior": {
      "value": "reject_new",
      "source": "kv",
      "default": "reject_new",
      "validOptions": [
        "reject_new",
        "delete_oldest"
      ]
    },
    "allowCrossClientNativeSSO": {
      "value": false,
      "source": "kv",
      "default": false
    },
    "rateLimit": {
      "maxAttemptsPerMinute": {
        "value": 10,
        "source": "kv",
        "default": 10,
        "min": 1,
        "max": 1000
      },
      "blockDurationMinutes": {
        "value": 15,
        "source": "kv",
        "default": 15,
        "min": 1,
        "max": 1440
      }
    }
  },
  "note": "Native SSO enables seamless SSO between mobile/desktop apps sharing a Keychain/Keystore."
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

404

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

500

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}