ETethiack
organizations

Update an organization's Zitadel IdP template (admin)

Update the template in place -- new issuer, rotated secret, new metadata.

The template id does not change, so the customer's ACS URL stays valid and connections referencing it are unaffected. A full replacement, not a patch, with one allowance: an OIDC body omitting client_secret keeps the stored one.

Args: organization_id (int): The parent organization. payload (SsoIdpRequest): The new configuration. db (AsyncSession): Request-scoped session. context (ActiveContext): Resolved caller.

Returns: IdpTemplateResponse: The template id and, for SAML, the customer's URLs.

put/v1/organizations/{organization_id}/sso/idp

Request

  • Base URL
    https://api.ethiack.com (the document declares no server; this is the origin it was published from)
  • Auth
    none declared

Path parameters

organization_idinteger required

Request body

OR

Response

Successful Response

zitadel_idp_idstring required

The Zitadel IdP template this organization's federated logins now run against.

protocol'oidc' | 'saml' required

Which protocol family the template configures.

acs_urlstring nullable

SAML only. The Assertion Consumer Service URL the customer must configure in their IdP. Unique to this template, which is what keeps one customer's assertions off another's connection.

sp_metadata_urlstring nullable

SAML only. Zitadel's SP metadata for this template, for customers who prefer importing it over manual entry. Named for the direction: the request bodies' metadata_url is the opposite one, the customer's IdP metadata that Zitadel fetches.

certificate_urlstring nullable

SAML only. Zitadel's signing certificate for this template.

slo_urlstring nullable

SAML only. Single-logout endpoint for this template.

Changes

No recorded changes to this operation across all 1 revision of this API.