Confluent

Confluent Group Mappings (iam/v2/sso) API

[![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](#section/Versioning/API-Lifecycle-Policy) `GroupMapping` objects establish relationships between user groups in your SSO identity provider and specific RBAC roles in Confluent Cloud. Group mappings enable automated and secure access control to Confluent Cloud resources, reducing administrative workload by streamlining user provisioning and authorization. Related guide: [Use group mappings with your SSO identity provider](https://docs.confluent.io/cloud/current/access-management/authenticate/sso/group-mapping/overview.html). ## The Group Mappings Model ## Quotas and Limits This resource is subject to the [following quotas](https://docs.confluent.io/cloud/current/quotas/overview.html): | Quota | Description | | --- | --- | | `group_mappings_per_org` | Number of group mappings per organization |

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 5

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /iam/v2/sso/group-mappings List SSO group mappings · List of Group Mappings #
Ask an LLM
“Which SSO group mappings are configured for my organization?”
“Can I page through all the group mappings?”
Tell an agent
List my SSO group mappings.
List {page_size} group mappings per page.
POST /iam/v2/sso/group-mappings Create an SSO group mapping · Create a Group Mapping #
Ask an LLM
“How do I map an identity provider group to Confluent Cloud permissions?”
“Can I use a CEL condition to match several IdP groups in one mapping?”
Tell an agent
Create group mapping {display_name} with filter {filter}.
Map the SSO group matched by {filter} into a new group mapping described as {description}.
GET /iam/v2/sso/group-mappings/{id} Read an SSO group mapping · Read a Group Mapping #
Ask an LLM
“What filter and principal does a given group mapping use?”
“Can I look up one SSO group mapping by ID?”
Tell an agent
Show group mapping {id}.
Get the filter used by SSO group mapping {id}.
PATCH /iam/v2/sso/group-mappings/{id} Update an SSO group mapping · Update a Group Mapping #
Ask an LLM
“Can I change the group filter of an existing mapping?”
“Is it possible to rename or describe a group mapping after creating it?”
Tell an agent
Update group mapping {id} to use filter {filter}.
Rename SSO group mapping {id} to {display_name}.
DELETE /iam/v2/sso/group-mappings/{id} Delete an SSO group mapping · Delete a Group Mapping #
Ask an LLM
“How do I remove an SSO group mapping?”
“Can I delete a group mapping so that IdP group loses its access?”
Tell an agent destructive · confirm first
Delete group mapping {id}.
Remove SSO group mapping {id}.

Documentation

📖
APIReference
https://docs.confluent.io/cloud/current/api.html
📖
APIReference
https://api.telemetry.confluent.cloud/docs

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/confluent/refs/heads/main/openapi/confluent-group-mappings-iam-v2-sso-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/confluent:confluent-group-mappings-iam-v2-sso-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

confluent-group-mappings-iam-v2-sso-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Confluent Group Mappings (iam/v2/sso) API
  version: ''
  x-api-id: 46234552-5833-42eb-ba0f-883ad3f70d2b
  x-audience: external-public
  x-logo:
    url: https://assets.confluent.io/m/1661ef5e4ff82d3d/
  description: 'Operations tagged Group Mappings (iam/v2/sso) across 2 of this provider''s published API definitions: confluent-cloud-openapi.yaml, confluent-cloud-full.yaml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.confluent.cloud
  description: Confluent Cloud API
tags:


# --- truncated at 32 KB (64 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/confluent/refs/heads/main/openapi/confluent-group-mappings-iam-v2-sso-api-openapi.yml