---
title: "POST /sso.update"
method: POST
path: "/sso.update"
tags: ["sso"]
---

# POST /sso.update

`POST /sso.update`

## Request body

- object
  - `providerId` string, required
  - `issuer` string, required
  - `domains` string[], required
  - `oidcConfig` object
    - `clientId` string, required
    - `clientSecret` string, required
    - `authorizationEndpoint` string
    - `tokenEndpoint` string
    - `userInfoEndpoint` string
    - `tokenEndpointAuthentication` 'client_secret_post' | 'client_secret_basic'
    - `jwksEndpoint` string
    - `discoveryEndpoint` string
    - `skipDiscovery` boolean
    - `scopes` string[]
    - `pkce` boolean
    - `mapping` object
      - `id` string, required
      - `email` string, required
      - `emailVerified` string
      - `name` string, required
      - `image` string
      - `extraFields` object
  - `samlConfig` object
    - `entryPoint` string, required
    - `cert` string, required
    - `callbackUrl` string, required
    - `audience` string
    - `idpMetadata` object
      - `metadata` string
      - `entityID` string
      - `cert` string
      - `privateKey` string
      - `privateKeyPass` string
      - `isAssertionEncrypted` boolean
      - `encPrivateKey` string
      - `encPrivateKeyPass` string
      - `singleSignOnService` object[]
        - `Binding` string, required
        - `Location` string, required
    - `spMetadata` object, required
      - `metadata` string
      - `entityID` string
      - `binding` string
      - `privateKey` string
      - `privateKeyPass` string
      - `isAssertionEncrypted` boolean
      - `encPrivateKey` string
      - `encPrivateKeyPass` string
    - `wantAssertionsSigned` boolean
    - `authnRequestsSigned` boolean
    - `signatureAlgorithm` string
    - `digestAlgorithm` string
    - `identifierFormat` string
    - `privateKey` string
    - `decryptionPvk` string
    - `additionalParams` object
    - `mapping` object
      - `id` string, required
      - `email` string, required
      - `emailVerified` string
      - `name` string, required
      - `firstName` string
      - `lastName` string
      - `extraFields` object
  - `organizationId` string
  - `overrideUserInfo` boolean

## Response `200`

Successful response

- object

## Other responses

- `400` — Invalid input data
- `401` — Authorization not provided
- `403` — Insufficient access
- `500` — Internal server error

---

[API](https://skmtc.net/dokploy/apis/dokploy-api.md) · [All operations](https://skmtc.net/dokploy/apis/dokploy-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/dokploy/dokploy-api/versions/0c21b2084cd6/schema)