--- title: List Access identity providers --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Zero Trust](https://developers.cloudflare.com/api/go/resources/zero_trust) [Identity Providers](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/identity_providers) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # List Access identity providers client.ZeroTrust.IdentityProviders.List(ctx, params) (\*V4PagePaginationArray\[[IdentityProviderListResponse]()], error) GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/access/identity\_providers Lists all configured identity providers. ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### Accepted Permissions (at least one required) `Access: Organizations, Identity Providers, and Groups Write``Access: Organizations, Identity Providers, and Groups Read` ##### ParametersExpand Collapse

params IdentityProviderListParams

AccountID param.Field\[string]Optional Path param: The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. Link to this property ZoneID param.Field\[string]Optional Path param: The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. Link to this property Page param.Field\[int64]Optional Query param: Page number of results. Link to this property PerPage param.Field\[int64]Optional Query param: Number of results per page. maximum1000 Link to this property SCIMEnabled param.Field\[string]Optional Query param: Indicates to Access to only retrieve identity providers that have the System for Cross-Domain Identity Management (SCIM) enabled. Link to this property

[Link to this property](<#(resource)%20zero_trust.identity_providers%20%3E%20(method)%20list%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse

type IdentityProviderListResponse interface{…}

One of the following:

type AzureAD struct{…}

Config AzureADConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

Claims \[]stringOptional Custom claims Link to this property ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property ConditionalAccessEnabled boolOptional Should Cloudflare try to load authentication contexts from your account Link to this property DirectoryID stringOptional Your Azure directory uuid Link to this property EmailClaimName stringOptional The claim name for email in the id\_token response. Link to this property

Prompt AzureADConfigPromptOptional Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn’t presented with any interactive prompt. If the request can’t be completed silently by using single-sign on, the Microsoft identity platform returns an interaction\_required error. prompt=select\_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether.

One of the following: const AzureADConfigPromptLogin AzureADConfigPrompt = "login" Link to this property const AzureADConfigPromptSelectAccount AzureADConfigPrompt = "select\_account" Link to this property const AzureADConfigPromptNone AzureADConfigPrompt = "none" Link to this property

Link to this property SupportGroups boolOptional Should Cloudflare try to load groups from your account Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

One of the following: const IdentityProviderTypeOnetimepin IdentityProviderType = "onetimepin" Link to this property const IdentityProviderTypeAzureAD IdentityProviderType = "azureAD" Link to this property const IdentityProviderTypeSAML IdentityProviderType = "saml" Link to this property const IdentityProviderTypeCentrify IdentityProviderType = "centrify" Link to this property const IdentityProviderTypeFacebook IdentityProviderType = "facebook" Link to this property const IdentityProviderTypeGitHub IdentityProviderType = "github" Link to this property const IdentityProviderTypeGoogleApps IdentityProviderType = "google-apps" Link to this property const IdentityProviderTypeGoogle IdentityProviderType = "google" Link to this property const IdentityProviderTypeLinkedin IdentityProviderType = "linkedin" Link to this property const IdentityProviderTypeOIDC IdentityProviderType = "oidc" Link to this property const IdentityProviderTypeOkta IdentityProviderType = "okta" Link to this property const IdentityProviderTypeOnelogin IdentityProviderType = "onelogin" Link to this property const IdentityProviderTypePingone IdentityProviderType = "pingone" Link to this property const IdentityProviderTypeYandex IdentityProviderType = "yandex" Link to this property const IdentityProviderTypeCloudflare IdentityProviderType = "cloudflare" Link to this property const IdentityProviderTypePasskeys IdentityProviderType = "passkeys" Link to this property

Link to this property ID stringOptional UUID. maxLength36 Link to this property ReadOnly boolOptional Indicates that the identity provider is immutable and cannot be updated or deleted via the API. Link to this property

SAMLCertificateSet AzureADSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CreatedAt Time Timestamp when the certificate set was created formatdate-time Link to this property UID string Unique identifier for the certificate set formatuuid Link to this property UpdatedAt Time Timestamp when the certificate set was last updated (e.g., during rotation) formatdate-time Link to this property

