> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nvisy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List sign-in methods

> Returns the deployment's available sign-in methods: whether password sign-in is enabled and which OIDC providers are configured. Unauthenticated, so a login screen can render the right buttons before anyone signs in.



## OpenAPI

````yaml /api-reference/openapi.json get /capabilities/auth
openapi: 3.1.0
info:
  title: Nvisy API
  summary: Document detection and redaction platform
  description: >-
    Nvisy provides intelligent detection of sensitive content in documents,
    redaction pipelines, and reviewer workflows. This API enables document
    upload, detection analysis, redaction, and collaborative review across your
    workspaces.
  termsOfService: https://nvisy.com/legal/terms-of-service
  contact:
    name: Nvisy Support
    url: https://nvisy.com
    email: hello@nvisy.com
  license:
    name: Apache-2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
  version: 0.1.0
servers: []
security: []
tags:
  - name: Health
    description: Service health checks
  - name: Capabilities
    description: Read-only reference data describing this deployment
  - name: Accounts
    description: Account management and profile operations
  - name: Identities
    description: 'Account sign-in methods: password and linked providers'
  - name: Avatars
    description: Public avatar image serving
  - name: Authentication
    description: Login, signup, and token management
  - name: Workspaces
    description: Workspace creation and management
  - name: Activities
    description: Workspace activity log and export
  - name: Documents
    description: Document upload, download, and management
  - name: Analytics
    description: Aggregate metrics over a workspace's documents
  - name: Members
    description: Workspace member management
  - name: Invites
    description: Workspace invitation handling
  - name: API Tokens
    description: API token management
  - name: Connections
    description: External provider connections
  - name: Connection Syncs
    description: Connection synchronization runs
  - name: Providers
    description: Inference-provider configuration
  - name: Pipelines
    description: Redaction pipeline configuration
  - name: Detections
    description: Detection analysis and redaction
  - name: Redactions
    description: Redactions produced from a detection, with reviewer edits
  - name: Reviews
    description: Document reviews, the review queue, and their discussion
  - name: Policies
    description: Redaction policy configuration
  - name: Webhooks
    description: Webhook configuration
  - name: Notifications
    description: Account notification management
paths:
  /capabilities/auth:
    get:
      tags:
        - Capabilities
      summary: List sign-in methods
      description: >-
        Returns the deployment's available sign-in methods: whether password
        sign-in is enabled and which OIDC providers are configured.
        Unauthenticated, so a login screen can render the right buttons before
        anyone signs in.
      responses:
        '200':
          description: >-
            The sign-in methods this deployment offers.


            Lets a client render the login screen without probing: one ordered
            list of

            the identity providers a person can sign in with — `password`, plus
            exactly

            the OIDC providers (`google`, `microsoft`, ...) whose apps are
            configured on

            the server. This is pre-authentication reference data, so the
            endpoint is

            unauthenticated.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthCapabilities'
components:
  schemas:
    AuthCapabilities:
      description: >-
        The sign-in methods this deployment offers.


        Lets a client render the login screen without probing: one ordered list
        of

        the identity providers a person can sign in with — `password`, plus
        exactly

        the OIDC providers (`google`, `microsoft`, ...) whose apps are
        configured on

        the server. This is pre-authentication reference data, so the endpoint
        is

        unauthenticated.
      type: object
      properties:
        methods:
          description: >-
            The available sign-in methods, in the order a client should present
            them:

            `password` first, then each configured OIDC provider.
          type: array
          items:
            $ref: '#/components/schemas/IdentityProvider'
      required:
        - methods
    IdentityProvider:
      description: >-
        How an account authenticates.


        Corresponds to the `IDENTITY_PROVIDER` `PostgreSQL` enum. [`Password`]
        is a

        locally-held Argon2 secret; the rest are external OIDC providers keyed
        by

        the provider's subject claim.


        [`Password`]: Self::Password
      oneOf:
        - description: Local password, stored as an Argon2 hash.
          type: string
          const: password
        - description: Google (OIDC).
          type: string
          const: google
        - description: Microsoft / Entra ID (OIDC).
          type: string
          const: microsoft

````