Skip to main content
GET
Get

Authorizations

Authorization
string
header
required

OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as Authorization: Bearer <token>.

Path Parameters

id
string
required

Global id of the assigned application.

Response

The assigned application.

An Oleria AssignedApplication represents an IDP's knowledge of an application — emitted by Okta, Entra, PingOne, and similar identity providers. Multiple Oleria AssignedApplication nodes may exist for the same deployment, one per IDP. Each connects to the same Oleria ApplicationDeployment via Oleria ApplicationReferencedBy. The deployment node is the merge point for conflicting signals across IDPs. enrichedSamlEntityId and enrichedOAuthClientId carry plain-text auth identity signals sourced from the IDP's SSO configuration.

id
string
required

An identifier for an AssignedApplication object in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application id so connections to the object are robust to metadata changes and other relevant operations.

Example:

"0oa1qcscnzkl4DTym1d8 (Okta)"

name
string
required

The name of the assigned application

Example:

"GitHub Enterprise Cloud"

objectMetadata
object
required

The ObjectMetadata structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data

globalId
string
required

Opaque platform-assigned identifier for this assigned application node.

oleriaObjectMetadata
object
required

object metadata supersets object metadata with platform enrichment provenance — the enrichment version and the time the record was generated

authenticationRequirements
object

AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object

labels
object[]
objectDirectoryContainerFederation
object

Federation information used when specifying an EntityIdentifier

objectDirectoryContainerId
string

An identifier (unique to the integrated application) for a ObjectDirectory object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations

Example:

"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)"

oauthClientId
string

Plain-text OAuth client ID for this application instance. Informational — authenticationRequirements.authenticationKeys carries the authoritative hashed representation used for matching. Emitted alongside the hashed representation to support display and diagnostics.

Example:

"1234567890abcdef.apps.googleusercontent.com"

samlEntityId
string

Plain-text SAML service provider entity ID for this application instance. Informational — authenticationRequirements.authenticationKeys carries the authoritative hashed representation used for matching. Emitted alongside the hashed representation to support display and diagnostics.

Example:

"https://github.com/enterprises/acme-corp"

vendorName
string

Name of the vendor for the enterprise application or identity provider product

Example:

"Microsoft"

globalAuthenticationRequirements
object

AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object

globalObjectDirectoryContainerId
string

Global ID of the ObjectDirectory (IDP) that emitted this assignment.

enrichedOAuthClientId
string

Plain-text OAuth client ID from the IDP configuration. Key resolution signal (resolution priority 4). Promoted to Oleria ApplicationDeployment.enrichedOAuthClientId.

enrichedResolvedDeploymentId
string

Global ID of the Oleria ApplicationDeployment this node resolved to. Denormalized cache of the Oleria ApplicationReferencedBy edge, which is authoritative. Omitted when unresolved — surfaces in admin UX for review.

enrichedSamlEntityId
string

Plain-text SAML entity ID from the IDP SSO configuration. Key resolution signal (resolution priority 3). Promoted to Oleria ApplicationDeployment.enrichedSamlEntityId from the most authoritative source.