--- title: List Access identity providers --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [Zero Trust](https://developers.cloudflare.com/api/python/resources/zero_trust) [Identity Providers](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/identity_providers) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # List Access identity providers zero\_trust.identity\_providers.list(IdentityProviderListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[IdentityProviderListResponse]()] GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/access/identity\_providers Lists all configured identity providers. ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### Accepted Permissions (at least one required) `Access: Organizations, Identity Providers, and Groups Write``Access: Organizations, Identity Providers, and Groups Read` ##### ParametersExpand Collapse account\_id: Optional\[str] The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. [Link to this property](<#(resource)%20zero_trust.identity_providers%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>) zone\_id: Optional\[str] The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. [Link to this property](<#(resource)%20zero_trust.identity_providers%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>) page: Optional\[int] Page number of results. [Link to this property](<#(resource)%20zero_trust.identity_providers%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20page%20%3E%20(schema)>) per\_page: Optional\[int] Number of results per page. maximum1000 [Link to this property](<#(resource)%20zero_trust.identity_providers%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20per_page%20%3E%20(schema)>) scim\_enabled: Optional\[str] Indicates to Access to only retrieve identity providers that have the System for Cross-Domain Identity Management (SCIM) enabled. [Link to this property](<#(resource)%20zero_trust.identity_providers%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20scim_enabled%20%3E%20(schema)>) ##### ReturnsExpand Collapse

IdentityProviderListResponse

One of the following:

class AzureAD: …

config: Config The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

claims: Optional\[List\[str]] Custom claims Link to this property client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property conditional\_access\_enabled: Optional\[bool] Should Cloudflare try to load authentication contexts from your account Link to this property directory\_id: Optional\[str] Your Azure directory uuid Link to this property email\_claim\_name: Optional\[str] The claim name for email in the id\_token response. Link to this property

prompt: Optional\[Literal\["login", "select\_account", "none"]] Indicates the type of user interaction that is required. prompt=login forces the user to enter their credentials on that request, negating single-sign on. prompt=none is the opposite. It ensures that the user isn’t presented with any interactive prompt. If the request can’t be completed silently by using single-sign on, the Microsoft identity platform returns an interaction\_required error. prompt=select\_account interrupts single sign-on providing account selection experience listing all the accounts either in session or any remembered account or an option to choose to use a different account altogether.

One of the following: "login" Link to this property "select\_account" Link to this property "none" Link to this property

Link to this property support\_groups: Optional\[bool] Should Cloudflare try to load groups from your account Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

Link to this property id: Optional\[str] UUID. maxLength36 Link to this property read\_only: Optional\[bool] Indicates that the identity provider is immutable and cannot be updated or deleted via the API. Link to this property

saml\_certificate\_set: Optional\[SAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

created\_at: datetime Timestamp when the certificate set was created formatdate-time Link to this property uid: str Unique identifier for the certificate set formatuuid Link to this property updated\_at: datetime Timestamp when the certificate set was last updated (e.g., during rotation) formatdate-time Link to this property

current\_certificate: Optional\[SAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

is\_current: bool Indicates whether this is the currently active certificate Link to this property not\_after: datetime Certificate expiration date. Certificates are automatically rotated 30 days before expiration. formatdate-time Link to this property public\_certificate: str PEM-encoded X.509 certificate containing the public key. Configure this certificate in your external SAML Identity Provider to enable encryption. Link to this property uid: str Unique identifier for the certificate formatuuid Link to this property

Link to this property previous\_certificate: Optional\[object] The previous certificate, maintained during rotation to ensure continuity. Null if no rotation has occurred. Mirrors the structure of saml_certificate. Link to this property

Link to this property saml\_certificate\_set\_id: Optional\[str] The UID of the SAML encryption certificate set assigned to this Identity Provider. Only present for SAML identity providers with encryption configured. Create a certificate set via POST to /identity_providers/{id}/saml_certificate. formatuuid Link to this property

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

identity\_update\_behavior: Optional\[Literal\["automatic", "reauth", "no\_action"]] Indicates how a SCIM event updates a user identity used for policy evaluation. Use “automatic” to automatically update a user’s identity and augment it with fields from the SCIM user resource. Use “reauth” to force re-authentication on group membership updates, user identity update will only occur after successful re-authentication. With “reauth” identities will not contain fields from the SCIM user resource. With “no\_action” identities will not be changed by SCIM updates in any way and users will not be prompted to reauthenticate.