CurrentCertificate AzureADSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

IsCurrent bool Indicates whether this is the currently active certificate Link to this property NotAfter Time Certificate expiration date. Certificates are automatically rotated 30 days before expiration. formatdate-time Link to this property PublicCertificate string PEM-encoded X.509 certificate containing the public key. Configure this certificate in your external SAML Identity Provider to enable encryption. Link to this property UID string Unique identifier for the certificate formatuuid Link to this property

Link to this property PreviousCertificate unknownOptional The previous certificate, maintained during rotation to ensure continuity. Null if no rotation has occurred. Mirrors the structure of saml_certificate. Link to this property

Link to this property SAMLCertificateSetID stringOptional The UID of the SAML encryption certificate set assigned to this Identity Provider. Only present for SAML identity providers with encryption configured. Create a certificate set via POST to /identity_providers/{id}/saml_certificate. formatuuid Link to this property

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

IdentityUpdateBehavior IdentityProviderSCIMConfigIdentityUpdateBehaviorOptional Indicates how a SCIM event updates a user identity used for policy evaluation. Use “automatic” to automatically update a user’s identity and augment it with fields from the SCIM user resource. Use “reauth” to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With “reauth” identities will not contain fields from the SCIM user resource. With “no\_action” identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate.

One of the following: const IdentityProviderSCIMConfigIdentityUpdateBehaviorAutomatic IdentityProviderSCIMConfigIdentityUpdateBehavior = "automatic" Link to this property const IdentityProviderSCIMConfigIdentityUpdateBehaviorReauth IdentityProviderSCIMConfigIdentityUpdateBehavior = "reauth" Link to this property const IdentityProviderSCIMConfigIdentityUpdateBehaviorNoAction IdentityProviderSCIMConfigIdentityUpdateBehavior = "no\_action" Link to this property

Link to this property SCIMBaseURL stringOptional The base URL of Cloudflare’s SCIM V2.0 API endpoint. Link to this property SeatDeprovision boolOptional A flag to remove a user’s seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user\_deprovision is also enabled. Link to this property Secret stringOptional A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it at /access/identity\_providers/:idpID/refresh\_scim\_secret. Link to this property UserDeprovision boolOptional A flag to enable revoking a user’s session in Access and Gateway when they have been deprovisioned in the Identity Provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessCentrify struct{…}

Config IdentityProviderListResponseAccessCentrifyConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

CentrifyAccount stringOptional Your centrify account url Link to this property CentrifyAppID stringOptional Your centrify app id Link to this property Claims \[]stringOptional Custom claims Link to this property ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property EmailClaimName stringOptional The claim name for email in the id\_token response. Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessCentrifySAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessCentrifySAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessFacebook struct{…}

Config GenericOAuthConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessFacebookSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessFacebookSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessGitHub struct{…}

Config GenericOAuthConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessGitHubSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessGitHubSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessGoogle struct{…}

Config IdentityProviderListResponseAccessGoogleConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessGoogleSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessGoogleSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessGoogleApps struct{…}

Config IdentityProviderListResponseAccessGoogleAppsConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

AppsDomain stringOptional Your companies TLD Link to this property Claims \[]stringOptional Custom claims Link to this property ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property EmailClaimName stringOptional The claim name for email in the id\_token response. Link to this property

Prompt IdentityProviderListResponseAccessGoogleAppsConfigPromptOptional Configures the prompt behavior for Google authentication.

One of the following: const IdentityProviderListResponseAccessGoogleAppsConfigPromptNone IdentityProviderListResponseAccessGoogleAppsConfigPrompt = "none" Link to this property const IdentityProviderListResponseAccessGoogleAppsConfigPromptConsent IdentityProviderListResponseAccessGoogleAppsConfigPrompt = "consent" Link to this property const IdentityProviderListResponseAccessGoogleAppsConfigPromptSelectAccount IdentityProviderListResponseAccessGoogleAppsConfigPrompt = "select\_account" Link to this property

Link to this property UseLoginHint boolOptional Whether to use a previously authenticated Access email as a Google login hint when exactly one email matches the Workspace domain. Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessGoogleAppsSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessGoogleAppsSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessLinkedin struct{…}

