External Auth Claim Mappings
API key issued via POST /v1/{workspace_id}/api-keys. Pass the returned api_key value as a Bearer token.
[]50Successful Response
Validation Error
GET /v1/{workspace_id}/external-auth-claim-mappings HTTP/1.1
Host: platform.api-us.concurrence.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*
{
"items": [
{
"id": "123e4567-e89b-12d3-a456-426614174000",
"claim_namespace": "text",
"claim_key": "text",
"external_value": "text",
"external_role_id": "123e4567-e89b-12d3-a456-426614174000",
"status": "active",
"changed_by": "123e4567-e89b-12d3-a456-426614174000",
"created_at": "2026-01-01T00:00:00.000Z"
}
],
"has_more": true,
"continuation_token": null
}API key issued via POST /v1/{workspace_id}/api-keys. Pass the returned api_key value as a Bearer token.
^[a-z][a-z0-9_.:-]{0,63}$^[a-z][a-z0-9_.:-]{0,63}$Successful Response
An active mapping for this claim tuple already exists
Validation Error
POST /v1/{workspace_id}/external-auth-claim-mappings HTTP/1.1
Host: platform.api-us.concurrence.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 127
{
"claim_namespace": "text",
"claim_key": "text",
"external_value": "text",
"external_role_id": "123e4567-e89b-12d3-a456-426614174000"
}{
"id": "123e4567-e89b-12d3-a456-426614174000",
"claim_namespace": "text",
"claim_key": "text",
"external_value": "text",
"external_role_id": "123e4567-e89b-12d3-a456-426614174000",
"status": "active",
"changed_by": "123e4567-e89b-12d3-a456-426614174000",
"created_at": "2026-01-01T00:00:00.000Z"
}Dry-run the SAME resolver the per-turn path uses — read-only, never writes.
Returns the mapped internal roles (id + name), the effective unioned active role grants, and the count of unmapped input atoms. Requires Workspace.view.
API key issued via POST /v1/{workspace_id}/api-keys. Pass the returned api_key value as a Bearer token.
Successful Response
Validation Error
POST /v1/{workspace_id}/external-auth-claim-mappings/resolve-preview HTTP/1.1
Host: platform.api-us.concurrence.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 66
{
"auth_claims": [
{
"namespace": "text",
"key": "text",
"value": "text"
}
]
}{
"roles": [
{
"id": "123e4567-e89b-12d3-a456-426614174000",
"name": "text"
}
],
"grants": [
{
"resource_type": "integration_endpoint",
"resource_key": "text",
"access": "read"
}
],
"unmapped_claim_count": 1
}API key issued via POST /v1/{workspace_id}/api-keys. Pass the returned api_key value as a Bearer token.
Successful Response
External auth claim mapping not found
Validation Error
GET /v1/{workspace_id}/external-auth-claim-mappings/{mapping_id} HTTP/1.1
Host: platform.api-us.concurrence.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*
{
"id": "123e4567-e89b-12d3-a456-426614174000",
"claim_namespace": "text",
"claim_key": "text",
"external_value": "text",
"external_role_id": "123e4567-e89b-12d3-a456-426614174000",
"status": "active",
"changed_by": "123e4567-e89b-12d3-a456-426614174000",
"created_at": "2026-01-01T00:00:00.000Z"
}Supersede an active mapping (immutable history) — flip active → superseded.
POST verb (not DELETE): the row persists and the superseded item is returned so the caller sees the final state. 404 if there is no active row for the id.
API key issued via POST /v1/{workspace_id}/api-keys. Pass the returned api_key value as a Bearer token.
Successful Response
Active external auth claim mapping not found
Validation Error
POST /v1/{workspace_id}/external-auth-claim-mappings/{mapping_id}/supersede HTTP/1.1
Host: platform.api-us.concurrence.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*
{
"id": "123e4567-e89b-12d3-a456-426614174000",
"claim_namespace": "text",
"claim_key": "text",
"external_value": "text",
"external_role_id": "123e4567-e89b-12d3-a456-426614174000",
"status": "active",
"changed_by": "123e4567-e89b-12d3-a456-426614174000",
"created_at": "2026-01-01T00:00:00.000Z"
}Last updated
Was this helpful?