---
title: "PATCH /api/v1/sso/config"
method: PATCH
path: "/api/v1/sso/config"
tags: ["SAML SSO"]
---

# PATCH /api/v1/sso/config

`PATCH /api/v1/sso/config`

Update SAML config

## Request body

- object
  - `authProvider` 'okta-saml' | 'azure-saml' | 'jumpcloud-saml' | 'google-saml' | 'keycloak-saml' | 'auth0-saml' — Authentication provider to use for SAML authentication.
  - `isActive` boolean — Whether to enable or disable this SAML configuration.
  - `entryPoint` string — The entry point for the SAML authentication. This is the URL that the user will be redirected to after they have authenticated with the SAML provider.
  - `issuer` string — The SAML provider issuer URL or entity ID.
  - `cert` string — The certificate to use for SAML authentication.
  - `enableGroupSync` boolean — Whether to enable automatic synchronization of group memberships from the SAML provider to Infisical groups.
  - `organizationId` string, required — The ID of the organization to update the SAML config for.

## Response `200`

Default Response

- object
  - `id` string, uuid, required
  - `orgId` string, uuid, required
  - `isActive` boolean, required
  - `lastUsed` string, date-time, nullable
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required
  - `authProvider` string, required

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/885aef3e6c11/schema)