---
title: "UpdateSSOConfiguration"
method: POST
path: "/gitpod.v1.OrganizationService/UpdateSSOConfiguration"
tags: ["gitpod.v1.OrganizationService"]
---

# UpdateSSOConfiguration

`POST /gitpod.v1.OrganizationService/UpdateSSOConfiguration`

Updates SSO provider settings and authentication rules.

 Use this method to:
 - Rotate client credentials
 - Update provider endpoints
 - Modify claim mappings
 - Change authentication policies
 - Toggle SSO enforcement

 ### Examples

 - Update credentials:

   Rotates client ID and secret.

   ```yaml
   ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
   clientId: "new-client-id"
   clientSecret: "new-client-secret"
   ```

 - Update provider status:

   Activates or deactivates SSO provider.

   ```yaml
   ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
   state: SSO_CONFIGURATION_STATE_ACTIVE
   ```

## Request body

- GitpodV1UpdateSSOConfigurationRequest
  - `additionalScopes` GitpodV1AdditionalScopesUpdate — AdditionalScopesUpdate wraps a list of OIDC scopes so that the update request can distinguish "not changing scopes" (field absent) from "clearing all scopes" (field present, empty list).
    - `scopes` string[]
  - `claims` object — claims are key/value pairs that defines a mapping of claims issued by the IdP.
  - `clientId` string, nullable — client_id is the client ID of the SSO provider
  - `clientSecret` string, nullable — client_secret is the client secret of the SSO provider
  - `displayName` string, nullable
  - `emailDomain` string, nullable
  - `emailDomains` string[]
  - `issuerUrl` string, uri, nullable — issuer_url is the URL of the IdP issuer
  - `ssoConfigurationId` string, uuid, required — sso_configuration_id is the ID of the SSO configuration to update
  - `state` 'SSO_CONFIGURATION_STATE_UNSPECIFIED' | 'SSO_CONFIGURATION_STATE_INACTIVE' | 'SSO_CONFIGURATION_STATE_ACTIVE'

## Response `200`

Success

- GitpodV1UpdateSSOConfigurationResponse

## Other responses

- `default` — Error

## Changes

- **2026-02-11** `b97dcde84128` — 1 info
  - added the new optional request property `additionalScopes`
- **2025-12-15** `d62ef4b9187c` — 2 info
  - added the new optional request property `displayName`
  - added the new optional request property `emailDomains`
- **2025-02-21** `3655d5ad0ac3` — 2 breaking, 1 warning, 3 info
  - request property `state` was restricted to a list of enum values
  - the `state` request property type/format changed from ``/`` to `string`/``
  - removed `#/components/schemas/gitpod.v1.SSOConfigurationState` from the `state` request property `allOf` list
  - added the new `SSO_CONFIGURATION_STATE_ACTIVE` enum value to the request property `state`
  - …2 more
- **2025-02-18** `cd6a05ae99d2` — 1 warning
  - removed the optional property `detail` from the response with the `default` status
- **2025-02-14** `988164042da1` — 1 breaking
  - the request property `ssoConfigurationId` became required

[Change history](https://skmtc.dev/gitpod-io/apis/gitpod-v1/changes/gitpod.v1.OrganizationService/UpdateSSOConfiguration/post.md)

---

[API](https://skmtc.dev/gitpod-io/apis/gitpod-v1.md) · [All operations](https://skmtc.dev/gitpod-io/apis/gitpod-v1/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gitpod-io/gitpod-v1/revisions/b97dcde84128/schema)