Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Yandex Identity Hub
  • Access management
  • Pricing policy
  • Terraform reference
    • Authentication
      • Overview
        • Overview
          • Overview
            • Overview
            • Get
            • List
            • Create
            • Update
            • Delete
            • Suspend
            • Reactivate
            • ListSupportedAttributeValues
            • ListOperations
            • ListAccessBindings
            • SetAccessBindings
            • UpdateAccessBindings
            • ListAssignments
            • UpdateAssignments
  • Audit Trails events
  • Release notes
  • Yandex Identity Hub Sync Agent release notes

In this article:

  • HTTP request
  • Query parameters
  • Response
  • Application
  • ServiceProvider
  • AssertionConsumerServiceURL
  • SingleLogoutServiceURL
  • SecuritySettings
  • AttributeMapping
  • NameId
  • Attribute
  • GroupClaimsSettings
  • IdentityProviderMetadata
  1. API reference
  2. REST
  3. Identity Provider API
  4. SAML Application API
  5. Application
  6. List

SAML Application API, REST: Application.List

Written by
Yandex Cloud
Updated at December 15, 2025
  • HTTP request
  • Query parameters
  • Response
  • Application
  • ServiceProvider
  • AssertionConsumerServiceURL
  • SingleLogoutServiceURL
  • SecuritySettings
  • AttributeMapping
  • NameId
  • Attribute
  • GroupClaimsSettings
  • IdentityProviderMetadata

Retrieves the list of SAML applications in the specified organization.

HTTP requestHTTP request

GET https://organization-manager.api.cloud.yandex.net/organization-manager/v1/idp/application/saml/applications

Query parametersQuery parameters

Request to list SAML applications in an organization.

Field

Description

organizationId

string

Required field. ID of the organization to list applications in.

The maximum string length in characters is 50.

pageSize

string (int64)

The maximum number of results per page to return.

Acceptable values are 0 to 1000, inclusive.

pageToken

string

Page token for pagination.

The maximum string length in characters is 2000.

filter

string

A filter expression that filters resources listed in the response.

The maximum string length in characters is 1000.

ResponseResponse

HTTP Code: 200 - OK

{
  "applications": [
    {
      "id": "string",
      "organizationId": "string",
      "name": "string",
      "description": "string",
      "status": "string",
      "labels": "object",
      "createdAt": "string",
      "updatedAt": "string",
      "serviceProvider": {
        "entityId": "string",
        "acsUrls": [
          {
            "url": "string",
            "index": "string"
          }
        ],
        "sloUrls": [
          {
            "url": "string",
            "responseUrl": "string",
            "protocolBinding": "string"
          }
        ]
      },
      "securitySettings": {
        "signatureMode": "string",
        "signatureCertificateId": "string"
      },
      "attributeMapping": {
        "nameId": {
          "format": "string",
          "value": "string"
        },
        "attributes": [
          {
            "name": "string",
            "value": "string"
          }
        ]
      },
      "groupClaimsSettings": {
        "groupDistributionType": "string",
        "groupAttributeName": "string"
      },
      "identityProviderMetadata": {
        "issuer": "string",
        "ssoUrl": "string",
        "metadataUrl": "string",
        "sloUrl": "string"
      }
    }
  ],
  "nextPageToken": "string"
}

Response message for ApplicationService.List.

Field

Description

applications[]

Application

List of SAML applications.

nextPageToken

string

Token for getting the next page of the list.

ApplicationApplication

A SAML application resource.

Field

Description

id

string

Unique identifier of the SAML application.

organizationId

string

ID of the organization that the application belongs to.

name

string

Name of the SAML application.

description

string

Description of the SAML application.

status

enum (Status)

Current status of the SAML application.

  • CREATING: The application is in the process of being created.
  • ACTIVE: The application is active and can be used for authentication.
  • SUSPENDED: The application is suspended. I.e. authentication via this application is disabled.
  • DELETING: The application is in the process of being deleted.

labels

object (map<string, string>)

Resource labels as key:value pairs.

createdAt

string (date-time)

Creation timestamp.

