---
title: "Update"
method: POST
path: "/api/v1/step-up/providers/{id}"
tags: ["Step Up Authentication Providers"]
---

# Update

`POST /api/v1/step-up/providers/{id}`

Invokes the c1.api.stepup.v1.StepUpProviderService.Update method.

## Path parameters

- `id` string, required — The id field.

## Request body

- C1ApiStepupV1UpdateStepUpProviderRequestInput — The UpdateStepUpProviderRequest message.
  - `stepUpProvider` C1ApiStepupV1StepUpProvider — The StepUpProvider message. This message contains a oneof named settings. Only a single field of the following list may be set at a time: - oauth2 - microsoft
    - `clientId` string — The clientId field.
    - `createdAt` string, date-time
    - `displayName` string — The displayName field.
    - `enabled` boolean — The enabled field.
    - `id` string — The id field.
    - `issuerUrl` string — The issuerUrl field.
    - `lastTestedAt` string, date-time
    - `microsoft` C1ApiStepupV1StepUpMicrosoftSettings, nullable — StepUpMicrosoftSettings represents a Microsoft Entra Provider using Conditional Access Policies to enforce step-up authentication.
      - `conditionalAccessIds` string[], nullable — The conditionalAccessIds field.
      - `tenant` string — The tenant field.
    - `oauth2` C1ApiStepupV1StepUpOAuth2Settings, nullable — StepUpOAuth2Settings repersents an OAuth2 provider that supports RFC 9470 <https://www.rfc-editor.org/rfc/rfc9470> Common ACR values for OAuth2 providers include: - "urn:okta:loa:1fa:any" (okta) - "urn:okta:loa:1fa:pwd" (okta) - "urn:okta:loa:2fa:any" (okta) - "urn:okta:loa:2fa:any:ifpossible" (okta) - "phr" (okta) - "phrh" (okta)
      - `acrValues` string[], nullable — The acrValues field.
    - `updatedAt` string, date-time
  - `updateMask` string, nullable

## Response `200`

Successful response

- C1ApiStepupV1UpdateStepUpProviderResponse — The UpdateStepUpProviderResponse message.
  - `stepUpProvider` C1ApiStepupV1StepUpProvider — The StepUpProvider message. This message contains a oneof named settings. Only a single field of the following list may be set at a time: - oauth2 - microsoft
    - `clientId` string — The clientId field.
    - `createdAt` string, date-time
    - `displayName` string — The displayName field.
    - `enabled` boolean — The enabled field.
    - `id` string — The id field.
    - `issuerUrl` string — The issuerUrl field.
    - `lastTestedAt` string, date-time
    - `microsoft` C1ApiStepupV1StepUpMicrosoftSettings, nullable — StepUpMicrosoftSettings represents a Microsoft Entra Provider using Conditional Access Policies to enforce step-up authentication.
      - `conditionalAccessIds` string[], nullable — The conditionalAccessIds field.
      - `tenant` string — The tenant field.
    - `oauth2` C1ApiStepupV1StepUpOAuth2Settings, nullable — StepUpOAuth2Settings repersents an OAuth2 provider that supports RFC 9470 <https://www.rfc-editor.org/rfc/rfc9470> Common ACR values for OAuth2 providers include: - "urn:okta:loa:1fa:any" (okta) - "urn:okta:loa:1fa:pwd" (okta) - "urn:okta:loa:2fa:any" (okta) - "urn:okta:loa:2fa:any:ifpossible" (okta) - "phr" (okta) - "phrh" (okta)
      - `acrValues` string[], nullable — The acrValues field.
    - `updatedAt` string, date-time

## Changes

- **2025-04-10** `17f9f3bcedd5` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/step-up/providers/:id/post.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) · [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/e09d811ca082/schema)