---
title: "Update identity management configuration"
method: POST
path: "/resources/configurations/v1"
tags: ["Core settings"]
---

# Update identity management configuration

`POST /resources/configurations/v1`

## Request

- Base URL: `http://localhost:8181`
- URL: `http://localhost:8181/resources/configurations/v1`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/frontegg/apis/entitlements-agent-pdp/docs/resources/configurations/v1/post.ts> (a function with typed inputs; its response is checked against the schema)

This route updates the identity management configuration for a vendor. Send values in the POST body for params that you want to add or update. See the dropdown for available values for each param.

## Request body

- VendorConfigRequest
  - `defaultTokenExpiration` number
  - `defaultRefreshTokenExpiration` number
  - `cookieSameSite` 'STRICT' | 'LAX' | 'NONE'
  - `machineToMachineAuthStrategy` 'ClientCredentials' | 'AccessToken'
  - `allowSignups` boolean
  - `apiTokensEnabled` boolean
  - `allowOverridePasswordComplexity` boolean
  - `allowOverridePasswordExpiration` boolean
  - `allowOverrideEnforcePasswordHistory` boolean
  - `jwtAlgorithm` 'HS256' | 'RS256'
  - `allowNotVerifiedUsersLogin` boolean
  - `forcePermissions` boolean
  - `addSamlAttributesToJwt` boolean
  - `authStrategy` 'Code' | 'EmailAndPassword' | 'MagicLink' | 'NoLocalAuthentication' | 'SmsCode'
  - `defaultPasswordlessTokenExpiration` number
  - `forceSameDeviceOnAuth` boolean
  - `allowTenantInvitations` boolean
  - `rotateRefreshTokens` boolean
  - `skipTenantValidation` boolean
  - `addRolesToJwt` boolean
  - `addPermissionsToJwt` boolean

## Response `201`

- VendorConfigResponse
  - `id` string, required
  - `defaultTokenExpiration` number, required
  - `defaultRefreshTokenExpiration` number, required
  - `publicKey` string, required
  - `cookieSameSite` 'STRICT' | 'LAX' | 'NONE', required
  - `allowSignups` boolean, required
  - `apiTokensEnabled` boolean, required
  - `allowOverridePasswordComplexity` boolean, required
  - `allowOverridePasswordExpiration` boolean, required
  - `allowOverrideEnforcePasswordHistory` boolean, required
  - `jwtAlgorithm` 'RS256' | 'HS256', required
  - `jwtSecret` string, required
  - `allowNotVerifiedUsersLogin` boolean, required
  - `forcePermissions` boolean, required
  - `authStrategy` 'EmailAndPassword' | 'MagicLink' | 'Code' | 'NoLocalAuthentication' | 'SmsCode', required
  - `defaultPasswordlessTokenExpiration` number, required
  - `forceSameDeviceOnAuth` boolean, required
  - `allowTenantInvitations` boolean, required
  - `rotateRefreshTokens` boolean, required
  - `machineToMachineAuthStrategy` 'ClientCredentials' | 'AccessToken', required
  - `addRolesToJwt` boolean, required
  - `addPermissionsToJwt` boolean, required
  - `refreshTokensRotationLimit` number, required
  - `addSamlAttributesToJwt` boolean, required

---

[API](https://skmtc.dev/frontegg/apis/entitlements-agent-pdp.md) - [All operations](https://skmtc.dev/frontegg/apis/entitlements-agent-pdp/llms.txt) - [OpenAPI document](https://skmtc.dev/frontegg/apis/entitlements-agent-pdp/revisions/c496ae9e1c3e?raw)