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

updatedAt

string (date-time)

Modification timestamp.

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

serviceProvider

ServiceProvider

Service provider configuration for the SAML application.

securitySettings

SecuritySettings

Security settings for the SAML application.

attributeMapping

AttributeMapping

Attribute mapping configuration for the SAML application.

groupClaimsSettings

GroupClaimsSettings

Group claims settings for the SAML application.

identityProviderMetadata

IdentityProviderMetadata

Identity provider metadata for the SAML application.

ServiceProviderServiceProvider

Service provider configuration for SAML applications.

Field

Description

entityId

string

Required field. Service provider entity ID.

The maximum string length in characters is 8000.

acsUrls[]

AssertionConsumerServiceURL

Assertion Consumer Service URLs.

The number of elements must be in the range 1-100.

sloUrls[]

SingleLogoutServiceURL

Single Logout Service URLs.

The number of elements must be in the range 0-100.

AssertionConsumerServiceURLAssertionConsumerServiceURL

Assertion Consumer Service URL configuration.

Field

Description

url

string

Required field. The URL where SAML responses are sent.

The maximum string length in characters is 8000.

index

string (int64)

Optional index for the assertion consumer service.

SingleLogoutServiceURLSingleLogoutServiceURL

Single Logout Service URL configuration.

Field

Description

url

string

Required field. The URL where logout requests are sent.

The maximum string length in characters is 8000.

responseUrl

string

Optional separate URL for logout responses.

The maximum string length in characters is 8000.

protocolBinding

enum (ProtocolBinding)

Required field. Protocol binding supported by the logout endpoint.

  • HTTP_POST: HTTP POST binding.
  • HTTP_REDIRECT: HTTP Redirect binding.

SecuritySettingsSecuritySettings

Security settings for SAML applications.

Field

Description

signatureMode

enum (SignatureMode)

Signature mode for SAML messages.

  • ASSERTIONS: Sign individual assertions.
  • RESPONSE: Sign the entire response.
  • RESPONSE_AND_ASSERTIONS: Sign both the response and individual assertions.

signatureCertificateId

string

ID of the signature certificate to use.

AttributeMappingAttributeMapping

Attribute mapping configuration for SAML applications.

Field

Description

nameId

NameId

Required field. NameID configuration for the SAML application.

attributes[]

Attribute

List of attribute mappings.

The maximum number of elements is 50.

NameIdNameId

NameID configuration for SAML applications.

Field

Description

format

enum (Format)

Required field. Format of the NameID.

  • PERSISTENT: Persistent NameID format.
    This provides a stable, opaque identifier for the user.
  • EMAIL: Email NameID format.
    This uses the user's email address as the identifier.

value

string

Required field. Value of the NameID.

AttributeAttribute

Attribute mapping for SAML applications.

Field

Description

name

string

Required field. Name of the SAML attribute.

The maximum string length in characters is 8000.

value

string

Required field. Value of the SAML attribute.

The maximum string length in characters is 50.

GroupClaimsSettingsGroupClaimsSettings

Group claims settings for SAML applications.

Field

Description

groupDistributionType

enum (GroupDistributionType)

Distribution type for group claims.

  • NONE: No groups are provided to the application.
  • ASSIGNED_GROUPS: Only assigned groups are provided to the application.
  • ALL_GROUPS: All groups are provided to the application.

groupAttributeName

string

Name of the SAML attribute that contains group information.

The maximum string length in characters is 8000.

IdentityProviderMetadataIdentityProviderMetadata

Identity provider metadata for SAML applications.

Field

Description

issuer

string

Identity provider issuer identifier.

ssoUrl

string

Identity provider Single Sign-On URL.

metadataUrl

string

Identity provider metadata URL.

sloUrl

string

Identity provider Single Logout URL.

Was the article helpful?

Previous
Get
Next
Create
© 2025 Direct Cursus Technology L.L.C.