---
title: "Replace SSO bypass users of the account"
method: PATCH
path: "/accounts/{account}/relationships/sso-bypass-users"
tags: ["accounts"]
---

# Replace SSO bypass users of the account

`PATCH /accounts/{account}/relationships/sso-bypass-users`

## Request

- Base URL: `https://example.scalr.io/api/iacp/v3`
- URL: `https://example.scalr.io/api/iacp/v3/accounts/{account}/relationships/sso-bypass-users`
- Auth: HTTP bearer

This endpoint completely replaces the list of [users](users.html#the-user-resource)
who can log in to the account via password, even when SSO is enforced,
with a provided list.

## Path parameters

- `account` string, required

## Request body

- SsoBypassUsersRelationshipFieldsetsListingDocument: Document Listing.
  - `data` SsoBypassUsersRelationship[]
    - `id` string, required
    - `type` 'users', required
  - `included` object[]
  - `links` object
  - `meta` object

## Response `204`

Success.

## Other responses

- `403`: User unauthorized to perform this action.
- `422`: The request would remove the account owner from the list.
- `4XX`: Client error.
- `5XX`: Server error.

## Changes

- **2026-11-03** `d3e1dc85657a`: 1 info
  - added the non-success response with the status `422`

[Operation history](https://skmtc.dev/scalr/apis/scalr-iacp-api/changes/accounts/:account/relationships/sso-bypass-users/patch.md)

---

[API](https://skmtc.dev/scalr/apis/scalr-iacp-api.md) - [All operations](https://skmtc.dev/scalr/apis/scalr-iacp-api/llms.txt) - [OpenAPI document](https://skmtc.dev/scalr/apis/scalr-iacp-api/revisions/d3e1dc85657a?raw)