Settings

Update Sso Enforcement

Decide whether SSO is the ONLY way in.

Enforcing it blocks every other sign-in method. That is the point of it, and it is also the single most effective way to lock an org out of its own account - enforce only once you have signed in through SSO yourself.

put/org/sso/enforcement

Request

  • Base URL: https://be.graph8.com/api/v1
  • URL: https://be.graph8.com/api/v1/org/sso/enforcement
  • Auth: HTTP bearer

Headers

Authorizationstring nullable
X-Target-Org-Idstring nullable

Request body

require_ssoboolean

True makes SSO the only way in. Defaults to false, as the app's does.

grant_ttl_minutesinteger nullable

How long an SSO grant stays valid.

allow_unverified_domain_membersboolean nullable

Whether members on an unverified email domain may still sign in.

allowed_domainsstring[] nullable

Response

Successful Response

dataSettingsPayload required

An open envelope for a settings object.

Open because an ontology concept and an SSO config both grow fields as the product does, and on a settings read a dropped field reads as "not configured" rather than "we did not tell you".

Changes

No recorded changes to this operation across all 2 revisions of this API.