Config GenericOAuthConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessLinkedinSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessLinkedinSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessOIDC struct{…}

Config IdentityProviderListResponseAccessOIDCConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

AuthURL stringOptional The authorization\_endpoint URL of your IdP Link to this property CERTsURL stringOptional The jwks\_uri endpoint of your IdP to allow the IdP keys to sign the tokens Link to this property Claims \[]stringOptional Custom claims Link to this property ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property EmailClaimName stringOptional The claim name for email in the id\_token response. Link to this property PKCEEnabled boolOptional Enable Proof Key for Code Exchange (PKCE) Link to this property Scopes \[]stringOptional OAuth scopes Link to this property TokenURL stringOptional The token\_endpoint URL of your IdP Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessOIDCSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessOIDCSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessOkta struct{…}

Config IdentityProviderListResponseAccessOktaConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

AuthorizationServerID stringOptional Your okta authorization server id Link to this property Claims \[]stringOptional Custom claims Link to this property ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property EmailClaimName stringOptional The claim name for email in the id\_token response. Link to this property OktaAccount stringOptional Your okta account url Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessOktaSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessOktaSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessOnelogin struct{…}

Config IdentityProviderListResponseAccessOneloginConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

Claims \[]stringOptional Custom claims Link to this property ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property EmailClaimName stringOptional The claim name for email in the id\_token response. Link to this property OneloginAccount stringOptional Your OneLogin account url Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessOneloginSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessOneloginSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessPingone struct{…}

Config IdentityProviderListResponseAccessPingoneConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

Claims \[]stringOptional Custom claims Link to this property ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property EmailClaimName stringOptional The claim name for email in the id\_token response. Link to this property PingEnvID stringOptional Your PingOne environment identifier Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessPingoneSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessPingoneSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessSAML struct{…}

Config IdentityProviderListResponseAccessSAMLConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

Attributes \[]stringOptional A list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules. Link to this property EmailAttributeName stringOptional The attribute name for email in the SAML response. Link to this property EnableEncryption boolOptional Enable SAML assertion encryption. When enabled, the Identity Provider will encrypt SAML assertions using the certificate from the assigned certificate set. To enable encryption: 1. Create a certificate set via POST to /identity_providers/{id}/saml_certificate 2. Set this field to true and include saml_certificate_set_id in the PUT request 3. Configure the public certificate in your external Identity Provider Note: Requires saml_certificate_set_id to be set when true. Link to this property ForceAuthn boolOptional Asks the IdP to reauthenticate the user for each SAML authentication request. Link to this property

HeaderAttributes \[]IdentityProviderListResponseAccessSAMLConfigHeaderAttributeOptional Add a list of attribute names that will be returned in the response header from the Access callback.

AttributeName stringOptional attribute name from the IDP Link to this property HeaderName stringOptional header that will be added on the request to the origin Link to this property

Link to this property IdPPublicCERTs \[]stringOptional X509 certificate to verify the signature in the SAML authentication response Link to this property IssuerURL stringOptional IdP Entity ID or Issuer URL Link to this property MaxSSOURLLength int64Optional The maximum URL length the IdP accepts for the SSO redirect URL. When the constructed SSO URL would exceed this length, the RelayState is stored server-side and a short nonce is passed to the IdP instead. Set this if your IdP enforces a URL length limit. maximum100000 minimum512 Link to this property SignRequest boolOptional Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints. Link to this property SSOTargetURL stringOptional URL to send the SAML authentication requests to Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessSAMLSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessSAMLSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessYandex struct{…}

Config GenericOAuthConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

ClientID stringOptional Your OAuth Client ID Link to this property ClientSecret stringOptional Your OAuth Client Secret Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessYandexSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessYandexSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessOnetimepin struct{…}

Config IdentityProviderListResponseAccessOnetimepinConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

RedirectURL stringOptional Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessOnetimepinSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessOnetimepinSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessCloudflare struct{…}

Config IdentityProviderListResponseAccessCloudflareConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

