---
title: "POST /v1/inboundOidcSsoProfiles"
method: POST
path: "/v1/inboundOidcSsoProfiles"
tags: ["inboundOidcSsoProfiles"]
---

# POST /v1/inboundOidcSsoProfiles

`POST /v1/inboundOidcSsoProfiles`

Creates an InboundOidcSsoProfile for a customer. When the target customer has enabled [Multi-party approval for sensitive actions](https://support.google.com/a/answer/13790448), the `Operation` in the response will have `"done": false`, it will not have a response, and the metadata will have `"state": "awaiting-multi-party-approval"`.

## Request body

- InboundOidcSsoProfile — An [OIDC](https://openid.net/developers/how-connect-works/) federation between a Google enterprise customer and an OIDC identity provider.
  - `name` string — Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the OIDC SSO profile.
  - `displayName` string — Human-readable name of the OIDC SSO profile.
  - `idpConfig` OidcIdpConfig — OIDC IDP (identity provider) configuration.
    - `issuerUri` string — Required. The Issuer identifier for the IdP. Must be a URL. The discovery URL will be derived from this as described in Section 4 of [the OIDC specification](https://openid.net/specs/openid-connect-discovery-1_0.html).
    - `changePasswordUri` string — The **Change Password URL** of the identity provider. Users will be sent to this URL when changing their passwords at `myaccount.google.com`. This takes precedence over the change password URL configured at customer-level. Must use `HTTPS`.
  - `customer` string — Immutable. The customer. For example: `customers/C0123abc`.
  - `rpConfig` OidcRpConfig — OIDC RP (relying party) configuration.
    - `clientId` string — OAuth2 client ID for OIDC.
    - `clientSecret` string — Input only. OAuth2 client secret for OIDC.
    - `redirectUris` string[] — Output only. The URL(s) that this client may use in authentication requests.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/cloudidentity.md) · [All operations](https://skmtc.net/google/apis/cloudidentity/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/cloudidentity/revisions/179b4eeed5a2/schema)