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property scim\_base\_url: Optional\[str] The base URL of Cloudflare’s SCIM V2.0 API endpoint. Link to this property seat\_deprovision: Optional\[bool] A flag to remove a user’s seat in Zero Trust when they have been deprovisioned in the Identity Provider. This cannot be enabled unless user\_deprovision is also enabled. Link to this property secret: Optional\[str] A read-only token generated when the SCIM integration is enabled for the first time. It is redacted on subsequent requests. If you lose this you will need to refresh it at /access/identity\_providers/:idpID/refresh\_scim\_secret. Link to this property user\_deprovision: Optional\[bool] A flag to enable revoking a user’s session in Access and Gateway when they have been deprovisioned in the Identity Provider. Link to this property

Link to this property

class AccessCentrify: …

config: AccessCentrifyConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

centrify\_account: Optional\[str] Your centrify account url Link to this property centrify\_app\_id: Optional\[str] Your centrify app id Link to this property claims: Optional\[List\[str]] Custom claims Link to this property client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property email\_claim\_name: Optional\[str] The claim name for email in the id\_token response. Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessCentrifySAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessCentrifySAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessFacebook: …

config: GenericOAuthConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessFacebookSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessFacebookSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessGitHub: …

config: GenericOAuthConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessGitHubSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessGitHubSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessGoogle: …

config: AccessGoogleConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

claims: Optional\[List\[str]] Custom claims Link to this property client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property email\_claim\_name: Optional\[str] The claim name for email in the id\_token response. Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessGoogleSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessGoogleSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessGoogleApps: …

config: AccessGoogleAppsConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

apps\_domain: Optional\[str] Your companies TLD Link to this property claims: Optional\[List\[str]] Custom claims Link to this property client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property email\_claim\_name: Optional\[str] The claim name for email in the id\_token response. Link to this property

prompt: Optional\[Literal\["none", "consent", "select\_account"]] Configures the prompt behavior for Google authentication.

One of the following: "none" Link to this property "consent" Link to this property "select\_account" Link to this property

Link to this property use\_login\_hint: Optional\[bool] Whether to use a previously authenticated Access email as a Google login hint when exactly one email matches the Workspace domain. Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessGoogleAppsSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessGoogleAppsSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessLinkedin: …

config: GenericOAuthConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessLinkedinSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessLinkedinSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessOIDC: …

config: AccessOIDCConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

auth\_url: Optional\[str] The authorization\_endpoint URL of your IdP Link to this property certs\_url: Optional\[str] The jwks\_uri endpoint of your IdP to allow the IdP keys to sign the tokens Link to this property claims: Optional\[List\[str]] Custom claims Link to this property client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property email\_claim\_name: Optional\[str] The claim name for email in the id\_token response. Link to this property pkce\_enabled: Optional\[bool] Enable Proof Key for Code Exchange (PKCE) Link to this property scopes: Optional\[List\[str]] OAuth scopes Link to this property token\_url: Optional\[str] The token\_endpoint URL of your IdP Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessOIDCSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessOIDCSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessOkta: …

config: AccessOktaConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

authorization\_server\_id: Optional\[str] Your okta authorization server id Link to this property claims: Optional\[List\[str]] Custom claims Link to this property client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property email\_claim\_name: Optional\[str] The claim name for email in the id\_token response. Link to this property okta\_account: Optional\[str] Your okta account url Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessOktaSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessOktaSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessOnelogin: …

