APapinizer
AuthenticationOidcProvider

PUT /apiops/projects/{projectName}/oidc-providers/{name}/

Changed on

Updates an OIDC identity provider by name. ABSENT vs EMPTY semantics apply to clientSecret (2026-08-04 decision, same as ApiOpsLlmProvider): omit the field entirely to PRESERVE the stored value; send it as an empty string to CLEAR it. It is never round-tripped through GET.

Request

Path parameters

projectNamestring required
namestring required

Request body

namestring
descriptionstring
vendorType'GENERIC' | 'KEYCLOAK'
issuerUrlstring
discoveryUrlstring
autoDiscoverboolean
tokenEndpointstring
introspectionEndpointstring
userInfoEndpointstring
jwksEndpointstring
endSessionEndpointstring
clientIdstring
clientSecretstring
clientSecretSetboolean
clientAuthMethod'CLIENT_SECRET_BASIC' | 'CLIENT_SECRET_POST' | 'PRIVATE_KEY_JWT'
validationMode'OFFLINE' | 'ONLINE' | 'HYBRID'
jwksSourceMode'DISCOVERY' | 'STATIC'
staticJwksJsonstring
certificateNamestring
jwksCacheTimeoutSecondsinteger
allowedSignatureAlgorithmsstring[]
validateIssuerboolean
expectedIssuerstring
validateAudienceboolean
expectedAudiencestring[]
maxClockSkewSecondsinteger
connectionTimeoutSecondsinteger
readTimeoutSecondsinteger
usernameClaimPathstring
emailClaimPathstring
fullNameClaimPathstring
rolesClaimPathstring
groupsClaimPathstring
requireMatchingCredentialboolean
roleSource'TOKEN_CLAIM' | 'SYNCED_CREDENTIAL' | 'BOTH'
syncEnabledboolean
realmstring
adminBaseUrlstring
syncPageSizeinteger
groupSyncEnabledboolean
roleSyncSource'REALM_ROLES' | 'CLIENT_ROLES' | 'GROUPS'
syncClientIdstring

Response

OK

namestring
descriptionstring
vendorType'GENERIC' | 'KEYCLOAK'
issuerUrlstring
discoveryUrlstring
autoDiscoverboolean
tokenEndpointstring
introspectionEndpointstring
userInfoEndpointstring
jwksEndpointstring
endSessionEndpointstring
clientIdstring
clientSecretstring
clientSecretSetboolean
clientAuthMethod'CLIENT_SECRET_BASIC' | 'CLIENT_SECRET_POST' | 'PRIVATE_KEY_JWT'
validationMode'OFFLINE' | 'ONLINE' | 'HYBRID'
jwksSourceMode'DISCOVERY' | 'STATIC'
staticJwksJsonstring
certificateNamestring
jwksCacheTimeoutSecondsinteger
allowedSignatureAlgorithmsstring[]
validateIssuerboolean
expectedIssuerstring
validateAudienceboolean
expectedAudiencestring[]
maxClockSkewSecondsinteger
connectionTimeoutSecondsinteger
readTimeoutSecondsinteger
usernameClaimPathstring
emailClaimPathstring
fullNameClaimPathstring
rolesClaimPathstring
groupsClaimPathstring
requireMatchingCredentialboolean
roleSource'TOKEN_CLAIM' | 'SYNCED_CREDENTIAL' | 'BOTH'
syncEnabledboolean
realmstring
adminBaseUrlstring
syncPageSizeinteger
groupSyncEnabledboolean
roleSyncSource'REALM_ROLES' | 'CLIENT_ROLES' | 'GROUPS'
syncClientIdstring

Changes