Sign in
Organizations

Upsert Okta SSO configuration

Creates or updates the current organization's Okta SSO configuration. Omit oauth2ClientSecret to preserve the previously stored secret on updates.

put/api/v1/org/sso/okta

Request body

extraScopesstring nullable
authorizationServerIdstring nullable
oauth2ClientSecretstring

When omitted on update, the stored secret is preserved. Required on create.

oauth2ClientIdstring required
oktaDomainstring required
oauth2Issuerstring required
enabledboolean

When false the method is hidden from precheck even if discovery would match.

overrideEmailDomainsboolean

When true, the method's own emailDomains list governs discovery. When false, the org's allowed_email_domains is used instead.

emailDomainsstring[]

Strict whitelist (only consulted when overrideEmailDomains is true).

allowPasswordboolean

Controls whether email+password sign-in is shown alongside this method when it matches a user. When multiple matching SSO methods disagree, lenient rule applies (ANY method that allows → show password).

Response

Ok

status'ok' required

Changes