config: AccessOneloginConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

claims: Optional\[List\[str]] Custom claims Link to this property client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property email\_claim\_name: Optional\[str] The claim name for email in the id\_token response. Link to this property onelogin\_account: Optional\[str] Your OneLogin account url Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessOneloginSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessOneloginSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessPingone: …

config: AccessPingoneConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

claims: Optional\[List\[str]] Custom claims Link to this property client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property email\_claim\_name: Optional\[str] The claim name for email in the id\_token response. Link to this property ping\_env\_id: Optional\[str] Your PingOne environment identifier Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessPingoneSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessPingoneSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessSAML: …

config: AccessSAMLConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

attributes: Optional\[List\[str]] A list of SAML attribute names that will be added to your signed JWT token and can be used in SAML policy rules. Link to this property email\_attribute\_name: Optional\[str] The attribute name for email in the SAML response. Link to this property enable\_encryption: Optional\[bool] Enable SAML assertion encryption. When enabled, the Identity Provider will encrypt SAML assertions using the certificate from the assigned certificate set. To enable encryption: 1. Create a certificate set via POST to /identity_providers/{id}/saml_certificate 2. Set this field to true and include saml_certificate_set_id in the PUT request 3. Configure the public certificate in your external Identity Provider Note: Requires saml_certificate_set_id to be set when true. Link to this property force\_authn: Optional\[bool] Asks the IdP to reauthenticate the user for each SAML authentication request. Link to this property

header\_attributes: Optional\[List\[AccessSAMLConfigHeaderAttribute]] Add a list of attribute names that will be returned in the response header from the Access callback.

attribute\_name: Optional\[str] attribute name from the IDP Link to this property header\_name: Optional\[str] header that will be added on the request to the origin Link to this property

Link to this property idp\_public\_certs: Optional\[List\[str]] X509 certificate to verify the signature in the SAML authentication response Link to this property issuer\_url: Optional\[str] IdP Entity ID or Issuer URL Link to this property max\_sso\_url\_length: Optional\[int] The maximum URL length the IdP accepts for the SSO redirect URL. When the constructed SSO URL would exceed this length, the RelayState is stored server-side and a short nonce is passed to the IdP instead. Set this if your IdP enforces a URL length limit. maximum100000 minimum512 Link to this property sign\_request: Optional\[bool] Sign the SAML authentication request with Access credentials. To verify the signature, use the public key from the Access certs endpoints. Link to this property sso\_target\_url: Optional\[str] URL to send the SAML authentication requests to Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessSAMLSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessSAMLSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessYandex: …

config: GenericOAuthConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

client\_id: Optional\[str] Your OAuth Client ID Link to this property client\_secret: Optional\[str] Your OAuth Client Secret Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessYandexSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessYandexSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessOnetimepin: …

config: AccessOnetimepinConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

redirect\_url: Optional\[str] Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessOnetimepinSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessOnetimepinSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessCloudflare: …

config: AccessCloudflareConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

redirect\_url: Optional\[str] Link to this property restrict\_to\_account\_members: Optional\[bool] When enabled, only users who are members of your Cloudflare account can authenticate through this identity provider. When disabled, any user with a Cloudflare account can authenticate, subject to your Access policies. Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessCloudflareSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessCloudflareSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

class AccessPasskeys: …

config: AccessPasskeysConfig The configuration parameters for the identity provider. To view the required parameters for a specific provider, refer to our developer documentation.

login\_page\_auto\_prompt: Optional\[bool] When enabled, the Access login page automatically prompts the user to authenticate with a passkey. Link to this property redirect\_url: Optional\[str] Link to this property

Link to this property name: str The name of the identity provider, shown to users on the login page. Link to this property

type: IdentityProviderType The type of identity provider. To determine the value for a specific provider, refer to our developer documentation.

