Cortex.Api.AuthSettings

Cortex tenant IdP/SSO authentication settings.

The /public_api/v1/authentication-settings/get/settings endpoint returns a list of AuthSetting records — one per configured IdP / domain. Most fields are Maybe because populated content varies sharply: a tenant without SSO configured returns only the SP-side URLs, while a fully-configured SAML integration populates the full IdP certificate, issuer, SSO URL, and attribute mappings.

type alias AuthSetting =

{ tenantId : Maybe String

, name : Maybe String

, domain : Maybe String

, idpEnabled : Maybe Bool

, defaultRole : Maybe Value

, isAccountRole : Maybe Value

, idpCertificate : Maybe String

, idpIssuer : Maybe String

, idpSsoUrl : Maybe String

, metadataUrl : Maybe String

, mappings : Maybe Mappings

, advancedSettings : Maybe AdvancedSettings

, spEntityId : Maybe String

, spLogoutUrl : Maybe String

, spUrl : Maybe String

}

One authentication-settings entry — typically one per configured IdP.

type alias Mappings =

{ email : Maybe String

, firstname : Maybe String

, groupName : Maybe String

, lastname : Maybe String

}

SAML attribute → Cortex field mappings used to populate user records during SSO login.

type alias AdvancedSettings =

{ authnContextEnabled : Maybe Bool

, forceAuthn : Maybe Value

, idpSingleLogoutUrl : Maybe String

, relayState : Maybe String

, serviceProviderPrivateKey : Maybe String

, serviceProviderPublicCert : Maybe String

}

Advanced SAML/SP configuration. Optional sub-record under each AuthSetting.

get : Request (List AuthSetting)

POST /public_api/v1/authentication-settings/get/settings

Get all the authentication settings for every configured domain on the tenant. Requires Instance Administrator permissions.

vanhecke/celmex/3.0.0

Cortex.Api.AuthSettings

Modules