Sign in
Organizations

Upsert generic OIDC SSO configuration

Creates or updates the current organization's generic OIDC SSO configuration. Omit clientSecret to preserve the previously stored secret on updates.

put/api/v1/org/sso/oidc

Request body

scopesstring nullable
metadataDocumentEndpointstring required
clientSecretstring

When omitted on update, the stored secret is preserved. Required on create.

clientIdstring required
enabledboolean

When false the method is hidden from precheck even if discovery would match.

overrideEmailDomainsboolean

When true, the method's own emailDomains list governs discovery. When false, the org's allowed_email_domains is used instead.

emailDomainsstring[]

Strict whitelist (only consulted when overrideEmailDomains is true).

allowPasswordboolean

Controls whether email+password sign-in is shown alongside this method when it matches a user. When multiple matching SSO methods disagree, lenient rule applies (ANY method that allows → show password).

Response

Ok

status'ok' required

Changes