Skip to main content
GET
Doctor Sso

Authorizations

Authorization
string
header
required

A floo_ API key.

Headers

X-Floo-Org-Id
string<uuid>

Organization to act in; defaults to the one joined most recently.

Path Parameters

org_id
string<uuid>
required

Response

Successful Response

Atomic SSO health and current-credential diagnostic snapshot.

credential_status
enum<string>
required

Whether the presented credential proves the current SSO binding.

Available options:
exact_current_sso,
not_exact_current_sso,
not_applicable
credential_reason
enum<string>
required

Stable explanation for the credential classification.

Available options:
NO_BINDING,
SESSION_CREDENTIAL,
EXACT_CURRENT_BINDING,
POLICY_ENFORCED_CREDENTIAL_INCOMPATIBLE,
CREDENTIAL_NOT_EXACT_CURRENT_SSO
enforcement_access
enum<string>
required

The caller's current access outcome for this organization.

Available options:
not_required,
allowed,
step_up_required,
binding_unavailable
provider_reachability
enum<string>
required

Coarse live provider reachability safe for diagnostic output.

Available options:
reachable,
unavailable,
not_configured
next_action
enum<string> | null
required

Stable machine action emitted by the SSO diagnostic.

Available options:
OPEN_SSO_SETUP,
USE_ORGANIZATION_SSO_RECOVERY,
CLI_REAUTHENTICATE_WITH_ORG_SSO
status
OrganizationSsoStatusResponse · object | null
required

Tenant-safe SSO status with no WorkOS identifiers.