---
title: "UpdateSSOConfiguration"
method: POST
path: "/gitpod.v1.OrganizationService/UpdateSSOConfiguration"
tags: ["gitpod.v1.OrganizationService"]
---

# UpdateSSOConfiguration

`POST /gitpod.v1.OrganizationService/UpdateSSOConfiguration`

Updates SSO provider settings and authentication rules.

 Use this method to:
 - Rotate client credentials
 - Update provider endpoints
 - Modify claim mappings
 - Change authentication policies
 - Toggle SSO enforcement

 ### Examples

 - Update credentials:

   Rotates client ID and secret.

   ```yaml
   ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
   clientId: "new-client-id"
   clientSecret: "new-client-secret"
   ```

 - Update provider status:

   Activates or deactivates SSO provider.

   ```yaml
   ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
   state: SSO_CONFIGURATION_STATE_ACTIVE
   ```

## Request body

- GitpodV1UpdateSSOConfigurationRequest
  - `additionalScopes` GitpodV1AdditionalScopesUpdate — AdditionalScopesUpdate wraps a list of OIDC scopes so that the update request can distinguish "not changing scopes" (field absent) from "clearing all scopes" (field present, empty list).
    - `scopes` string[]
  - `claims` object — claims are key/value pairs that defines a mapping of claims issued by the IdP.
  - `claimsExpression` string, nullable — claims_expression is a CEL expression evaluated against OIDC token claims during login. When set, the expression must evaluate to true for the login to succeed. When present with an empty string, the expression is cleared.
  - `clientId` string, nullable — client_id is the client ID of the SSO provider
  - `clientSecret` string, nullable — client_secret is the client secret of the SSO provider
  - `displayName` string, nullable
  - `emailDomain` string, nullable
  - `emailDomains` string[]
  - `issuerUrl` string, uri, nullable — issuer_url is the URL of the IdP issuer
  - `ssoConfigurationId` string, uuid, required — sso_configuration_id is the ID of the SSO configuration to update
  - `state` 'SSO_CONFIGURATION_STATE_UNSPECIFIED' | 'SSO_CONFIGURATION_STATE_INACTIVE' | 'SSO_CONFIGURATION_STATE_ACTIVE'

## Response `200`

Success

- GitpodV1UpdateSSOConfigurationResponse

## Other responses

- `default` — Error

---

[API](https://skmtc.net/gitpod-io/apis/gitpod-v1.md) · [All operations](https://skmtc.net/gitpod-io/apis/gitpod-v1/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gitpod-io/gitpod-v1/revisions/44d50c2ac284/schema)