Variable: ProviderInventory

const ProviderInventory: TObject<{ kind: TUnion<[TLiteral<"keycloak">, TLiteral<"wso2">]>; mode: TUnion<[TLiteral<"bundled">, TLiteral<"customer-run">, TLiteral<"bring-your-own">]>; readAt: TString; realms: TArray<TObject<{ claims: TArray<TObject<{ expected: TArray<TString>; name: TUnsafe<"api_audience" | "mail_sender" | "mail_sender_name" | "mail_relay">; returned: TOptional<TArray<TString>>; secret: TOptional<TString>; state: TUnsafe<"found" | "missing" | "differs" | "unchecked">; }>>; clients: TArray<TObject<{ clientId: TString; expected: TArray<TString>; kind: TUnion<[TLiteral<...>, TLiteral<...>]>; redirects: TOptional<TObject<{ expected: ...; returned: ...; state: ...; }>>; returned: TOptional<TArray<TString>>; secret: TOptional<TString>; state: TUnsafe<"found" | "missing" | "differs" | "unchecked">; }>>; issuer: TOptional<TString>; mail: TArray<TObject<{ expected: TArray<TString>; name: TUnsafe<"api_audience" | "mail_sender" | "mail_sender_name" | "mail_relay">; returned: TOptional<TArray<TString>>; secret: TOptional<TString>; state: TUnsafe<"found" | "missing" | "differs" | "unchecked">; }>>; name: TString; realm: TObject<{ expected: TArray<TString>; returned: TOptional<TArray<TString>>; state: TUnsafe<"found" | "missing" | "differs" | "unchecked">; }>; slot: TUnion<[TLiteral<"staff">, TLiteral<"holders">]>; }>>; }>

Defined in: packages/contracts/src/setup-inventory.ts:156

GET /setup/api/steps/identity-provider/inventory reply: what the platform needs at the identity provider, row by row, with what the provider holds of each (DW21, item 18; DW5's "delegated mode's checklist").

It is a table and not a check, which is why it is a reply of its own: forcing rows through a check's evidence string is how prose comes to carry JSON. The screen for a provider the customer administers draws it, and the checklist an identity team downloads is a rendering of it.

It is a read. Producing it changes nothing at the provider and stores nothing. Every value in it is one the answers already hold or one the provider's own administration pages show; a secret appears as its reference and in no other form.