action files_get_sso_strategies {
  label: "List Sso Strategies"
  description: "List Sso Strategies"
  provider: files
  method: GET
  path: "/sso_strategies"
  encoding: json
  input: {
    type: "object"
    properties: {
      cursor: {
        type: "string"
      }
      per_page: {
        type: "integer"
        format: "int32"
      }
    }
    additionalProperties: false
  }
  output: {
    type: "array"
    items: {
      type: "object"
      description: "List Sso Strategies"
      properties: {
        deprovision_behavior: {
          type: "string"
          description: "Method used for deprovisioning users."
          enum: ["disable", "delete"]
        }
        deprovision_groups: {
          type: "boolean"
          description: "Auto-deprovision group membership based on group memberships on the SSO side?"
        }
        deprovision_users: {
          type: "boolean"
          description: "Auto-deprovision users?"
        }
        enabled: {
          type: "boolean"
          description: "Is strategy enabled?  This may become automatically set to `false` after a high number and duration of failures."
        }
        id: {
          type: "integer"
          format: "int32"
          description: "ID"
        }
        label: {
          type: "string"
          description: "Custom label for the SSO provider on the login page."
        }
        ldap_base_dn: {
          type: "string"
          description: "Base DN for looking up users in LDAP server"
        }
        ldap_domain: {
          type: "string"
          description: "Domain name that will be appended to LDAP usernames"
        }
        ldap_host: {
          type: "string"
          description: "LDAP host"
        }
        ldap_host_2: {
          type: "string"
          description: "LDAP backup host"
        }
        ldap_host_3: {
          type: "string"
          description: "LDAP backup host"
        }
        ldap_port: {
          type: "integer"
          format: "int32"
          description: "LDAP port"
        }
        ldap_secure: {
          type: "boolean"
          description: "Use secure LDAP?"
        }
        ldap_username: {
          type: "string"
          description: "Username for signing in to LDAP server."
        }
        ldap_username_field: {
          type: "string"
          description: "LDAP username field"
          enum: ["sAMAccountName", "userPrincipalName"]
        }
        logo_url: {
          type: "string"
          description: "URL holding a custom logo for the SSO provider on the login page."
        }
        protocol: {
          type: "string"
          description: "SSO Protocol"
          enum: ["oauth2", "_unused_openid2", "saml", "active_directory", "open_ldap", "scim"]
        }
        provider: {
          type: "string"
          description: "Provider name"
          enum: ["google", "auth0", "okta", "atlassian", "azure", "box", "dropbox", "slack", "_unused_ubuntu", "onelogin", "saml", "idaptive", "ldap", "scim"]
        }
        provision_attachments_permission: {
          type: "boolean"
          description: "DEPRECATED: Auto-provisioned users get Sharing permission. Use a Group with the Bundle permission instead."
        }
        provision_company: {
          type: "string"
          description: "Default company for auto provisioned users."
        }
        provision_dav_permission: {
          type: "boolean"
          description: "Auto-provisioned users get WebDAV permission?"
        }
        provision_email_signup_groups: {
          type: "string"
          description: "Comma-separated list of group names whose members will be created with email_signup authentication."
        }
        provision_ftp_permission: {
          type: "boolean"
          description: "Auto-provisioned users get FTP permission?"
        }
        provision_group_default: {
          type: "string"
          description: "Comma-separated list of group names for groups to automatically add all auto-provisioned users to."
        }
        provision_group_exclusion: {
          type: "string"
          description: "Comma-separated list of group names for groups (with optional wildcards) that will be excluded from auto-provisioning."
        }
        provision_group_inclusion: {
          type: "string"
          description: "Comma-separated list of group names for groups (with optional wildcards) that will be auto-provisioned."
        }
        provision_group_required: {
          type: "string"
          description: "Comma or newline separated list of group names (with optional wildcards) to require membership for user provisioning."
        }
        provision_groups: {
          type: "boolean"
          description: "Auto-provision group membership based on group memberships on the SSO side?"
        }
        provision_sftp_permission: {
          type: "boolean"
          description: "Auto-provisioned users get SFTP permission?"
        }
        provision_site_admin_groups: {
          type: "string"
          description: "Comma-separated list of group names whose members will be created as Site Admins."
        }
        provision_time_zone: {
          type: "string"
          description: "Default time zone for auto provisioned users."
        }
        provision_users: {
          type: "boolean"
          description: "Auto-provision users?"
        }
        saml_provider_cert_fingerprint: {
          type: "string"
          description: "Identity provider sha256 cert fingerprint if saml_provider_metadata_url is not available."
        }
        saml_provider_issuer_url: {
          type: "string"
          description: "Identity provider issuer url"
        }
        saml_provider_metadata_content: {
          type: "string"
          description: "Custom identity provider metadata"
        }
        saml_provider_metadata_url: {
          type: "string"
          description: "Metadata URL for the SAML identity provider"
        }
        saml_provider_slo_target_url: {
          type: "string"
          description: "Identity provider SLO endpoint"
        }
        saml_provider_sso_target_url: {
          type: "string"
          description: "Identity provider SSO endpoint if saml_provider_metadata_url is not available."
        }
        scim_authentication_method: {
          type: "string"
          description: "SCIM authentication type."
          enum: ["none", "basic", "token"]
        }
        scim_oauth_access_token: {
          type: "string"
          description: "SCIM OAuth Access Token."
        }
        scim_oauth_access_token_expires_at: {
          type: "string"
          description: "SCIM OAuth Access Token Expiration Time."
        }
        scim_username: {
          type: "string"
          description: "SCIM username."
        }
        subdomain: {
          type: "string"
          description: "Subdomain"
        }
      }
    }
  }
}