---
title: "PATCH /providers/oauth2-dcr/{pbm_uuid}/"
method: PATCH
path: "/providers/oauth2-dcr/{pbm_uuid}/"
tags: ["providers"]
---

# PATCH /providers/oauth2-dcr/{pbm_uuid}/

`PATCH /providers/oauth2-dcr/{pbm_uuid}/`

OAuth2 Dynamic Client Registration configuration ViewSet

## Path parameters

- `pbm_uuid` string, uuid, required

## Request body

- PatchedOAuth2DynamicClientRegistrationRequest — Serializer for OAuth2DynamicClientRegistration
  - `provider` integer
  - `default_application_group` string — Group to assign to automatically created applications.
  - `override_authorization_flow` string, uuid, nullable — Authorization flow applied to dynamically registered clients.
  - `override_invalidation_flow` string, uuid, nullable
  - `override_property_mappings` string[] — Scope mappings applied to dynamically registered clients.
  - `access_token_validity` string — Maximum access token validity for registered clients (Format: hours=1;minutes=2;seconds=3).
  - `refresh_token_validity` string — Maximum refresh token validity for registered clients (Format: hours=1;minutes=2;seconds=3).
  - `allowed_grant_types` GrantTypeEnum[] — If empty, all grant types are allowed.
  - `policy_engine_mode` 'all' | 'any'

## Response `200`

- OAuth2DynamicClientRegistration — Serializer for OAuth2DynamicClientRegistration
  - `pbm_uuid` string, uuid, required
  - `provider` integer, required
  - `default_application_group` string — Group to assign to automatically created applications.
  - `override_authorization_flow` string, uuid, nullable — Authorization flow applied to dynamically registered clients.
  - `override_invalidation_flow` string, uuid, nullable
  - `override_property_mappings` string[] — Scope mappings applied to dynamically registered clients.
  - `access_token_validity` string — Maximum access token validity for registered clients (Format: hours=1;minutes=2;seconds=3).
  - `refresh_token_validity` string — Maximum refresh token validity for registered clients (Format: hours=1;minutes=2;seconds=3).
  - `allowed_grant_types` GrantTypeEnum[] — If empty, all grant types are allowed.
  - `policy_engine_mode` 'all' | 'any'

## Other responses

- `400`
- `403`

---

[API](https://skmtc.dev/goauthentik/apis/authentik.md) · [All operations](https://skmtc.dev/goauthentik/apis/authentik/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/goauthentik/authentik/revisions/4e42e86021d7/schema)