Get an IdP group

Endpoint

GET 
/api/admin/idp-groups/:idp_group_id

Release stage

ExperimentalIntroduced October 15, 2026 · How experimental APIs work

Authorization

Authorization: Bearer <token>OAuth access token or Glean-issued token · Authentication

Scopes

ADMINADMIN_USAGE

Get one identity provider (IdP) group by its idp_group_id. Inactive IdP groups are returned, so a caller can still show a group after it was removed from the identity provider. An IdP group is active when Glean loaded it from the directory. An IdP group is inactive when only a usage limit names it, for example after the group was removed from the identity provider. An idp_group_id that is not valid, or that names no group that the list returns, returns 404 resource_not_found. The caller must be able to read the workspace configuration or the workspace billing.

Request

Responses

200

Successful response.

400

Invalid request (malformed JSON, invalid parameter values, unknown fields).

401

Missing or invalid authentication token.

403

Token valid but lacks permission for the requested operation.

404

Resource not found.

408

Backend did not respond within the timeout window.

429

Rate limit exceeded. Includes Retry-After header.

500

Unexpected server-side failure.

503

Backend temporarily unavailable.