Updated on 2026-07-22 GMT+08:00

Querying a Specified OIDC Provider

Function

This API is used to query details about an OpenID Connect (OIDC) IdP.

Authorization Information

Each account root user has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.

Action

Access Level

Resource Type (*: required)

Condition Key

Alias

Dependencies

iam:oidcProviders:getV5

Read

oidcProvider *

g:ResourceTag/<tag-key>

-

-

URI

GET /v5/oidc-providers/{provider_id}

Table 1 Path Parameters

Parameter

Mandatory

Type

Description

provider_id

Yes

String

Definition

Provider ID.

Constraints

N/A

Range

The value must contain 1 to 64 characters, including only letters, digits, and hyphens (-).

Default Value

N/A

Request Parameters

None

Response Parameters

Status code: 200

Table 2 Response body parameters

Parameter

Type

Description

oidc_provider

oidc_provider object

Definition

OIDC provider.

Range

N/A

Table 3 oidc_provider

Parameter

Type

Description

provider_id

String

Definition

ID of an OIDC identity provider.

Range

The value must contain 1 to 64 characters, including only letters, digits, and hyphens (-).

name

String

Definition

Name of an OIDC identity provider.

Range

The value must contain 1 to 64 characters, including only letters, digits, underscores (_), and hyphens (-).

description

String

Definition

Description of an identity provider.

Range

The value can contain a maximum of 255 characters and cannot contain the following special characters: @#%&<>$^*.

url

String

Definition

URL of an OIDC identity provider.

Range

The value can contain 1 to 255 characters.

urn

String

Definition

Uniform resource name.

Range

The value can contain 16 to 1,500 characters, including only letters, digits, and the following special characters: /=_:-.

client_ids

Array of strings

Definition

A list of client IDs.

Range

The array contains 1 to 100 elements. Each element contains 1 to 255 characters.

thumbprints

Array of strings

Definition

List of server certificate fingerprints of an OIDC identity provider.

Range

The array contains 1 to 5 elements. Each element contains 64 characters, including letters and digits.

tags

Array of tags objects

Definition

List of custom tags.

Range

The array length is not involved.

created_at

String

Definition

Time when a provider was created.

Range

N/A

Table 4 tags

Parameter

Type

Description

tag_key

String

Definition

Tag key.

Range

The value can contain 1 to 64 characters, including letters, digits, spaces, and the following special characters: _.:=+-@. The value cannot start or end with a space or start with sys.

tag_value

String

Definition

Tag value.

Range

The value can contain 0 to 128 characters, including letters, digits, spaces, and the following special characters: _.:/=+-@. It can also be an empty string.

Status code: 403

Table 5 Response body parameters

Parameter

Type

Description

error_code

String

Definition :

Error code. For details, see Error Code.

Range:

The format is PAP5.XXXX, for example, PAP5.0012.

error_msg

String

Definition :

Error message. For details, see Error Message.

Range:

N/A.

request_id

String

Definition:

Unique identifier of an API request, which is used to locate API calling exceptions.

Range:

N/A

encoded_authorization_message

String

Definition :

Encrypted details returned when the authentication fails, which are used to locate authentication problems. The STS5 decryption API can be used for decryption. For details, see API link.

Range:

N/A.

Status code: 404

Table 6 Response body parameters

Parameter

Type

Description

error_code

String

Definition :

Error code. For details, see Error Code.

Range:

The format is PAP5.XXXX, for example, PAP5.0012.

error_msg

String

Definition :

Error message. For details, see Error Message.

Range:

N/A.

request_id

String

Definition:

Unique identifier of an API request, which is used to locate API calling exceptions.

Range:

N/A

Example Requests

None

Example Responses

Status code: 200

Request succeeded.

{
  "oidc_provider" : {
    "provider_id" : "string",
    "name" : "string",
    "url" : "string",
    "urn" : "iam::accountid:user:name",
    "client_ids" : [ "string", "string" ],
    "thumbprints" : [ "stringstringstringstringstringstringstringstringstringstringstri", "stringstringstringstringstringstringstringstringstringstringstri" ],
    "tags" : [ ],
    "created_at" : "2026-06-22T12:00:18.982Z",
    "description" : null
  }
}

Status Codes

Status Code

Description

200

Request succeeded.

403

No operation permissions.

404

No resources found.

Error Codes

See Error Codes.