> ## Documentation Index
> Fetch the complete documentation index at: https://getfloo.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Doctor Sso

> Return one live, atomic SSO and current-credential diagnostic.



## OpenAPI

````yaml https://api.getfloo.com/openapi.json get /v1/organizations/{org_id}/sso/doctor
openapi: 3.1.0
info:
  title: floo API
  version: 0.1.0
servers:
  - url: https://api.getfloo.com
security: []
paths:
  /v1/organizations/{org_id}/sso/doctor:
    get:
      tags:
        - organization-sso
      summary: Doctor Sso
      description: Return one live, atomic SSO and current-credential diagnostic.
      operationId: organization_sso_doctor_sso
      parameters:
        - name: org_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
            title: Org Id
        - $ref: '#/components/parameters/X-Floo-Org-Id'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OrganizationSsoDoctorResponse'
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - bearerAuth: []
components:
  parameters:
    X-Floo-Org-Id:
      name: X-Floo-Org-Id
      in: header
      required: false
      schema:
        type: string
        format: uuid
      description: Organization to act in; defaults to the one joined most recently.
  schemas:
    OrganizationSsoDoctorResponse:
      properties:
        credential_status:
          $ref: '#/components/schemas/OrganizationSsoCredentialStatus'
        credential_reason:
          $ref: '#/components/schemas/OrganizationSsoCredentialReason'
        enforcement_access:
          $ref: '#/components/schemas/OrganizationSsoEnforcementAccess'
        provider_reachability:
          $ref: '#/components/schemas/OrganizationSsoProviderReachability'
        next_action:
          anyOf:
            - $ref: '#/components/schemas/OrganizationSsoNextAction'
            - type: 'null'
        status:
          anyOf:
            - $ref: '#/components/schemas/OrganizationSsoStatusResponse'
            - type: 'null'
      type: object
      required:
        - credential_status
        - credential_reason
        - enforcement_access
        - provider_reachability
        - next_action
        - status
      title: OrganizationSsoDoctorResponse
      description: Atomic SSO health and current-credential diagnostic snapshot.
    ErrorResponse:
      properties:
        detail:
          $ref: '#/components/schemas/ErrorDetail'
      type: object
      required:
        - detail
      title: ErrorResponse
      description: Body of every error response except request validation (422).
    OrganizationSsoCredentialStatus:
      type: string
      enum:
        - exact_current_sso
        - not_exact_current_sso
        - not_applicable
      title: OrganizationSsoCredentialStatus
      description: Whether the presented credential proves the current SSO binding.
    OrganizationSsoCredentialReason:
      type: string
      enum:
        - NO_BINDING
        - SESSION_CREDENTIAL
        - EXACT_CURRENT_BINDING
        - POLICY_ENFORCED_CREDENTIAL_INCOMPATIBLE
        - CREDENTIAL_NOT_EXACT_CURRENT_SSO
      title: OrganizationSsoCredentialReason
      description: Stable explanation for the credential classification.
    OrganizationSsoEnforcementAccess:
      type: string
      enum:
        - not_required
        - allowed
        - step_up_required
        - binding_unavailable
      title: OrganizationSsoEnforcementAccess
      description: The caller's current access outcome for this organization.
    OrganizationSsoProviderReachability:
      type: string
      enum:
        - reachable
        - unavailable
        - not_configured
      title: OrganizationSsoProviderReachability
      description: Coarse live provider reachability safe for diagnostic output.
    OrganizationSsoNextAction:
      type: string
      enum:
        - OPEN_SSO_SETUP
        - USE_ORGANIZATION_SSO_RECOVERY
        - CLI_REAUTHENTICATE_WITH_ORG_SSO
      title: OrganizationSsoNextAction
      description: Stable machine action emitted by the SSO diagnostic.
    OrganizationSsoStatusResponse:
      properties:
        id:
          type: string
          format: uuid
          title: Id
        lifecycle:
          $ref: '#/components/schemas/OrganizationSsoLifecycle'
        status:
          $ref: '#/components/schemas/OrganizationSsoProviderState'
        provider_type:
          anyOf:
            - $ref: '#/components/schemas/OrganizationSsoProviderType'
            - type: 'null'
        domains:
          items:
            $ref: '#/components/schemas/OrganizationSsoDomainResponse'
          type: array
          title: Domains
        acquisition_available:
          type: boolean
          title: Acquisition Available
        enforcement_ready:
          type: boolean
          title: Enforcement Ready
        enforcement_policy:
          $ref: '#/components/schemas/OrganizationSsoEnforcementPolicy'
        recovery_ready:
          type: boolean
          title: Recovery Ready
        observed_at:
          anyOf:
            - type: string
              format: date-time
            - type: 'null'
          title: Observed At
      type: object
      required:
        - id
        - lifecycle
        - status
        - provider_type
        - domains
        - acquisition_available
        - enforcement_ready
        - enforcement_policy
        - recovery_ready
        - observed_at
      title: OrganizationSsoStatusResponse
      description: Tenant-safe SSO status with no WorkOS identifiers.
    ErrorDetail:
      properties:
        code:
          type: string
          title: Code
        message:
          type: string
          title: Message
      additionalProperties: true
      type: object
      required:
        - code
        - message
      title: ErrorDetail
      description: Standard error envelope with operation-specific JSON context.
    OrganizationSsoLifecycle:
      type: string
      enum:
        - enabled
        - disabled
        - removed
      title: OrganizationSsoLifecycle
      description: floo-owned lifecycle for an organization SSO binding.
    OrganizationSsoProviderState:
      type: string
      enum:
        - pending
        - active
        - inactive
        - deleted
        - invalid
        - provider_unavailable
      title: OrganizationSsoProviderState
      description: Fail-closed projection of the authoritative WorkOS connection state.
    OrganizationSsoProviderType:
      type: string
      enum:
        - saml
        - oidc
      title: OrganizationSsoProviderType
      description: Provider protocols floo supports for enterprise SSO.
    OrganizationSsoDomainResponse:
      properties:
        domain:
          type: string
          title: Domain
        state:
          type: string
          title: State
      type: object
      required:
        - domain
        - state
      title: OrganizationSsoDomainResponse
      description: Redacted organization-domain presentation state.
    OrganizationSsoEnforcementPolicy:
      type: string
      enum:
        - optional
        - enforced
      title: OrganizationSsoEnforcementPolicy
      description: Whether the binding is optional or required for owned resources.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: A `floo_` API key.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.