---
updatedAt: 2026-06-15T13:51:20.000Z
agentTools:
  siteIndex: https://developer.jamf.com/llms.txt
  projectIndex: https://developer.jamf.com/jamf-pro/llms.txt
---

# Retrieve the certificate currently configured for use with SSO


Retrieves the certificate currently configured for use with SSO.

> 📋 **Required privilege:** Read SSO Settings

# OpenAPI definition

```json
{
  "openapi": "3.0.1",
  "info": {
    "title": "Jamf Pro API",
    "termsOfService": "https://www.jamf.com/developer-resources/api-license-agreement",
    "version": "11.32.0"
  },
  "servers": [
    {
      "url": "https://yourServer.jamfcloud.com/api"
    }
  ],
  "x-readme": {
    "samples-languages": [
      "curl",
      "swift",
      "ruby",
      "python"
    ],
    "explorer-enabled": false
  },
  "security": [
    {
      "Bearer": []
    },
    {
      "ApiClient": []
    },
    {
      "BasicAuth": [
        "/v1/auth/token"
      ]
    }
  ],
  "paths": {
    "/v2/sso/cert": {
      "get": {
        "tags": [
          "sso-certificate"
        ],
        "summary": "Retrieve the certificate currently configured for use with SSO\n",
        "description": "Retrieves the certificate currently configured for use with SSO.\n\n> 📋 **Required privilege:** Read SSO Settings",
        "responses": {
          "200": {
            "description": "Successful operation.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SsoKeystoreResponseWithDetails"
                }
              }
            }
          }
        },
        "x-required-privileges": [
          "Read SSO Settings"
        ]
      }
    }
  },
  "components": {
    "schemas": {
      "CertificateKey": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "example": "1"
          },
          "valid": {
            "type": "boolean",
            "example": true
          }
        }
      },
      "SsoKeystoreDetails": {
        "type": "object",
        "properties": {
          "keys": {
            "type": "array",
            "items": {
              "type": "string",
              "default": ""
            }
          },
          "serialNumber": {
            "type": "integer",
            "example": 2322472237
          },
          "subject": {
            "type": "string",
            "example": "CN=SSO:jamf.com, OU=JSS, O=JAMF Software, L=Minneapolis, ST=MN, C=US"
          },
          "issuer": {
            "type": "string",
            "example": "CN= Jamf Pro JSS Built-in Certificate Authority"
          },
          "expiration": {
            "type": "string",
            "example": "2030-02-24T12:18:32.000"
          }
        }
      },
      "SsoKeystoreResponse": {
        "type": "object",
        "properties": {
          "key": {
            "type": "string",
            "default": " "
          },
          "keys": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/CertificateKey"
            }
          },
          "type": {
            "type": "string",
            "example": "PKCS12",
            "enum": [
              "PKCS12",
              "JKS",
              "NONE"
            ]
          },
          "keystoreSetupType": {
            "type": "string",
            "example": "UPLOADED",
            "enum": [
              "NONE",
              "UPLOADED",
              "GENERATED"
            ]
          },
          "keystoreFileName": {
            "type": "string",
            "example": "keystore.p12"
          }
        }
      },
      "SsoKeystoreResponseWithDetails": {
        "type": "object",
        "properties": {
          "keystore": {
            "$ref": "#/components/schemas/SsoKeystoreResponse"
          },
          "keystoreDetails": {
            "$ref": "#/components/schemas/SsoKeystoreDetails"
          }
        }
      }
    },
    "securitySchemes": {
      "Bearer": {
        "type": "http",
        "scheme": "bearer",
        "bearerFormat": "JWT"
      },
      "BasicAuth": {
        "type": "http",
        "description": "Basic auth is used only for obtaining bearer tokens from the /v1/auth/token endpoint",
        "scheme": "basic"
      },
      "ApiClient": {
        "type": "oauth2",
        "description": "Jamf Pro API Roles and Clients provide a client ID and secret for obtaining access tokens using the OAuth2 client_credentials grant type",
        "flows": {
          "clientCredentials": {
            "tokenUrl": "/api/v1/oauth/token",
            "scopes": {}
          }
        }
      }
    }
  }
}
```