Enumerate the identity providers active on this install

GET

/auth/providers

• Local development behind nginx (port 8088 by default)

Returns the set of identity providers the login surface can dispatch to. The built-in password provider is always present. Enterprise providers (LDAP, SAML, etc.) appear only when the install’s license includes the matching feature flag (sso_ldap, sso_saml).

Used by the login page to render the right buttons + by the admin UI to surface which enterprise gates have been activated. Anonymous endpoint — the list is intentionally public so unauthenticated users see the SSO buttons they need to click.

Responses

200

Active provider list.

object

providers

required

Array<object>

Public projection of a registered identity provider — what the login screen renders. No license-feature flag is surfaced here; the mere presence of an entry implies the install holds the matching feature.

object

name

required

Stable registry identifier (POST /auth/login provider field).

string

display_name

required

Human-readable label rendered on the login screen.

string

kind

required

Provider kind — “password”, “ldap”, or “saml”. Determines which login UI the frontend renders (form vs. redirect button).

string

Allowed values: password ldap saml

supports_password

required

True when the provider accepts username + password via POST /auth/login. False for redirect-flow providers (SAML) — those use kind-specific endpoints.

boolean