---
title: "POST /networks/{networkId}/oidc/save"
method: POST
path: "/networks/{networkId}/oidc/save"
---

# POST /networks/{networkId}/oidc/save

`POST /networks/{networkId}/oidc/save`

Registers and saves an OpenID Connect (OIDC) configuration for a Wickr network, enabling Single Sign-On (SSO) authentication through an identity provider.

## Path parameters

- `networkId` string, required

## Request body

- object
  - `companyId` string, required — Custom identifier your end users will use to sign in with SSO.
  - `customUsername` string — <p>A custom field mapping to extract the username from the OIDC token (optional). </p> <note> <p>The customUsername is only required if you use something other than email as the username field.</p> </note>
  - `extraAuthParams` string — Additional authentication parameters to include in the OIDC flow (optional).
  - `issuer` string, required — The issuer URL of the OIDC provider (e.g., 'https://login.example.com').
  - `scopes` string, required — The OAuth scopes to request from the OIDC provider (e.g., 'openid profile email').
  - `secret` string, password — The client secret for authenticating with the OIDC provider (optional).
  - `ssoTokenBufferMinutes` integer — The buffer time in minutes before the SSO token expires to refresh it (optional).
  - `userId` string — Unique identifier provided by your identity provider to authenticate the access request. Also referred to as clientID.

## Response `200`

Success

- RegisterOidcConfigResponse
  - `applicationName` string — The name of the registered OIDC application.
  - `clientId` string — The OAuth client ID assigned to the application.
  - `companyId` string, required — Custom identifier your end users will use to sign in with SSO.
  - `scopes` string, required — The OAuth scopes configured for the application.
  - `issuer` string, required — The issuer URL of the OIDC provider.
  - `clientSecret` string, password — The OAuth client secret for the application.
  - `secret` string, password — The client secret for authenticating with the OIDC provider.
  - `redirectUrl` string — The redirect URL configured for the OAuth flow.
  - `userId` string — The claim field being used as the user identifier.
  - `customUsername` string — The custom field mapping used for extracting the username.
  - `caCertificate` string — The CA certificate used for secure communication with the OIDC provider.
  - `applicationId` integer — The unique identifier for the registered OIDC application.
  - `ssoTokenBufferMinutes` integer — The buffer time in minutes before the SSO token expires.
  - `extraAuthParams` string — The additional authentication parameters configured for the OIDC flow.

## Other responses

- `480` — ValidationError
- `481` — BadRequestError
- `482` — ResourceNotFoundError
- `483` — ForbiddenError
- `484` — UnauthorizedError
- `485` — InternalServerError
- `486` — RateLimitError

---

[API](https://skmtc.net/aws/apis/wickr.md) · [All operations](https://skmtc.net/aws/apis/wickr/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/wickr/revisions/71d396c2af63/schema)