Teams

Create or update team SSO configuration

Validates OIDC discovery and stores the client secret encrypted with the instance key. Leave client_secret blank to keep an existing secret, or provide a new value to rotate it. Enabling this configuration adds SSO as an optional login method; password login is unchanged.

put/api/user/teams/{id}/sso

Request

  • Base URL: https://demo.hitkeep.com
  • URL: https://demo.hitkeep.com/api/user/teams/{id}/sso
  • Auth: API key in cookie hk_token

Path parameters

idstring uuid required

Request body

allowed_domainsstring[] required
auto_provisionboolean required

When true, verified users from trusted domains may join this team as Members without an invitation. Managed-cloud seat and team limits still apply.

client_idstring required
client_secretstring

Required on create. Blank preserves the stored secret on update.

display_name_claimstring required
email_claimstring required
enabledboolean required
issuer_urlstring uri required
provider_type'oidc' required

Response

Redacted team SSO configuration

allowed_domainsstring[] required
auto_provisionboolean required
callback_urlstring uri required
client_idstring required
client_secret_configuredboolean required
display_name_claimstring required
email_claimstring required
enabledboolean required
issuer_urlstring uri required
provider_type'oidc' required
updated_atstring date-time

Changes

No recorded changes to this operation across all 1 revision of this API.