saml\_certificate\_set: Optional\[AccessPasskeysSAMLCertificateSet] The SAML encryption certificate set details, including current and previous certificates. Only present for SAML identity providers with a certificate set assigned.

current\_certificate: Optional\[AccessPasskeysSAMLCertificateSetCurrentCertificate] The currently active certificate used for encrypting SAML assertions

scim\_config: Optional\[IdentityProviderSCIMConfig] The configuration settings for enabling a System for Cross-Domain Identity Management (SCIM) with the identity provider.

enabled: Optional\[bool] A flag to enable or disable SCIM for the identity provider. Link to this property

One of the following: "automatic" Link to this property "reauth" Link to this property "no\_action" Link to this property

Link to this property

[Link to this property](<#(resource)%20zero_trust.identity_providers%20%3E%20(model)%20identity_provider_list_response%20%3E%20(schema)>) ### List Access identity providers Python HTTPTypeScriptPythonGoTerraform ``` import os from cloudflare import Cloudflare client = Cloudflare( api_token=os.environ.get("CLOUDFLARE_API_TOKEN"), # This is the default and can be omitted ) page = client.zero_trust.identity_providers.list( account_id="account_id", ) page = page.result[0] print(page) ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": [ { "config": { "claims": [ "email_verified", "preferred_username", "custom_claim_name" ], "client_id": "", "client_secret": "", "conditional_access_enabled": true, "directory_id": "", "email_claim_name": "custom_claim_name", "prompt": "login", "support_groups": true }, "name": "Widget Corps IDP", "type": "onetimepin", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "read_only": true, "saml_certificate_set": { "created_at": "2026-05-07T19:16:19.821162Z", "uid": "c409ef44-e72c-41c8-8c0b-278c8a6f4fd8", "updated_at": "2026-05-07T19:16:19.821162Z", "current_certificate": { "is_current": true, "not_after": "2027-05-07T19:11:00Z", "public_certificate": "-----BEGIN CERTIFICATE-----\nMIIEpzCCA4+gAwIBAgIUTh2VSDDJ0oB/gabio6j1L9QwWoUwDQYJKoZIhvcNAQEL\n...\n-----END CERTIFICATE-----\n", "uid": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415" }, "previous_certificate": {} }, "saml_certificate_set_id": "c409ef44-e72c-41c8-8c0b-278c8a6f4fd8", "scim_config": { "enabled": true, "identity_update_behavior": "automatic", "scim_base_url": "scim_base_url", "seat_deprovision": true, "secret": "secret", "user_deprovision": true } } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": [ { "config": { "claims": [ "email_verified", "preferred_username", "custom_claim_name" ], "client_id": "", "client_secret": "", "conditional_access_enabled": true, "directory_id": "", "email_claim_name": "custom_claim_name", "prompt": "login", "support_groups": true }, "name": "Widget Corps IDP", "type": "onetimepin", "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "read_only": true, "saml_certificate_set": { "created_at": "2026-05-07T19:16:19.821162Z", "uid": "c409ef44-e72c-41c8-8c0b-278c8a6f4fd8", "updated_at": "2026-05-07T19:16:19.821162Z", "current_certificate": { "is_current": true, "not_after": "2027-05-07T19:11:00Z", "public_certificate": "-----BEGIN CERTIFICATE-----\nMIIEpzCCA4+gAwIBAgIUTh2VSDDJ0oB/gabio6j1L9QwWoUwDQYJKoZIhvcNAQEL\n...\n-----END CERTIFICATE-----\n", "uid": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415" }, "previous_certificate": {} }, "saml_certificate_set_id": "c409ef44-e72c-41c8-8c0b-278c8a6f4fd8", "scim_config": { "enabled": true, "identity_update_behavior": "automatic", "scim_base_url": "scim_base_url", "seat_deprovision": true, "secret": "secret", "user_deprovision": true } } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ```