---
title: "Set the customization template for an OIDC subject claim for an organization"
method: PUT
path: "/orgs/{org}/actions/oidc/customization/sub"
tags: ["oidc"]
---

# Set the customization template for an OIDC subject claim for an organization

`PUT /orgs/{org}/actions/oidc/customization/sub`

Creates or updates the customization template for an OpenID Connect (OIDC) subject claim.

OAuth app tokens and personal access tokens (classic) need the `write:org` scope to use this endpoint.

## Path parameters

- `org` string, required

## Request body

- object — Actions OIDC Subject customization
  - `include_claim_keys` string[] — Array of unique strings. Each claim key can only contain alphanumeric characters and underscores.
  - `use_immutable_subject` boolean — Whether to opt in to the immutable OIDC subject claim format for the organization. When `true`, new OIDC tokens will use a stable, repository-ID-based `sub` claim instead of the name-based format.

## Response `201`

Empty response

- EmptyObject — An object without any properties.

## Other responses

- `403` — Forbidden
- `404` — Resource not found

## Changes

> 62 revisions in range; 3 could not be searched.

- **2026-04-22** `4f8650335442` — 1 info
  - added the new optional request property `use_immutable_subject`
- **2026-04-02** `f46a0dd461fb` — 1 info
  - the request property `include_claim_keys` became optional

[Change history](https://skmtc.dev/github/apis/enterprise-cloud/changes/orgs/:org/actions/oidc/customization/sub/put.md)

---

[API](https://skmtc.dev/github/apis/enterprise-cloud.md) · [All operations](https://skmtc.dev/github/apis/enterprise-cloud/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/github/enterprise-cloud/revisions/6020c72ba337/schema)