---
title: "Update SSO configuration"
method: PUT
path: "/v2/authn/sso-config/partitions/enforced/{partitionId}"
tags: ["SSO Configuration"]
---

# Update SSO configuration

`PUT /v2/authn/sso-config/partitions/enforced/{partitionId}`

## Request

- Base URL: `https://api.alianza.com`
- URL: `https://api.alianza.com/v2/authn/sso-config/partitions/enforced/{partitionId}`
- Auth: API key in header `X-AUTH-TOKEN`
- TypeScript: <https://skmtc.dev/alianza/apis/alianza-public-api/docs/v2/authn/sso-config/partitions/enforced/:partitionId/put.ts> (a function with typed inputs; its response is checked against the schema)

Updates an existing Partition Enforced SSO configuration with Identity Provider details.

## Path parameters

- `partitionId` string, required

## Request body

- CompleteSSOConfigRequest
  - `identityProviderSignInUrl` string, uri, required: Identity Provider sign-in endpoint URL where SAML authentication requests are sent.
  - `identityProviderSigningCertificate` string, required: Identity Provider signing certificate in PEM or CER format.
  - `userIdAttributeFieldMapping` string: SAML attribute name that contains the Alianza user ID.
  - `externalIdAttributeFieldMapping` string, required: SAML attribute name containing the user's unique identifier in the IdP.
  - `externalEmailAttributeFieldMapping` string: SAML attribute name containing the user's email address.
  - `ssoName` string, required
  - `identityProviderLogoutUrl` string, uri
  - `samlRequestProtocolBinding` 'POST' | 'REDIRECT': SAML Request Protocol Binding.
  - `enforcedSubPartitions` string[]
  - `allowSpInitiatedAuthenticationFlow` boolean
  - `allowAlianzaAuthentication` boolean

## Response `200`

SSO configuration updated successfully

- SSOConfigResponse
  - `partitionId` string
  - `accountId` string, nullable
  - `ssoName` string
  - `assertionConsumerResponseUrl` string, uri
  - `serviceProviderEntityId` string
  - `serviceProviderSigningCertificate` string
  - `identityProviderUserId` string
  - `identityProviderUserEmail` string
  - `alianzaUserIdFieldMapping` string
  - `identityProviderSignInUrl` string, uri
  - `identityProviderLogoutUrl` string, uri
  - `identityProviderSigningKeyName` string
  - `status` 'DRAFT' | 'READY' | 'ENABLED' | 'DISABLED'
  - `createdAt` string, date-time
  - `updatedAt` string, date-time
  - `validated` boolean
  - `allowAlianzaAuthentication` boolean
  - `allowSpInitiatedAuthenticationFlow` boolean
  - `enforcedSubPartitions` string[]

## Other responses

- `400`: Bad Request - Invalid request parameters or validation failed
- `401`: Unauthorized - Invalid or missing X-Auth-Token
- `404`: Not Found - SSO configuration not found
- `500`: Internal Server Error - Failed to update configuration

---

[API](https://skmtc.dev/alianza/apis/alianza-public-api.md) - [All operations](https://skmtc.dev/alianza/apis/alianza-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/alianza/apis/alianza-public-api/revisions/7223246c352c?raw)