---
title: "Update a SAML configuration."
method: PUT
path: "/v1/saml/identityProviders/{id}"
tags: ["samlConfigurationManagement"]
---

# Update a SAML configuration.

`PUT /v1/saml/identityProviders/{id}`

Update an existing SAML configuration in the organization.

## Path parameters

- `id` string, required

## Request body

- SamlIdentityProviderRequest
  - `spInitiatedLoginPath` string — This property has been deprecated and is no longer used.
  - `configurationName` string, required — Name of the SSO policy or another name used to describe the policy internally.
  - `issuer` string, required — The unique URL assigned to the organization by the SAML Identity Provider.
  - `spInitiatedLoginEnabled` boolean — True if Sumo Logic redirects users to your identity provider with a SAML AuthnRequest when signing in.
  - `authnRequestUrl` string — The URL that the identity provider has assigned for Sumo Logic to submit SAML authentication requests to the identity provider.
  - `x509cert1` string, required — The certificate is used to verify the signature in SAML assertions.
  - `x509cert2` string — The backup certificate used to verify the signature in SAML assertions when x509cert1 expires.
  - `x509cert3` string — The backup certificate used to verify the signature in SAML assertions when x509cert1 expires and x509cert2 is empty.
  - `onDemandProvisioningEnabled` OnDemandProvisioningInfo
    - `firstNameAttribute` string — First name attribute of the new user account.
    - `lastNameAttribute` string — Last name attribute of the new user account.
    - `onDemandProvisioningRoles` string[], required — Sumo Logic RBAC roles to be assigned when user accounts are provisioned.
  - `rolesAttribute` string — The role that Sumo Logic will assign to users when they sign in.
  - `logoutEnabled` boolean — True if users are redirected to a URL after signing out of Sumo Logic.
  - `logoutUrl` string — The URL that users will be redirected to after signing out of Sumo Logic.
  - `emailAttribute` string — The email address of the new user account.
  - `debugMode` boolean — True if additional details are included when a user fails to sign in.
  - `signAuthnRequest` boolean — True if Sumo Logic will send signed Authn requests to the identity provider.
  - `disableRequestedAuthnContext` boolean — True if Sumo Logic will include the RequestedAuthnContext element of the SAML AuthnRequests it sends to the identity provider.
  - `isRedirectBinding` boolean — True if the SAML binding is of HTTP Redirect type.

## Response `200`

The SAML configuration was successfully modified.

- SamlIdentityProvider
  - `spInitiatedLoginPath` string — This property has been deprecated and is no longer used.
  - `configurationName` string, required — Name of the SSO policy or another name used to describe the policy internally.
  - `issuer` string, required — The unique URL assigned to the organization by the SAML Identity Provider.
  - `spInitiatedLoginEnabled` boolean — True if Sumo Logic redirects users to your identity provider with a SAML AuthnRequest when signing in.
  - `authnRequestUrl` string — The URL that the identity provider has assigned for Sumo Logic to submit SAML authentication requests to the identity provider.
  - `x509cert1` string, required — The certificate is used to verify the signature in SAML assertions.
  - `x509cert2` string — The backup certificate used to verify the signature in SAML assertions when x509cert1 expires.
  - `x509cert3` string — The backup certificate used to verify the signature in SAML assertions when x509cert1 expires and x509cert2 is empty.
  - `onDemandProvisioningEnabled` OnDemandProvisioningInfo
    - `firstNameAttribute` string — First name attribute of the new user account.
    - `lastNameAttribute` string — Last name attribute of the new user account.
    - `onDemandProvisioningRoles` string[], required — Sumo Logic RBAC roles to be assigned when user accounts are provisioned.
  - `rolesAttribute` string — The role that Sumo Logic will assign to users when they sign in.
  - `logoutEnabled` boolean — True if users are redirected to a URL after signing out of Sumo Logic.
  - `logoutUrl` string — The URL that users will be redirected to after signing out of Sumo Logic.
  - `emailAttribute` string — The email address of the new user account.
  - `debugMode` boolean — True if additional details are included when a user fails to sign in.
  - `signAuthnRequest` boolean — True if Sumo Logic will send signed Authn requests to the identity provider.
  - `disableRequestedAuthnContext` boolean — True if Sumo Logic will include the RequestedAuthnContext element of the SAML AuthnRequests it sends to the identity provider.
  - `isRedirectBinding` boolean — True if the SAML binding is of HTTP Redirect type.
  - `certificate` string, required — Authentication Request Signing Certificate for the user.
  - `createdAt` string, date-time, required — Creation timestamp in UTC in [RFC3339](https://tools.ietf.org/html/rfc3339) format.
  - `createdBy` string, required — Identifier of the user who created the resource.
  - `modifiedAt` string, date-time, required — Last modification timestamp in UTC.
  - `modifiedBy` string, required — Identifier of the user who last modified the resource.
  - `id` string, required — Unique identifier of the SAML Identity Provider.
  - `assertionConsumerUrl` string — The URL on Sumo Logic where the IdP will redirect to with its authentication response.
  - `entityId` string — A unique identifier that is the intended audience of the SAML assertion.
  - `metadataUrl` string — The URL to fetch SAML metadata XML.

## Other responses

- `default` — Operation failed with an error.

---

[API](https://skmtc.net/sumologic/apis/sumo-logic-api.md) · [All operations](https://skmtc.net/sumologic/apis/sumo-logic-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sumologic/sumo-logic-api/versions/18a824df1e78/schema)