> ## Documentation Index
> Fetch the complete documentation index at: https://docs.entire.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List federated OIDC identity providers

> <Badge color="blue" size="sm" shape="pill">Users</Badge>

**Accepted credentials:** User token.

Lists the OIDC identity providers that a service account binding can trust. Every caller sees every provider. A project manager can bind only the providers with self_serve set.



## OpenAPI

````yaml /openapi/core.json get /oidc-providers
openapi: 3.1.0
info:
  description: >-
    Entire control plane: identity, orgs, projects, repos, mirrors, service
    accounts.
  title: Entire Core API
  version: 1.0.0
servers:
  - url: https://us.console.entire.io/api/v1
security: []
tags:
  - name: identity
    x-group: Account
  - name: orgs
    x-group: Organizations
  - name: projects
    x-group: Projects
  - name: repos
    x-group: Repositories
  - name: clusters
    x-group: Clusters
  - name: service-accounts
    x-group: Service accounts
paths:
  /oidc-providers:
    get:
      tags:
        - identity
      summary: List federated OIDC identity providers
      description: >-
        <Badge color="blue" size="sm" shape="pill">Users</Badge>


        **Accepted credentials:** User token.


        Lists the OIDC identity providers that a service account binding can
        trust. Every caller sees every provider. A project manager can bind only
        the providers with self_serve set.
      operationId: listOIDCProviders
      parameters:
        - description: Maximum entries to return; server may cap further.
          explode: false
          in: query
          name: pageSize
          schema:
            description: Maximum entries to return; server may cap further.
            format: int32
            maximum: 500
            minimum: 0
            type: integer
        - description: Opaque cursor from a previous response's nextPageToken.
          explode: false
          in: query
          name: pageToken
          schema:
            description: Opaque cursor from a previous response's nextPageToken.
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListOIDCProvidersOutputBody'
          description: OK
        '400':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Bad Request
        '401':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Unauthorized
        '403':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Forbidden
        '422':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Unprocessable Entity
        '500':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Internal Server Error
        '503':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ErrorModel'
          description: Service Unavailable
      security:
        - oauth2: []
        - oidc: []
        - bearerAuth: []
        - sessionAuth: []
components:
  schemas:
    ListOIDCProvidersOutputBody:
      additionalProperties: true
      properties:
        $schema:
          description: A URL to the JSON Schema for this object.
          examples:
            - /api/v1/schemas/ListOIDCProvidersOutputBody.json
          format: uri
          readOnly: true
          type: string
        nextPageToken:
          description: Pass back to fetch the next page; empty when no more entries.
          type: string
        providers:
          items:
            $ref: '#/components/schemas/OIDCProvider'
          type: array
      required:
        - providers
      type: object
    ErrorModel:
      additionalProperties: true
      properties:
        $schema:
          description: A URL to the JSON Schema for this object.
          examples:
            - /api/v1/schemas/ErrorModel.json
          format: uri
          readOnly: true
          type: string
        detail:
          description: >-
            A human-readable explanation specific to this occurrence of the
            problem.
          examples:
            - Property foo is required but is missing.
          type: string
        errors:
          description: Optional list of individual error details
          items:
            $ref: '#/components/schemas/ErrorDetail'
          type: array
        instance:
          description: >-
            A URI reference that identifies the specific occurrence of the
            problem.
          examples:
            - https://example.com/error-log/abc123
          format: uri
          type: string
        status:
          description: HTTP status code
          examples:
            - 400
          format: int64
          type: integer
        title:
          description: >-
            A short, human-readable summary of the problem type. This value
            should not change between occurrences of the error.
          examples:
            - Bad Request
          type: string
        type:
          default: about:blank
          description: A URI reference to human-readable documentation for the error.
          examples:
            - https://example.com/errors/example
          format: uri
          type: string
      type: object
    OIDCProvider:
      additionalProperties: true
      properties:
        attributes:
          description: Attributes a binding filter can pin.
          items:
            $ref: '#/components/schemas/OIDCProviderAttribute'
          type: array
        description:
          type: string
        displayName:
          deprecated: true
          description: >-
            Deprecated: use name for the slug and label for the human label.
            Removal after 2027-06-01.
          type: string
        docs_url:
          description: The provider's OIDC setup guide.
          type: string
        id:
          type: string
        issuer:
          description: Issuer URL, or a template like https://host/{team}.
          type: string
        label:
          description: Human label, such as GitHub Actions.
          type: string
        name:
          description: Stable slug, such as github-actions.
          type: string
        require_one_of:
          description: A filter must pin at least one of these.
          items:
            type: string
          type: array
        self_serve:
          description: True when a project manager can bind this provider.
          type: boolean
      required:
        - id
        - issuer
      type: object
    ErrorDetail:
      additionalProperties: true
      properties:
        location:
          description: >-
            Where the error occurred, e.g. 'body.items[3].tags' or
            'path.thing-id'
          type: string
        message:
          description: Error message text
          type: string
        value:
          description: The value at the given location
      type: object
    OIDCProviderAttribute:
      additionalProperties: true
      properties:
        description:
          type: string
        exact:
          description: The value must not contain '*'.
          type: boolean
        label:
          type: string
        name:
          description: The attributeFilter key.
          type: string
        pattern:
          description: RE2 expression the pinned value must match.
          type: string
        required:
          description: Every filter must pin this attribute.
          type: boolean
      required:
        - name
        - label
        - required
        - exact
      type: object
  securitySchemes:
    oauth2:
      description: >-
        Authorization code flow with PKCE-S256. RFC 8628 device flow is also
        supported.
      flows:
        authorizationCode:
          authorizationUrl: /authorize
          scopes:
            offline_access: Request a refresh token.
            openid: Authenticate using OpenID Connect.
          tokenUrl: /oauth/token
      type: oauth2
    oidc:
      description: OpenID Connect discovery for browser and RFC 8628 device authentication.
      openIdConnectUrl: /.well-known/openid-configuration
      type: openIdConnect
    bearerAuth:
      bearerFormat: JWT
      description: Bearer access token.
      scheme: bearer
      type: http
    sessionAuth:
      description: Console session cookie issued by the browser login flow.
      in: cookie
      name: entire_session
      type: apiKey

````