> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://help.sigmacomputing.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://help.sigmacomputing.com/_mcp/server. # List SAML service provider certificates (Beta) GET https://api.sigmacomputing.com/v2/saml/service-providers/{samlServiceProviderId}/certificates List all certificates for a given SAML service provider. **Beta**: This documentation describes a public beta feature and is subject to the [Beta features](/docs/sigma-product-releases#beta-features) disclaimer. ### Usage notes - To perform this operation, you must use API credentials owned by a user assigned the Admin account type. - Retrieve the `samlServiceProviderId` by calling the [/saml/service-providers](https://help.sigmacomputing.com/reference/list-saml-service-providers) endpoint. Reference: https://help.sigmacomputing.com/reference/list-saml-service-provider-certificates ## OpenAPI Specification ```yaml openapi: 3.1.0 info: title: sigma-rest-api version: 1.0.0 paths: /v2/saml/service-providers/{samlServiceProviderId}/certificates: get: operationId: listSamlServiceProviderCertificates summary: List SAML service provider certificates (Beta) description: >- List all certificates for a given SAML service provider. **Beta**: This documentation describes a public beta feature and is subject to the [Beta features](/docs/sigma-product-releases#beta-features) disclaimer. ### Usage notes - To perform this operation, you must use API credentials owned by a user assigned the Admin account type. - Retrieve the `samlServiceProviderId` by calling the [/saml/service-providers](https://help.sigmacomputing.com/reference/list-saml-service-providers) endpoint. tags: - SAML parameters: - name: samlServiceProviderId in: path required: true schema: type: string - name: pageToken in: query required: false schema: type: string - name: pageSize in: query required: false schema: type: integer - name: Authorization in: header description: OAuth authentication required: true schema: type: string responses: '200': description: The response body. content: application/json: schema: $ref: >- #/components/schemas/saml_listSamlServiceProviderCertificates_Response_200 servers: - url: https://api.sigmacomputing.com description: Server for GCP (US) hosted organizations - url: https://api.sa.gcp.sigmacomputing.com description: Server for GCP (KSA) hosted organizations - url: https://aws-api.sigmacomputing.com description: Server for AWS US (West) hosted organizations - url: https://api.us-a.aws.sigmacomputing.com description: Server for AWS US (East) hosted organizations - url: https://api.ca.aws.sigmacomputing.com description: Server for AWS Canada hosted organizations - url: https://api.eu.aws.sigmacomputing.com description: Server for AWS Europe hosted organizations - url: https://api.au.aws.sigmacomputing.com description: Server for AWS Australia and APAC hosted organizations - url: https://api.uk.aws.sigmacomputing.com description: Server for AWS UK hosted organizations - url: https://api.us.azure.sigmacomputing.com description: Server for Azure US hosted organizations - url: https://api.eu.azure.sigmacomputing.com description: Server for Azure Europe hosted organizations - url: https://api.ca.azure.sigmacomputing.com description: Server for Azure Canada hosted organizations - url: https://api.uk.azure.sigmacomputing.com description: Server for Azure United Kingdom hosted organizations - url: https://api.au.azure.sigmacomputing.com description: Server for Azure Australia hosted organizations components: schemas: V2SamlServiceProvidersSamlServiceProviderIdCertificatesGetResponsesContentApplicationJsonSchemaEntriesItemsPurpose: type: string enum: - signing - encryption description: >- Purpose of the certificate. Use `signing` for signing SAML requests and `encryption` for encrypting SAML responses. title: >- V2SamlServiceProvidersSamlServiceProviderIdCertificatesGetResponsesContentApplicationJsonSchemaEntriesItemsPurpose V2SamlServiceProvidersSamlServiceProviderIdCertificatesGetResponsesContentApplicationJsonSchemaEntriesItems: type: object properties: samlServiceProviderCertificateId: type: string description: Unique identifier of the SAML service provider certificate samlServiceProviderId: type: string description: Unique identifier of the SAML service provider purpose: $ref: >- #/components/schemas/V2SamlServiceProvidersSamlServiceProviderIdCertificatesGetResponsesContentApplicationJsonSchemaEntriesItemsPurpose description: >- Purpose of the certificate. Use `signing` for signing SAML requests and `encryption` for encrypting SAML responses. publicKeyCertificate: type: string description: PEM-encoded X.509 certificate isActive: type: boolean description: Whether the certificate is currently active notBefore: type: string format: date-time description: Date and time when