---
title: "Update"
method: POST
path: "/api/v1/auth-configs/{id}"
tags: ["Auth Config"]
---

# Update

`POST /api/v1/auth-configs/{id}`

Update modifies an existing authentication provider configuration. Use the update mask to specify which fields to change.

## Path parameters

- `id` string, required — The id field.

## Request body

- C1ApiAuthConfigV1TenantAuthConfigServiceUpdateRequestInput — The TenantAuthConfigServiceUpdateRequest message.
  - `authConfig` C1ApiAuthConfigV1TenantAuthConfig — The TenantAuthConfig message. This message contains a oneof named provider_config. Only a single field of the following list may be set at a time: - google - microsoft - okta - onelogin - jumpcloud - pingone - oidc - c1Local
    - `bootstrapDomains` string[], nullable — Bootstrap routing: email domains that route unknown users to this config.
    - `c1Local` C1ApiAuthConfigV1AuthConfigC1Local, nullable — The AuthConfigC1Local message.
      - `delegatedVerifiers` string[], nullable — The delegatedVerifiers field.
    - `createdAt` string, date-time
    - `deprecationDeadline` string, date-time
    - `deprecationMessage` string — User-visible message shown when status=DEPRECATED.
    - `displayName` string — The displayName field.
    - `google` C1ApiAuthConfigV1AuthConfigGoogle, nullable — The AuthConfigGoogle message.
      - `hostedDomains` string[], nullable — The hostedDomains field.
    - `id` string — The id field.
    - `isDefaultBootstrap` boolean — The isDefaultBootstrap field.
    - `jumpcloud` C1ApiAuthConfigV1AuthConfigJumpCloud, nullable — The AuthConfigJumpCloud message.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — Write-only. Never returned in get/list.
    - `microsoft` C1ApiAuthConfigV1AuthConfigMicrosoft, nullable — The AuthConfigMicrosoft message.
      - `tenantIds` string[], nullable — The tenantIds field.
    - `oidc` C1ApiAuthConfigV1AuthConfigOIDC, nullable — The AuthConfigOIDC message.
      - `exactMatchClaims` object — The exactMatchClaims field.
      - `issuerId` string — The issuerId field.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — The oidcClientSecret field.
      - `scopes` string[], nullable — The scopes field.
    - `okta` C1ApiAuthConfigV1AuthConfigOkta, nullable — The AuthConfigOkta message.
      - `domain` string — The domain field.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — Write-only. Never returned in get/list.
    - `onelogin` C1ApiAuthConfigV1AuthConfigOneLogin, nullable — The AuthConfigOneLogin message.
      - `domain` string — The domain field.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — The oidcClientSecret field.
    - `pingone` C1ApiAuthConfigV1AuthConfigPingOne, nullable — The AuthConfigPingOne message.
      - `environmentId` string — The environmentId field.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — The oidcClientSecret field.
    - `providerType` 'AUTH_CONFIG_PROVIDER_TYPE_UNSPECIFIED' | 'AUTH_CONFIG_PROVIDER_TYPE_GOOGLE' | 'AUTH_CONFIG_PROVIDER_TYPE_MICROSOFT' | 'AUTH_CONFIG_PROVIDER_TYPE_OKTA' | 'AUTH_CONFIG_PROVIDER_TYPE_ONELOGIN' | 'AUTH_CONFIG_PROVIDER_TYPE_JUMPCLOUD' | 'AUTH_CONFIG_PROVIDER_TYPE_PINGONE' | 'AUTH_CONFIG_PROVIDER_TYPE_OIDC' | 'AUTH_CONFIG_PROVIDER_TYPE_C1_LOCAL' — Provider type (read-only after creation — provider config determines type).
    - `status` 'AUTH_CONFIG_STATUS_UNSPECIFIED' | 'AUTH_CONFIG_STATUS_ACTIVE' | 'AUTH_CONFIG_STATUS_DEPRECATED' | 'AUTH_CONFIG_STATUS_DISABLED' — The status field.
    - `updatedAt` string, date-time
  - `updateMask` string, nullable

