---
title: "Update Auth Settings"
method: PATCH
path: "/v3/portals/{portalId}/authentication-settings"
tags: ["Portal Auth Settings"]
---

# Update Auth Settings

`PATCH /v3/portals/{portalId}/authentication-settings`

Updates the developer authentication configuration for a portal. Developers can be allowed to login using basic auth (email & password) or use Single-Sign-On through an Identity Provider. Developers can be automatically assigned to teams by mapping claims from their IdP account.

## Request body

- PortalAuthenticationSettingsUpdateRequest — Properties to update a portal's developer auth settings.
  - `basic_auth_enabled` boolean — The organization has basic auth enabled.
  - `oidc_auth_enabled` boolean — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `saml_auth_enabled` boolean — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_team_mapping_enabled` boolean — IdP groups determine the Portal Teams a developer has. Replaced by idp_mapping_enabled.
  - `konnect_mapping_enabled` boolean — Whether a Konnect Identity Admin assigns teams to a developer.
  - `idp_mapping_enabled` boolean — Whether IdP groups determine the Konnect Portal teams a developer has.
  - `oidc_issuer` string — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_client_id` string — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_client_secret` string — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_scopes` string[] — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_claim_mappings` object — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
    - `name` string
    - `email` string
    - `groups` string

## Response `200`

Details about a portal's authentication settings.

- PortalAuthenticationSettingsResponse — The developer authentication settings for a portal.
  - `basic_auth_enabled` boolean, required — The portal has basic auth enabled or disabled.
  - `oidc_auth_enabled` boolean, required — The portal has OIDC enabled or disabled.
  - `saml_auth_enabled` boolean — A Konnect Identity Admin assigns teams to a developer.
  - `oidc_team_mapping_enabled` boolean, required — IdP groups determine the Portal Teams a developer has. Replaced by idp_mapping_enabled.
  - `idp_mapping_enabled` boolean — Whether IdP groups determine the Konnect Portal teams a developer has.
  - `konnect_mapping_enabled` boolean, required — A Konnect Identity Admin assigns teams to a developer.
  - `oidc_config` object — Configuration properties for an OpenID Connect Identity Provider.
    - `issuer` string, required
    - `client_id` string, required
    - `scopes` string[]
    - `claim_mappings` PortalClaimMappings — Mappings from a portal developer atribute to an Identity Provider claim.
      - `name` string
      - `email` string
      - `groups` string

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden

## Changes

- **2026-01-29** `0c2eede22268` — 1 info
  - the response optional property `oidc_config` became read-only for the status `200`
- **2025-12-03** `581456e3279f` — 12 info
  - request property `oidc_auth_enabled` deprecated
  - request property `oidc_claim_mappings` deprecated
  - request property `oidc_client_id` deprecated
  - request property `oidc_client_secret` deprecated
  - …8 more
- **2025-10-30** `845120e19d45` — 9 breaking
  - the request property `basic_auth_enabled` became not nullable
  - the request property `idp_mapping_enabled` became not nullable
  - the request property `konnect_mapping_enabled` became not nullable
  - the request property `oidc_auth_enabled` became not nullable
  - …5 more
- **2025-10-23** `8ab3ec3ed301` — 1 warning
  - added the new `type` enum value to the `allOf[subschema #2]/invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
- …earlier changes not shown

[Full history](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v3/portals/:portalId/authentication-settings/patch.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kong/konnect-api-go-sdk/revisions/7d3c634668f8/schema)