Sign in
Authentication

patch/admin/oidc/providers/{provider_id}

Request

  • Base URL: /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/admin/oidc/providers/{provider_id}
  • Auth: HTTP bearer

Path parameters

provider_idinteger required

Request body

client_idstring nullable
client_secretstring nullable
default_rolestring nullable
enabledboolean nullable
group_claimstring nullable
issuer_urlstring nullable
jit_provisioningboolean nullable
namestring nullable
role_claimstring nullable
scopesstring nullable
templatestring nullable
trust_idp_emailboolean nullable

Response

OIDC provider updated

client_idstring required
client_secretstring required

Always masked — the secret is never returned after creation.

default_rolestring required
enabledboolean required
group_claimstring required
idinteger required
issuer_urlstring required
jit_provisioningboolean required
managed_by_cloudboolean required

ADR-045 §4: true only for the provider Temps Cloud provisions for console access. The admin UI should disable edit/delete controls for such a row — the API itself refuses those requests regardless (OidcError::ManagedByCloudEdit/ManagedByCloudDelete).

namestring required
role_claimstring required
scopesstring required
templatestring required
trust_idp_emailboolean required

When true, the resolver skips the email_verified claim gate during SSO login. Only safe for IdPs where an admin controls user provisioning — see oidc_providers::Model::trust_idp_email.

Changes

No recorded changes to this operation across all 50 revisions of this API.