Sign in

v18

latestOpenAPI 3.0.0raw.githubusercontent.com2026-08-014211,6201.8 MB
gitpod.v1.OrganizationService

UpdateSSOConfiguration

Updates SSO provider settings and authentication rules.

Use this method to:

  • Rotate client credentials
  • Update provider endpoints
  • Modify claim mappings
  • Change authentication policies
  • Toggle SSO enforcement

Examples

  • Update credentials:

    Rotates client ID and secret.

    ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
clientId: "new-client-id"
clientSecret: "new-client-secret"

  • Update provider status:

    Activates or deactivates SSO provider.

    ssoConfigurationId: "d2c94c27-3b76-4a42-b88c-95a85e392c68"
state: SSO_CONFIGURATION_STATE_ACTIVE
post/gitpod.v1.OrganizationService/UpdateSSOConfiguration

Request body

claimsobject

claims are key/value pairs that defines a mapping of claims issued by the IdP.

claimsExpressionstring nullable

claims_expression is a CEL expression evaluated against OIDC token claims during login. When set, the expression must evaluate to true for the login to succeed. When present with an empty string, the expression is cleared.

clientIdstring nullable

client_id is the client ID of the SSO provider

clientSecretstring nullable

client_secret is the client secret of the SSO provider

displayNamestring nullable
emailDomainstring nullable
emailDomainsstring[]
issuerUrlstring uri nullable

issuer_url is the URL of the IdP issuer

ssoConfigurationIdstring uuid required

sso_configuration_id is the ID of the SSO configuration to update

state'SSO_CONFIGURATION_STATE_UNSPECIFIED' | 'SSO_CONFIGURATION_STATE_INACTIVE' | 'SSO_CONFIGURATION_STATE_ACTIVE'

Response

Success

GitpodV1UpdateSSOConfigurationResponse required