v1

latestOpenAPI 3.0.0MIT2026-07-264001,540832.7 KB

Organizations

Upsert Okta SSO configuration

Creates or updates the current organization's Okta SSO configuration. Omit oauth2ClientSecret to preserve the previously stored secret on updates.

put/api/v1/org/sso/okta

Request body

extraScopesstring nullable

authorizationServerIdstring nullable

oauth2ClientSecretstring

When omitted on update, the stored secret is preserved. Required on create.

oauth2ClientIdstring required

oktaDomainstring required

oauth2Issuerstring required

enabledboolean

When false the method is hidden from precheck even if discovery would match.

overrideEmailDomainsboolean

When true, the method's own emailDomains list governs discovery. When false, the org's allowed_email_domains is used instead.

emailDomainsstring[]

Strict whitelist (only consulted when overrideEmailDomains is true).

allowPasswordboolean

Controls whether email+password sign-in is shown alongside this method when it matches a user. When multiple matching SSO methods disagree, lenient rule applies (ANY method that allows → show password).

Response

status'ok' required