---
title: "Update Auth Settings"
method: PATCH
path: "/developer/auth-settings"
tags: ["Developer", "Developer - Settings"]
---

# Update Auth Settings

`PATCH /developer/auth-settings`

## Request

- Base URL: `https://api.openintake.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.openintake.ai/developer/auth-settings`
- Auth: none declared

Update the auth settings for the current customer.

This endpoint is restricted to developer users only.

- **password_login_enabled**: Set to true to enable password-based login for staff members
- **require_social_login**: Set to true to require users who have used social sign-in to continue using it
- **session_lifetime_days**: Sign-in lifetime override (1-365 days); send null to reset to the default.
  Takes effect on each session's next request, both lengthening and shortening.

## Request body

- UpdateAuthSettingsRequest: Update auth settings request model (developer only) Omitted fields are left unchanged. session_lifetime_days sent as null clears the override back to the default.
  - `password_login_enabled` boolean, nullable: Whether password-based staff login is enabled
  - `require_social_login` boolean, nullable: Whether users who have signed in with social (Google/Microsoft) are required to continue using social login
  - `session_lifetime_days` integer, nullable: Sign-in lifetime override in days (1-365); null resets to the default

## Response `200`

Successful Response

- AuthSettingsResponse: Auth settings response model
  - `password_login_enabled` boolean, required: Whether password-based staff login is enabled
  - `require_social_login` boolean, required: Whether users who have signed in with social (Google/Microsoft) are required to continue using social login
  - `session_lifetime_days` integer, nullable: How long a sign-in lasts without use, in days; null = the default
  - `default_session_lifetime_minutes` integer, required: The deployment default sign-in lifetime, used when session_lifetime_days is null

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-19** `c74fd5d651f8`: 3 info
  - added the new optional request property `session_lifetime_days`
  - added the optional property `session_lifetime_days` to the response with the `200` status
  - added the required property `default_session_lifetime_minutes` to the response with the `200` status

[Operation history](https://skmtc.dev/openintake/apis/openintake-api/changes/developer/auth-settings/patch.md)

---

[API](https://skmtc.dev/openintake/apis/openintake-api.md) - [All operations](https://skmtc.dev/openintake/apis/openintake-api/llms.txt) - [OpenAPI document](https://skmtc.dev/openintake/apis/openintake-api/revisions/de90a8dcbc07?raw)
