ETethiack
organizations

Replace your federated-login IdP configuration (owner)

Update the owner's template in place -- new metadata, rotated secret.

The template id is preserved, so the customer's ACS URL stays valid.

Deliberately not entitlement-gated: this repairs an existing, possibly SSO-mandated login path, and members of an SSO-mandated organization hold no password. Gating repair on a lapsed plan would turn a billing gap into a lockout. The paywall is on establish, where the connection is created.

Args: organization_id (int): The parent organization. payload (SsoIdpRequest): The new configuration. db (AsyncSession): Request-scoped session. context (ActiveContext): Resolved caller.

Returns: IdpTemplateResponse: The template id and, for SAML, the customer's URLs.

put/v1/organizations/{organization_id}/sso/idp/self

Request

  • Base URL
    https://api.ethiack.com (the document declares no server; this is the origin it was published from)
  • Auth
    none declared

Path parameters

organization_idinteger required

Request body

OR

Response

Successful Response

zitadel_idp_idstring required

The Zitadel IdP template this organization's federated logins now run against.

protocol'oidc' | 'saml' required

Which protocol family the template configures.

acs_urlstring nullable

SAML only. The Assertion Consumer Service URL the customer must configure in their IdP. Unique to this template, which is what keeps one customer's assertions off another's connection.

sp_metadata_urlstring nullable

SAML only. Zitadel's SP metadata for this template, for customers who prefer importing it over manual entry. Named for the direction: the request bodies' metadata_url is the opposite one, the customer's IdP metadata that Zitadel fetches.

certificate_urlstring nullable

SAML only. Zitadel's signing certificate for this template.

slo_urlstring nullable

SAML only. Single-logout endpoint for this template.

Changes

No recorded changes to this operation across all 1 revision of this API.