UpdateSsoProviderRequest

All fields optional; at least one must be supplied. protocol must match the provider's stored protocol (defaults to oidc when omitted) and selects which field set is valid; fields for the other protocol are rejected. clientSecret is write-only and only sent when rotating it.

  • authorizationEndpoint
    Type: stringFormat: uri
  • cert
    Type: string

    SAML only — requires entryPoint

  • clientId
    Type: string

    OIDC only

  • clientSecret
    Type: string

    OIDC only

  • disableImplicitSignUp
    Type: boolean

    Write-only — not echoed in read responses.

  • discoveryEndpoint
    Type: stringFormat: uri
  • domain
    Type: string
  • enabled
    Type: boolean
  • entryPoint
    Type: stringFormat: uri

    SAML only — requires cert

  • identifierFormat
    Type: string

    SAML only

  • idpMetadataXml
    Type: string

    SAML only — replacement IdP federation metadata XML

  • issuer
    Type: stringFormat: uri
  • jwksEndpoint
    Type: stringFormat: uri
  • label
    Type: string
  • mapping
    Type:

    SAML assertion-attribute mapping (SAML only). All keys optional; unset keys use the plugin defaults.

    Properties: 5
  • protocol
    Type: "oidc" or "saml"enum
  • scopes
    Type: array of string
  • tokenEndpoint
    Type: stringFormat: uri
Previous
SamlAttributeMapping
Next
SsoProviderResponse