Granite · Schema

SSOConnection

Knowledge BaseArtificial IntelligenceCollaborationSecurityEncryption

Properties

Name	Type	Description
protocol	string
issuer	string	The OpenID Connect issuer, or the SAML identity provider's entity ID.
client_id	string
saml	object	Granite's service provider, to register with a SAML identity provider.
jit_role	string	Not used (kept for older apps). Single sign-on admits members and people with an open email invitation, who get its role (others get 403 `sso_not_invited`).
enforced	boolean
tested_at	string	The last successful SSO sign-in.
redirect_url	string	OpenID Connect; register this redirect URI with the identity provider.

View JSON Schema on GitHub

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/granite-md/json-schema/granite-md-ssoconnection-schema.json",
  "title": "SSOConnection",
  "x-generated": "2026-11-10",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/granite-md-openapi.yaml#/components/schemas/SSOConnection",
  "type": "object",
  "required": [
    "protocol",
    "issuer",
    "jit_role",
    "enforced"
  ],
  "properties": {
    "protocol": {
      "type": "string",
      "enum": [
        "oidc",
        "saml"
      ]
    },
    "issuer": {
      "type": "string",
      "description": "The OpenID Connect issuer, or the SAML identity provider's entity ID."
    },
    "client_id": {
      "type": "string"
    },
    "saml": {
      "type": "object",
      "description": "Granite's service provider, to register with a SAML identity provider.",
      "required": [
        "entity_id",
        "acs_url",
        "metadata_url"
      ],
      "properties": {
        "entity_id": {
          "type": "string"
        },
        "acs_url": {
          "type": "string"
        },
        "metadata_url": {
          "type": "string"
        }
      }
    },
    "jit_role": {
      "type": "string",
      "enum": [
        "member",
        "guest"
      ],
      "description": "Not used (kept for older apps). Single sign-on admits members and people with an open email invitation, who get its role (others get 403 `sso_not_invited`)."
    },
    "enforced": {
      "type": "boolean"
    },
    "tested_at": {
      "type": "string",
      "format": "date-time",
      "description": "The last successful SSO sign-in."
    },
    "redirect_url": {
      "type": "string",
      "description": "OpenID Connect; register this redirect URI with the identity provider."
    }
  }
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this

find_json_schemasBrowse and filter every JSON Schema in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This JSON Schema

curl "https://apis.io/api/v1/json-schemas/granite-md-ssoconnection"

All schemas

curl "https://apis.io/api/v1/json-schemas?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.