RedirectURL stringOptional Link to this property RestrictToAccountMembers boolOptional When enabled, only users who are members of your Cloudflare account can authenticate through this identity provider. When disabled, any user with a Cloudflare account can authenticate, subject to your Access policies. Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessCloudflareSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessCloudflareSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

type IdentityProviderListResponseAccessPasskeys struct{…}

Config IdentityProviderListResponseAccessPasskeysConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

LoginPageAutoPrompt boolOptional When enabled, the Access login page automatically prompts the user to authenticate with a passkey. Link to this property RedirectURL stringOptional Link to this property

Link to this property Name string The name of the identity provider, shown to users on the login page. Link to this property

Type IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

SAMLCertificateSet IdentityProviderListResponseAccessPasskeysSAMLCertificateSetOptional The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

CurrentCertificate IdentityProviderListResponseAccessPasskeysSAMLCertificateSetCurrentCertificateOptional The currently active certificate used for encrypting SAML assertions

SCIMConfig IdentityProviderSCIMConfigOptional The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

Enabled boolOptional A flag to enable or disable SCIM for the identity provider. Link to this property

Link to this property

[Link to this property](<#(resource)%20zero_trust.identity_providers%20%3E%20(model)%20IdentityProviderListResponse%20%3E%20(schema)>) ### List Access identity providers Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/option" "github.com/cloudflare/cloudflare-go/zero_trust" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) page, err := client.ZeroTrust.IdentityProviders.List(context.TODO(), zero_trust.IdentityProviderListParams{ }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", page) } ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": [ { "config": { "claims": [ "email_verified", "preferred_username", "custom_claim_name" ], "client_id": "", "client_secret": "", "conditional_access_enabled": true, "directory_id": "", "email_claim_name": "custom_claim_name", "prompt": "login", "support_groups": true }, "name": "Widget Corps IDP", "type": "onetimepin", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "read_only": true, "saml_certificate_set": { "created_at": "2026-05-07T19:16:19.821162Z", "uid": "c409ef44-e72c-41c8-8c0b-278c8a6f4fd8", "updated_at": "2026-05-07T19:16:19.821162Z", "current_certificate": { "is_current": true, "not_after": "2027-05-07T19:11:00Z", "public_certificate": "-----BEGIN CERTIFICATE-----\nMIIEpzCCA4+gAwIBAgIUTh2VSDDJ0oB/gabio6j1L9QwWoUwDQYJKoZIhvcNAQEL\n...\n-----END CERTIFICATE-----\n", "uid": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415" }, "previous_certificate": {} }, "saml_certificate_set_id": "c409ef44-e72c-41c8-8c0b-278c8a6f4fd8", "scim_config": { "enabled": true, "identity_update_behavior": "automatic", "scim_base_url": "scim_base_url", "seat_deprovision": true, "secret": "secret", "user_deprovision": true } } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": [ { "config": { "claims": [ "email_verified", "preferred_username", "custom_claim_name" ], "client_id": "", "client_secret": "", "conditional_access_enabled": true, "directory_id": "", "email_claim_name": "custom_claim_name", "prompt": "login", "support_groups": true }, "name": "Widget Corps IDP", "type": "onetimepin", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "read_only": true, "saml_certificate_set": { "created_at": "2026-05-07T19:16:19.821162Z", "uid": "c409ef44-e72c-41c8-8c0b-278c8a6f4fd8", "updated_at": "2026-05-07T19:16:19.821162Z", "current_certificate": { "is_current": true, "not_after": "2027-05-07T19:11:00Z", "public_certificate": "-----BEGIN CERTIFICATE-----\nMIIEpzCCA4+gAwIBAgIUTh2VSDDJ0oB/gabio6j1L9QwWoUwDQYJKoZIhvcNAQEL\n...\n-----END CERTIFICATE-----\n", "uid": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415" }, "previous_certificate": {} }, "saml_certificate_set_id": "c409ef44-e72c-41c8-8c0b-278c8a6f4fd8", "scim_config": { "enabled": true, "identity_update_behavior": "automatic", "scim_base_url": "scim_base_url", "seat_deprovision": true, "secret": "secret", "user_deprovision": true } } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ```