---
title: "Update an oidc configuration"
method: PATCH
path: "/v3/accounts/{id}/oidc-configuration"
tags: ["OidcConfigurations"]
---

# Update an oidc configuration

`PATCH /v3/accounts/{id}/oidc-configuration`

Updates the specified oidc configuration by setting the values of the parameters passed. Any parameters not provided will be left unchanged.

## Path parameters

- `id` string, required

## Request body

- OidcConfigurationUpdateRequestModel
  - `issuerUrl` string, uri, nullable — OIDC Issuer URL.
  - `clientId` string, nullable — OIDC Client ID.
  - `additionalClientIds` string[], nullable — Additional Client IDs that are authorized.
  - `defaultRole` string, nullable — Default role assigned to the new users.
  - `autoProvisionUsers` boolean, nullable — If enabled, a new User in Cryptlex is automatically created at first sign-in.
  - `roleMappings` OidcRoleMappingRequestModel[], nullable — Role mappings.
    - `identityProviderRole` string, required — Identity provider role.
    - `serviceProviderRole` string, required — Service provider role.
  - `enabled` boolean, nullable — Enable or disable the OIDC SSO.
  - `claimMapping` OidcClaimMappingRequestModel
    - `email` string[], nullable — JWT claim to map to the User email. User will not be created if an email is not found. By default, the email is mapped to 'email' property in the [UserInfo response](https://openid.net/specs/openid-connect-core-1_0.html#UserInfoResponse).
    - `name` string[], nullable — JWT claim to map to the User name. Name will be set to 'External User' if not found.
    - `role` string[], nullable — JWT claim to map to the User role. Default role will used if not found.

## Response `200`

OK

- OidcConfigurationDto
  - `id` string, required
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required
  - `issuerUrl` string, required
  - `clientId` string, required
  - `additionalClientIds` string[], required
  - `enabled` boolean, required
  - `defaultRole` string, required
  - `autoProvisionUsers` boolean, required
  - `roleMappings` OidcRoleMappingDto[], required
    - `id` string, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `serviceProviderRole` string, required
    - `identityProviderRole` string, required
  - `claimMapping` OidcClaimMappingDto, required
    - `name` string[], required
    - `email` string[], required
    - `role` string[], required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `429` — Too Many Requests
- `500` — Server Error

---

[API](https://skmtc.net/cryptlex/apis/cryptlex-web-api.md) · [All operations](https://skmtc.net/cryptlex/apis/cryptlex-web-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cryptlex/cryptlex-web-api/revisions/ec1259c12475/schema)