---
title: "Replace identity settings and revoke existing sessions"
method: PUT
path: "/api/operator/cis2"
tags: ["Staff Identity"]
---

# Replace identity settings and revoke existing sessions

`PUT /api/operator/cis2`

## Request

- Base URL: `https://sim.animahealth.com`
- URL: `https://sim.animahealth.com/api/operator/cis2`
- Auth: HTTP bearer

Requires the operator bearer header, not a browser session. Settings are process-local; restart restores defaults. Client IDs and redirect URIs must be unique. Redirects must use HTTPS or localhost HTTP, with no credentials or fragment.

## Request body

- Cis2Settings
  - `scenario` 'normal' | 'deny' | 'unavailable' | 'expired-session', required
  - `tokenLifetimeSeconds` integer, required
  - `clients` object[], required
    - `id` string, required
    - `name` string, required
    - `redirectUris` string[], required

## Response `200`

Success

- Cis2Configuration
  - `scenario` 'normal' | 'deny' | 'unavailable' | 'expired-session', required
  - `tokenLifetimeSeconds` integer, required
  - `clients` object[], required
  - `identities` object[], required
  - `storage` string, required
  - `active` object, required
    - `interactions` integer, required
    - `codes` integer, required
    - `tokens` integer, required

## Other responses

- `400`: Invalid input or unsupported workflow
- `401`: Missing or invalid credentials
- `403`: Scope, origin or operator restriction
- `404`: Unknown resource
- `409`: Stale version, invalid transition or unavailable capacity
- `413`: Request exceeds this operation's body-size limit
- `429`: Deployment has reached its 5,000-team capacity
- `500`: Internal simulation error

---

[API](https://skmtc.dev/animahealth/apis/nhs-sim-api.md) - [All operations](https://skmtc.dev/animahealth/apis/nhs-sim-api/llms.txt) - [OpenAPI document](https://skmtc.dev/animahealth/apis/nhs-sim-api/revisions/c7803d7a3e58?raw)