# Get SSO platform metadata

<Heading
  as={"h1"}
  className={"openapi__heading"}
  children={"Get SSO platform metadata"}
>
</Heading>

<MethodEndpoint
  method={"get"}
  path={"/api/v1/organization/{organization_id}/sso-connections/platform-metadata"}
  context={"endpoint"}
>
  
</MethodEndpoint>

Returns the platform-wide SAML request-signing certificate. It is identical across connections and not organization-scoped; an admin trusts it once at their identity provider. Only relevant when request signing is enabled on a connection.

<Heading
  id={"request"}
  as={"h2"}
  className={"openapi-tabs__heading"}
  children={"Request"}
>
</Heading>

<ParamsDetails
  parameters={[{"description":"Unique identifier of the organization that owns the SSO connection.","in":"path","name":"organization_id","required":true,"schema":{"description":"Unique identifier of the organization that owns the SSO connection.","format":"uuid","title":"Organization Id","type":"string"}}]}
>
  
</ParamsDetails>

<RequestSchema
  title={"Body"}
  body={undefined}
>
  
</RequestSchema>

<StatusCodes
  id={undefined}
  label={undefined}
  responses={{"200":{"content":{"application/json":{"schema":{"description":"The platform-wide signing keypair's public half. Identical for every connection, so the\nadmin configures it once at their IdP (only relevant when request signing is enabled).","properties":{"signing_algorithm":{"description":"Signature algorithm of the signing certificate, for example 'RSA-SHA256'.","title":"Signing Algorithm","type":"string"},"signing_certificate":{"description":"PEM-encoded public certificate for the platform-wide SAML signing keypair. The private key never leaves Authentik.","title":"Signing Certificate","type":"string"},"signing_certificate_fingerprint_sha256":{"description":"Uppercase, colon-separated SHA-256 fingerprint of the DER certificate.","title":"Signing Certificate Fingerprint","type":"string"}},"required":["signing_certificate","signing_certificate_fingerprint_sha256","signing_algorithm"],"title":"SSOPlatformMetadataResponse","type":"object"}}},"description":"Successful Response"},"422":{"content":{"application/json":{"schema":{"properties":{"detail":{"items":{"properties":{"ctx":{"title":"Context","type":"object"},"input":{"title":"Input"},"loc":{"items":{"anyOf":[{"type":"string"},{"type":"integer"}]},"title":"Location","type":"array"},"msg":{"title":"Message","type":"string"},"type":{"title":"Error Type","type":"string"}},"required":["loc","msg","type"],"title":"ValidationError","type":"object"},"title":"Detail","type":"array"}},"title":"HTTPValidationError","type":"object"}}},"description":"Validation Error"}}}
>
  
</StatusCodes>