> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-findings-decoys-followup.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # List Clients > ListClients returns the App-owned OAuth clients minted for an OIDC application, one page at a time. Results hydrate from the PostgreSQL projection, so a newly created client may appear after a brief delay. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples get /api/v1/apps/{app_id}/sso/applications/{id}/clients openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/apps/{app_id}/sso/applications/{id}/clients: get: tags: - SSO summary: List Clients description: |- ListClients returns the App-owned OAuth clients minted for an OIDC application, one page at a time. Results hydrate from the PostgreSQL projection, so a newly created client may appear after a brief delay. operationId: c1.api.sso.v1.SSOApplicationService.ListClients parameters: - in: path name: app_id required: true schema: description: Application that owns the SSO application. type: string - in: path name: id required: true schema: description: SSO application whose clients to list. type: string - in: query name: page_size schema: description: Maximum number of clients to return. format: int32 type: integer - in: query name: page_token schema: description: Pagination token from a previous response. type: string responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.sso.v1.SSOApplicationServiceListClientsResponse description: >- SSOApplicationServiceListClientsResponse contains a page of App-owned OAuth clients. components: schemas: c1.api.sso.v1.SSOApplicationServiceListClientsResponse: description: >- SSOApplicationServiceListClientsResponse contains a page of App-owned OAuth clients. properties: list: description: App-owned clients in this page. items: $ref: '#/components/schemas/c1.api.sso.v1.SSOApplicationOIDCClient' type: - array - 'null' nextPageToken: description: Pagination token for the next page, or empty when complete. type: string title: Sso Application Service List Clients Response type: object x-speakeasy-name-override: SSOApplicationServiceListClientsResponse c1.api.sso.v1.SSOApplicationOIDCClient: description: SSOApplicationOIDCClient is an App-owned OAuth client minted by C1. properties: appId: description: Application that owns this client. type: string authentication: oneOf: - $ref: >- #/components/schemas/c1.api.sso.v1.SSOApplicationOIDCClientAuthentication - type: 'null' clientId: description: Client ID generated by ConductorOne. type: string createdAt: format: date-time type: - string - 'null' displayName: description: Human-readable client name. type: string pkcePolicy: description: Effective PKCE policy. enum: - SSO_APPLICATION_OIDC_PKCE_POLICY_UNSPECIFIED - SSO_APPLICATION_OIDC_PKCE_POLICY_REQUIRED_S256 - SSO_APPLICATION_OIDC_PKCE_POLICY_ALLOW_MISSING_FOR_LEGACY type: string x-speakeasy-unknown-values: allow redirectUris: description: Exact callback URLs registered for this client. items: type: string type: - array - 'null' ssoApplicationId: description: SSO application whose identity policy applies to this client. type: string updatedAt: format: date-time type: - string - 'null' title: Sso Application Oidc Client type: object x-speakeasy-name-override: SSOApplicationOIDCClient c1.api.sso.v1.SSOApplicationOIDCClientAuthentication: description: > SSOApplicationOIDCClientAuthentication is the exact token-endpoint client authentication method assigned to an OIDC client. This message contains a oneof named method. Only a single field of the following list may be set at a time: - none - clientSecretBasic - clientSecretPost - privateKeyJwt properties: clientSecretBasic: oneOf: - $ref: >- #/components/schemas/c1.api.sso.v1.SSOApplicationOIDCClientAuthClientSecretBasic - type: 'null' clientSecretPost: oneOf: - $ref: >- #/components/schemas/c1.api.sso.v1.SSOApplicationOIDCClientAuthClientSecretPost - type: 'null' none: oneOf: - $ref: >- #/components/schemas/c1.api.sso.v1.SSOApplicationOIDCClientAuthNone - type: 'null' privateKeyJwt: oneOf: - $ref: >- #/components/schemas/c1.api.sso.v1.SSOApplicationOIDCClientAuthPrivateKeyJWT - type: 'null' title: Sso Application Oidc Client Authentication type: object x-speakeasy-name-override: SSOApplicationOIDCClientAuthentication c1.api.sso.v1.SSOApplicationOIDCClientAuthClientSecretBasic: description: RFC 6749 client_secret_basic. C1 generates and returns the secret once. title: Sso Application Oidc Client Auth Client Secret Basic type: object x-speakeasy-name-override: SSOApplicationOIDCClientAuthClientSecretBasic c1.api.sso.v1.SSOApplicationOIDCClientAuthClientSecretPost: description: RFC 6749 client_secret_post. C1 generates and returns the secret once. title: Sso Application Oidc Client Auth Client Secret Post type: object x-speakeasy-name-override: SSOApplicationOIDCClientAuthClientSecretPost c1.api.sso.v1.SSOApplicationOIDCClientAuthNone: description: Public client authentication. No client credential is issued. title: Sso Application Oidc Client Auth None type: object x-speakeasy-name-override: SSOApplicationOIDCClientAuthNone c1.api.sso.v1.SSOApplicationOIDCClientAuthPrivateKeyJWT: description: >- RFC 7523 private_key_jwt using an inline RFC 7517 JWK Set. Multiple public signing keys allow overlap during relying-party key rotation; C1 selects by the assertion's `kid`. The relying party retains every private key. properties: publicJwks: description: The publicJwks field. format: base64 type: string required: - publicJwks title: Sso Application Oidc Client Auth Private Key Jwt type: object x-speakeasy-name-override: SSOApplicationOIDCClientAuthPrivateKeyJWT securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````