> ## Documentation Index
> Fetch the complete documentation index at: https://docs.activeviam.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Retrieve client authentication configuration.

> Use this anonymous initialization endpoint to discover the authentication shape configured for the client.
The operation accepts no client input, does not issue a token or sign the caller in, and returns a
configuration only when supported authentication is enabled.



## OpenAPI

````yaml /risk-and-pricing/atoti-risk-services/apis-endpoints/openapi/openapi.mintlify.json get /api/Meta/GetAuthConfig
openapi: 3.0.4
info:
  title: Derivitec Api 1.0
  version: '1.0'
servers:
  - url: https://api.riskportal.activeviam.com
security:
  - oauth2: []
  - apikey: []
tags:
  - name: AdminUser
  - name: AtotiReport
  - name: AtotiSession
  - name: BloombergOAuth
  - name: Bond
  - name: BondYieldCurvePage
  - name: BookAccess
  - name: Books
  - name: Commodity
  - name: Counterparties
  - name: Currencies
  - name: Equity
  - name: EquityDividend
  - name: EquityPage
  - name: FeatureFlag
  - name: Fx
  - name: FxPage
  - name: GroupAccess
  - name: Home
  - name: LegacyPosition
  - name: MarketData
  - name: MarketDataProvider
  - name: MarketDataProviderAccess
  - name: Meta
  - name: Notification
  - name: Organisation
  - name: PnLReport
  - name: PortfolioAccess
  - name: Portfolios
  - name: Position
  - name: PositionFilter
  - name: PricingEnvironment
  - name: PricingEnvironmentAccess
  - name: RateAsset
  - name: RateAssetPage
  - name: Report
  - name: ReportDefinition
  - name: ReportHistoryLauncherQuery
  - name: ReportLauncher
  - name: ReportQuery
  - name: ReportQueryViewUser
  - name: ReportRestriction
  - name: ReportView
  - name: RiskReport
  - name: Tradable
  - name: TradeBooking
  - name: User
  - name: VarReport
  - name: VarReportQuery
  - name: YieldCurvePage
paths:
  /api/Meta/GetAuthConfig:
    get:
      tags:
        - Meta
      summary: Retrieve client authentication configuration.
      description: >-
        Use this anonymous initialization endpoint to discover the
        authentication shape configured for the client.

        The operation accepts no client input, does not issue a token or sign
        the caller in, and returns a

        configuration only when supported authentication is enabled.
      operationId: GetAuthConfig
      responses:
        '200':
          description: Returns the configured client authentication shape.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthConfig'
        '400':
          description: BadRequest
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
      security:
        - oauth2: []
        - apikey: []
components:
  schemas:
    AuthConfig:
      required:
        - $type
      type: object
      properties:
        oauth:
          $ref: '#/components/schemas/OAuthConfig'
        authentication_flow_type:
          type: string
          description: Authentication flow type selected for the client.
          nullable: true
        auth_backend:
          type: string
          description: Name of the authentication backend selected for the client.
          nullable: true
        auth:
          $ref: '#/components/schemas/CognitoAuthConfig'
        $type:
          type: string
          enum:
            - Derivitec.Web.Models.AuthConfig, Derivitec.Web.Models
      additionalProperties: false
      description: Client authentication configuration returned by the API.
    OAuthConfig:
      required:
        - $type
      type: object
      properties:
        domain:
          type: string
          description: Configured OAuth domain used by the client.
          nullable: true
        scope:
          type: array
          items:
            type: string
          description: OAuth scopes requested by the client.
          nullable: true
        redirect_sign_in:
          type: string
          description: Configured client redirect location after sign-in.
          nullable: true
        redirect_sign_out:
          type: string
          description: Configured client redirect location after sign-out.
          nullable: true
        response_type:
          type: string
          description: Configured OAuth response type for the client.
          nullable: true
        $type:
          type: string
          enum:
            - Derivitec.Web.Models.OAuthConfig, Derivitec.Web.Models
      additionalProperties: false
      description: Client-facing OAuth configuration associated with authentication.
    CognitoAuthConfig:
      required:
        - $type
      type: object
      properties:
        mandatory_sign_in:
          type: boolean
          description: Whether the client configuration requires sign-in.
        identity_pool_id:
          type: string
          description: Configured client identity-pool identifier.
          nullable: true
        region:
          type: string
          description: Configured region label for client authentication.
          nullable: true
        user_pool_id:
          type: string
          description: Configured user-pool identifier for the client.
          nullable: true
        user_pool_web_client_id:
          type: string
          description: Configured web-client identifier for the user pool.
          nullable: true
        federation_target:
          type: string
          description: Configured federation target name.
          nullable: true
        user_pool_api_client_id:
          type: string
          description: Configured API-client identifier for the user pool.
          nullable: true
        $type:
          type: string
          enum:
            - Derivitec.Web.Models.CognitoAuthConfig, Derivitec.Web.Models
      additionalProperties: false
      description: >-
        Client-facing configuration for the configured Cognito authentication
        provider.
  securitySchemes:
    oauth2:
      type: oauth2
      description: >-
        OAuth2 access-token requested from AWS Cognito and provided as a Auth
        Bearer header
      flows:
        implicit:
          authorizationUrl: https://auth.riskportal.derivitec.com/oauth2/authorize
          scopes: {}
    apikey:
      type: apiKey
      description: API-Key requested via the site and provided as a header
      name: x-api-key
      in: header

````