IdentityProvider.Read.All | Graph Permissions

Permission Details

Application Permission

Read identity providers

Allows the app to read your organization’s identity (authentication) providers’ properties without a signed in user.

Permission ID: e321f0bb-e7f7-481e-bb28-e3b0b32d4bd0

Delegated Permission

Read identity providers

Allows the app to read your organization’s identity (authentication) providers’ properties on behalf of the user.

Permission ID: 43781733-b5a7-4d1b-98f4-e8edff23e1a9

Properties

Microsoft Graph v1.0 exact-category-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property	Type	Description
`clientId`	`String`Nullable	The client ID for the application. This is the client ID obtained when registering the application with the identity provider. Required. Not nullable.
`clientSecret`	`String`Nullable	The client secret for the application. This is the client secret obtained when registering the application with the identity provider. This is write-only. A read operation will return . Required. Not nullable.
`id`	`String`	The ID of the identity provider.
`name`	`String`Nullable	The display name of the identity provider. Not nullable.
`type`	`String`Nullable	The identity provider type is a required field. For B2B scenario: Google, Facebook. For B2C scenario: Microsoft, Google, Amazon, LinkedIn, Facebook, GitHub, Twitter, Weibo, QQ, WeChat, OpenIDConnect. Not nullable.

JSON Representation

Microsoft Graph v1.0 exact-category-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation

{
  "id": "String",
  "type": "String",
  "name": "String",
  "clientId": "String",
  "clientSecret": "String"
}

Relationships

Relationships metadata is not available for this permission mapping.

View resource documentation

Graph Methods

Delegated access App-only access

Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/directory/federationConfigurations/microsoft.graph.samlOrWsFedExternalDomainFederation/{samlOrWsFedExternalDomainFederation ID}/domains`
GET `/identity/identityProviders`
GET `/identity/identityProviders/{id}`
GET `/identity/identityProviders/availableProviderTypes`
GET `/identityProviders`
GET `/identityProviders/{id}`
GET `/identityProviders/availableProviderTypes`

Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/directory/federationConfigurations/microsoft.graph.samlOrWsFedExternalDomainFederation/{samlOrWsFedExternalDomainFederation ID}/domains`
GET `/identity/identityProviders`
GET `/identity/identityProviders/{id}`
GET `/identity/identityProviders/availableProviderTypes`
GET `/identityProviders`
GET `/identityProviders/{id}`
GET `/identityProviders/availableProviderTypes`

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgIdentityProvider` /identity/identityProviders List identityProviders
`Get-MgIdentityProvider` /identity/identityProviders/{id} Get identityProvider
`Get-MgIdentityProvider` /identityProviders List identityProviders
`Get-MgIdentityProvider` /identityProviders/{id} Get identityProvider
`Invoke-MgAvailableIdentityProviderType` /identity/identityProviders/availableProviderTypes List availableProviderTypes
`Invoke-MgAvailableIdentityProviderType` /identityProviders/availableProviderTypes List availableProviderTypes

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgBetaIdentityProvider` /identity/identityProviders List identityProviders
`Get-MgBetaIdentityProvider` /identity/identityProviders/{id} Get identityProvider
`Get-MgBetaIdentityProvider` /identityProviders List identityProviders
`Get-MgBetaIdentityProvider` /identityProviders/{id} Get identityProvider
`Invoke-MgBetaAvailableIdentityProviderType` /identity/identityProviders/availableProviderTypes List availableProviderTypes
`Invoke-MgBetaAvailableIdentityProviderType` /identityProviders/availableProviderTypes List availableProviderTypes

Code Examples

C# / .NET SDK

Get identityProvider

View official example on Microsoft Learn

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Identity.IdentityProviders["{identityProviderBase-id}"].GetAsync();

JavaScript

Get identityProvider

View official example on Microsoft Learn

const options = {
	authProvider,
};

const client = Client.init(options);

let identityProviderBase = await client.api('/identity/identityProviders/Amazon-OAUTH')
	.get();

PowerShell

Get identityProvider

View official example on Microsoft Learn

Import-Module Microsoft.Graph.Identity.SignIns

Get-MgIdentityProvider -IdentityProviderBaseId $identityProviderBaseId

Python

Get identityProvider

View official example on Microsoft Learn

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.identity.identity_providers.by_identity_provider_base_id('identityProviderBase-id').get()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for IdentityProvider.Read.All

4

Grant Admin Consent

Application permissions always require admin consent.