## Response `200`

Successful response

- C1ApiAuthConfigV1TenantAuthConfigServiceUpdateResponse — The TenantAuthConfigServiceUpdateResponse message.
  - `authConfig` C1ApiAuthConfigV1TenantAuthConfig — The TenantAuthConfig message. This message contains a oneof named provider_config. Only a single field of the following list may be set at a time: - google - microsoft - okta - onelogin - jumpcloud - pingone - oidc - c1Local
    - `bootstrapDomains` string[], nullable — Bootstrap routing: email domains that route unknown users to this config.
    - `c1Local` C1ApiAuthConfigV1AuthConfigC1Local, nullable — The AuthConfigC1Local message.
      - `delegatedVerifiers` string[], nullable — The delegatedVerifiers field.
    - `createdAt` string, date-time
    - `deprecationDeadline` string, date-time
    - `deprecationMessage` string — User-visible message shown when status=DEPRECATED.
    - `displayName` string — The displayName field.
    - `google` C1ApiAuthConfigV1AuthConfigGoogle, nullable — The AuthConfigGoogle message.
      - `hostedDomains` string[], nullable — The hostedDomains field.
    - `id` string — The id field.
    - `isDefaultBootstrap` boolean — The isDefaultBootstrap field.
    - `jumpcloud` C1ApiAuthConfigV1AuthConfigJumpCloud, nullable — The AuthConfigJumpCloud message.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — Write-only. Never returned in get/list.
    - `microsoft` C1ApiAuthConfigV1AuthConfigMicrosoft, nullable — The AuthConfigMicrosoft message.
      - `tenantIds` string[], nullable — The tenantIds field.
    - `oidc` C1ApiAuthConfigV1AuthConfigOIDC, nullable — The AuthConfigOIDC message.
      - `exactMatchClaims` object — The exactMatchClaims field.
      - `issuerId` string — The issuerId field.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — The oidcClientSecret field.
      - `scopes` string[], nullable — The scopes field.
    - `okta` C1ApiAuthConfigV1AuthConfigOkta, nullable — The AuthConfigOkta message.
      - `domain` string — The domain field.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — Write-only. Never returned in get/list.
    - `onelogin` C1ApiAuthConfigV1AuthConfigOneLogin, nullable — The AuthConfigOneLogin message.
      - `domain` string — The domain field.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — The oidcClientSecret field.
    - `pingone` C1ApiAuthConfigV1AuthConfigPingOne, nullable — The AuthConfigPingOne message.
      - `environmentId` string — The environmentId field.
      - `oidcClientId` string — The oidcClientId field.
      - `oidcClientSecret` string — The oidcClientSecret field.
    - `providerType` 'AUTH_CONFIG_PROVIDER_TYPE_UNSPECIFIED' | 'AUTH_CONFIG_PROVIDER_TYPE_GOOGLE' | 'AUTH_CONFIG_PROVIDER_TYPE_MICROSOFT' | 'AUTH_CONFIG_PROVIDER_TYPE_OKTA' | 'AUTH_CONFIG_PROVIDER_TYPE_ONELOGIN' | 'AUTH_CONFIG_PROVIDER_TYPE_JUMPCLOUD' | 'AUTH_CONFIG_PROVIDER_TYPE_PINGONE' | 'AUTH_CONFIG_PROVIDER_TYPE_OIDC' | 'AUTH_CONFIG_PROVIDER_TYPE_C1_LOCAL' — Provider type (read-only after creation — provider config determines type).
    - `status` 'AUTH_CONFIG_STATUS_UNSPECIFIED' | 'AUTH_CONFIG_STATUS_ACTIVE' | 'AUTH_CONFIG_STATUS_DEPRECATED' | 'AUTH_CONFIG_STATUS_DISABLED' — The status field.
    - `updatedAt` string, date-time

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)