# SSO Clients Groups

Configure Mosaic SSO Service to streamline login for users. Create and manage SSO clients group to control your SSO login experience.


## Servers

Sandbox environment
```
https://api.sbx.transmitsecurity.io/cis
```

US production environment
```
https://api.transmitsecurity.io/cis
```

EU production environment
```
https://api.eu.transmitsecurity.io/cis
```

CA production environment
```
https://api.ca.transmitsecurity.io/cis
```

AU production environment
```
https://api.au.transmitsecurity.io/cis
```

JP production environment
```
https://api.gasne1-ts01.transmitsecurity.io/cis
```

## Security

### bearer

Type: http
Scheme: bearer
Bearer Format: JWT

### UserAccessToken

A token returned upon end-user authentication, which provides access to resources and data for the user and app for which it was generated

Type: http
Scheme: bearer
Bearer Format: JWT

### AdminAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### ClientAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### OrgAdminAccessToken

A token returned upon B2B authentication for a user that has the organizationAdmin or organizationCreator role.

Type: oauth2
Token URL: /oidc/token
Scopes:

## Download OpenAPI description

 - [SSO Clients Groups](https://developer.transmitsecurity.com/_bundle/openapi/user/sso-clients-groups.openapi.yaml)

 - [POST /v1/sso-service/sso-group](https://developer.transmitsecurity.com/openapi/user/sso-clients-groups.openapi/other/createclientsgroup.md): Creates a new SSO clients group. <br><br>**Required permissions**: `sso-service:edit`.
 - [GET /v1/sso-service/sso-group](https://developer.transmitsecurity.com/openapi/user/sso-clients-groups.openapi/other/getallclientsgroups.md): Retrieves a list of all clients groups. <br><br>**Required permissions**: `sso-service:read`.
 - [GET /v1/sso-service/sso-group/{groupId}](https://developer.transmitsecurity.com/openapi/user/sso-clients-groups.openapi/other/getclientsgroup.md): Retrieves a clients group by its ID. The clients group ID is a unique identifier for a clients group. <br><br>**Required permissions**: `sso-service:read`.
 - [PUT /v1/sso-service/sso-group/{groupId}](https://developer.transmitsecurity.com/openapi/user/sso-clients-groups.openapi/other/updateclientsgroup.md): Updates an existing clients group. The clients group ID is a unique identifier for a clients group. <br><br>**Required permissions**: `sso-service:edit`.
 - [DELETE /v1/sso-service/sso-group/{groupId}](https://developer.transmitsecurity.com/openapi/user/sso-clients-groups.openapi/other/deleteclientsgroup.md): Deletes a clients group. <br><br>**Required permissions**: `sso-service:edit`, `sso-service:delete`.
 - [POST /v1/sso-service/sso-group/{groupId}/clients](https://developer.transmitsecurity.com/openapi/user/sso-clients-groups.openapi/other/createssoclient.md): Creates a new client in the SSO clients group. <br><br>**Required permissions**: `sso-service:edit`.
 - [PUT /v1/sso-service/sso-group/{groupId}/clients/{clientId}](https://developer.transmitsecurity.com/openapi/user/sso-clients-groups.openapi/other/updatessoclient.md): Updates a client within the SSO clients group by specifying it by its ID. Note: Fields that are objects cannot be partially updated, since the new value you set will just replace the current one. <br>
 - [DELETE /v1/sso-service/sso-group/{groupId}/clients/{clientId}](https://developer.transmitsecurity.com/openapi/user/sso-clients-groups.openapi/other/deletessoclient.md): Deletes a client and removes it from the SSO client group. <br><br>**Required permissions**: `sso-service:edit`, `sso-service:delete`.
