---
title: "Update a specific OpenID Connect provider setting for the org."
method: PUT
path: "/orgs/{org}/openid-connect/{slug_perm}/"
tags: ["orgs"]
---

# Update a specific OpenID Connect provider setting for the org.

`PUT /orgs/{org}/openid-connect/{slug_perm}/`

Update a specific OpenID Connect provider setting for the org.

## Request body

- ProviderSettingsWriteRequest
  - `claims` object, required — The set of claims that any received tokens from the provider must contain to authenticate as the configured service account.
  - `dynamic_mappings` DynamicMapping[] — The dynamic mappings of `mapping_claim` values to service accounts. Cannot be provided if `service_accounts` is also set. Note: This field and the dynamic mappings feature are still in early access. Breaking changes are possible as we receive feedback on this feature.
    - `claim_value` string, required — The OIDC token claim value that must be present in the token for it to successfully authenticate as the mapped `service_account`. Note: This field and the dynamic mappings feature are still in early access. Breaking changes are possible as we receive feedback on this feature.
    - `service_account` string, required — The service account associated with the provider setting and `claim_value` Note: This field and the dynamic mappings feature are still in early access. Breaking changes are possible as we receive feedback on this feature.
  - `enabled` boolean, required — Whether the provider settings should be used for incoming OIDC requests.
  - `mapping_claim` string, nullable — The OIDC claim to use for mapping to service accounts in dynamic_mappings. Cannot be provided if `service_accounts` is also set. Note: This field and the dynamic mappings feature are still in early access. Breaking changes are possible as we receive feedback on this feature.
  - `name` string, required — The name of the provider settings are being configured for
  - `provider_url` string, uri, required — The URL from the provider that serves as the base for the OpenID configuration. For example, if the OpenID configuration is available at https://token.actions.githubusercontent.com/.well-known/openid-configuration, the provider URL would be https://token.actions.githubusercontent.com/
  - `service_accounts` string[] — The service accounts associated with these provider settings. Cannot be provided if `mapping_claim` or `dynamic_mappings` are specified.

## Response `200`

Updated the specified OpenID Connect provider setting for the org

- ProviderSettingsWrite
  - `claims` object, required — The set of claims that any received tokens from the provider must contain to authenticate as the configured service account.
  - `dynamic_mappings` DynamicMapping[] — The dynamic mappings of `mapping_claim` values to service accounts. Cannot be provided if `service_accounts` is also set. Note: This field and the dynamic mappings feature are still in early access. Breaking changes are possible as we receive feedback on this feature.
    - `claim_value` string, required — The OIDC token claim value that must be present in the token for it to successfully authenticate as the mapped `service_account`. Note: This field and the dynamic mappings feature are still in early access. Breaking changes are possible as we receive feedback on this feature.
    - `service_account` string, required — The service account associated with the provider setting and `claim_value` Note: This field and the dynamic mappings feature are still in early access. Breaking changes are possible as we receive feedback on this feature.
  - `enabled` boolean, required — Whether the provider settings should be used for incoming OIDC requests.
  - `mapping_claim` string, nullable — The OIDC claim to use for mapping to service accounts in dynamic_mappings. Cannot be provided if `service_accounts` is also set. Note: This field and the dynamic mappings feature are still in early access. Breaking changes are possible as we receive feedback on this feature.
  - `name` string, required — The name of the provider settings are being configured for
  - `provider_url` string, uri, required — The URL from the provider that serves as the base for the OpenID configuration. For example, if the OpenID configuration is available at https://token.actions.githubusercontent.com/.well-known/openid-configuration, the provider URL would be https://token.actions.githubusercontent.com/
  - `service_accounts` string[] — The service accounts associated with these provider settings. Cannot be provided if `mapping_claim` or `dynamic_mappings` are specified.
  - `slug` string, slug — The slug of the provider settings
  - `slug_perm` string, slug — The unique, immutable identifier of the provider settings.

## Other responses

- `400` — Request could not be processed (see detail).
- `404` — Organization not found
- `422` — Missing or invalid parameters (see detail).

---

[API](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1.md) · [All operations](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cloudsmith/cloudsmith-api-v1/revisions/4d7879df9b2f/schema)