Sign in
Organizations

Upsert Azure AD SSO configuration

Creates or updates the current organization's Azure AD SSO configuration. Omit oauth2ClientSecret to preserve the previously stored secret on updates.

put/api/v1/org/sso/azuread

Request body

oauth2TenantIdstring required
oauth2ClientSecretstring

When omitted on update, the stored secret is preserved. Required on create.

oauth2ClientIdstring required
enabledboolean

When false the method is hidden from precheck even if discovery would match.

overrideEmailDomainsboolean

When true, the method's own emailDomains list governs discovery. When false, the org's allowed_email_domains is used instead.

emailDomainsstring[]

Strict whitelist (only consulted when overrideEmailDomains is true).

allowPasswordboolean

Controls whether email+password sign-in is shown alongside this method when it matches a user. When multiple matching SSO methods disagree, lenient rule applies (ANY method that allows → show password).

Response

Ok

status'ok' required

Changes