---
title: "Update Auth Settings"
method: PATCH
path: "/v3/portals/{portalId}/authentication-settings"
tags: ["Portal Auth Settings"]
---

# Update Auth Settings

`PATCH /v3/portals/{portalId}/authentication-settings`

Updates the developer authentication configuration for a portal. Developers can be allowed to login using basic auth (email & password) or use Single-Sign-On through an Identity Provider. Developers can be automatically assigned to teams by mapping claims from their IdP account.

## Request body

- PortalAuthenticationSettingsUpdateRequest — Properties to update a portal's developer auth settings.
  - `basic_auth_enabled` boolean — The organization has basic auth enabled.
  - `oidc_auth_enabled` boolean — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `saml_auth_enabled` boolean — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_team_mapping_enabled` boolean — IdP groups determine the Portal Teams a developer has. Replaced by idp_mapping_enabled.
  - `konnect_mapping_enabled` boolean — Whether a Konnect Identity Admin assigns teams to a developer.
  - `idp_mapping_enabled` boolean — Whether IdP groups determine the Konnect Portal teams a developer has.
  - `oidc_issuer` string — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_client_id` string — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_client_secret` string — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_scopes` string[] — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
  - `oidc_claim_mappings` object — Deprecated. Use the [Identity Provider API](https://developer.konghq.com/api/konnect/portal-management/v3/#/operations/update-portal-identity-provider) instead.
    - `name` string
    - `email` string
    - `groups` string

## Response `200`

Details about a portal's authentication settings.

- PortalAuthenticationSettingsResponse — The developer authentication settings for a portal.
  - `basic_auth_enabled` boolean, required — The portal has basic auth enabled or disabled.
  - `oidc_auth_enabled` boolean, required — The portal has OIDC enabled or disabled.
  - `saml_auth_enabled` boolean — A Konnect Identity Admin assigns teams to a developer.
  - `oidc_team_mapping_enabled` boolean, required — IdP groups determine the Portal Teams a developer has. Replaced by idp_mapping_enabled.
  - `idp_mapping_enabled` boolean — Whether IdP groups determine the Konnect Portal teams a developer has.
  - `konnect_mapping_enabled` boolean, required — A Konnect Identity Admin assigns teams to a developer.
  - `oidc_config` object — Configuration properties for an OpenID Connect Identity Provider.
    - `issuer` string, required
    - `client_id` string, required
    - `scopes` string[]
    - `claim_mappings` PortalClaimMappings — Mappings from a portal developer atribute to an Identity Provider claim.
      - `name` string
      - `email` string
      - `groups` string

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden

---

[API](https://skmtc.net/kong/apis/konnect-api-go-sdk.md) · [All operations](https://skmtc.net/kong/apis/konnect-api-go-sdk/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/kong/konnect-api-go-sdk/revisions/0aee8d012787/schema)