the certificate becomes valid notAfter: type: string format: date-time description: Date and time when the certificate expires createdAt: type: string format: date-time description: When the certificate was created createdBy: type: string description: Identifier of the user who created the certificate updatedAt: type: string format: date-time description: When the certificate was last updated updatedBy: type: string description: Identifier of the user who last updated the certificate required: - samlServiceProviderCertificateId - samlServiceProviderId - purpose - publicKeyCertificate - isActive - notBefore - notAfter - createdAt - createdBy - updatedAt - updatedBy title: >- V2SamlServiceProvidersSamlServiceProviderIdCertificatesGetResponsesContentApplicationJsonSchemaEntriesItems saml_listSamlServiceProviderCertificates_Response_200: type: object properties: entries: type: array items: $ref: >- #/components/schemas/V2SamlServiceProvidersSamlServiceProviderIdCertificatesGetResponsesContentApplicationJsonSchemaEntriesItems description: Array of results returned by the endpoint nextPageToken: type: string description: >- A string that can be passed to the `pageToken` parameter in the next request to fetch the next page of results. Not present in the last page of results. **Must be treated as an opaque string.** required: - entries title: saml_listSamlServiceProviderCertificates_Response_200 securitySchemes: OAuth: type: http scheme: bearer description: OAuth 2.0 authentication ``` ## Examples **Request** ```json {} ``` **Response** ```json { "entries": [ { "samlServiceProviderCertificateId": "c3f1a9d2-4b7e-4f3a-9a2e-1d2b3c4e5f67", "samlServiceProviderId": "sp-9f8e7d6c-5b4a-3210-fedc-ba9876543210", "purpose": "signing", "publicKeyCertificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----", "isActive": true, "notBefore": "2024-01-15T09:30:00Z", "notAfter": "2025-01-15T09:30:00Z", "createdAt": "2024-01-10T12:00:00Z", "createdBy": "admin_user_123", "updatedAt": "2024-04-01T15:45:00Z", "updatedBy": "admin_user_456" }, { "samlServiceProviderCertificateId": "d4e5f6a7-b8c9-4d0e-9f1a-2b3c4d5e6f70", "samlServiceProviderId": "sp-9f8e7d6c-5b4a-3210-fedc-ba9876543210", "purpose": "encryption", "publicKeyCertificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----", "isActive": false, "notBefore": "2023-06-01T00:00:00Z", "notAfter": "2024-06-01T00:00:00Z", "createdAt": "2023-05-20T08:15:00Z", "createdBy": "admin_user_123", "updatedAt": "2023-12-15T10:30:00Z", "updatedBy": "admin_user_789" } ], "nextPageToken": "eyJwYWdlIjoxfQ==" } ``` **SDK Code** ```python import requests url = "https://api.sigmacomputing.com/v2/saml/service-providers/samlServiceProviderId/certificates" payload = {} headers = { "Authorization": ".", "Content-Type": "application/json" } response = requests.get(url, json=payload, headers=headers) print(response.json()) ``` ```javascript const url = 'https://api.sigmacomputing.com/v2/saml/service-providers/samlServiceProviderId/certificates'; const options = { method: 'GET', headers: {Authorization: '.', 'Content-Type': 'application/json'}, body: '{}' }; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "https://api.sigmacomputing.com/v2/saml/service-providers/samlServiceProviderId/certificates" payload := strings.NewReader("{}") req, _ := http.NewRequest("GET", url, payload) req.Header.Add("Authorization", ".") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("https://api.sigmacomputing.com/v2/saml/service-providers/samlServiceProviderId/certificates") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["Authorization"] = '.' request["Content-Type"] = 'application/json' request.body = "{}" response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.get("https://api.sigmacomputing.com/v2/saml/service-providers/samlServiceProviderId/certificates") .header("Authorization", ".") .header("Content-Type", "application/json") .body("{}") .asString(); ``` ```php request('GET', 'https://api.sigmacomputing.com/v2/saml/service-providers/samlServiceProviderId/certificates', [ 'body' => '{}', 'headers' => [ 'Authorization' => '.', 'Content-Type' => 'application/json', ], ]); echo $response->getBody(); ``` ```csharp using RestSharp; var client = new RestClient("https://api.sigmacomputing.com/v2/saml/service-providers/samlServiceProviderId/certificates"); var request = new RestRequest(Method.GET); request.AddHeader("Authorization", "."); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift import Foundation let headers = [ "Authorization": ".", "Content-Type": "application/json" ] let parameters = [] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://api.sigmacomputing.com/v2/saml/service-providers/samlServiceProviderId/certificates")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "GET" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```