create/update the account's OIDC connection + group→role map.
PUT
End-user session operationId: put_connection/v1/dashboard/sso/connection Authorization
Called from the browser with the publishable application id (x-application-id); the access token lives in memory.
Request body · required
allow_jitbooleanclient_idstring requiredclient_secretstringPlaintext client secret; stored encrypted. Omit to keep the existing secret.
default_rolestringemail_claimstringenabledbooleangroup_mappingsSsoGroupMappingBody[]groups_claimstringissuerstring requiredname_claimstringscopesstring[]
Responses
200 Connection saved
{
"data": {},
"error": {
"code": "string",
"message": "string"
},
"meta": {
"timestamp": "string"
},
"success": false
} 403 Insufficient role
422 Invalid input
Request
curl -X PUT "https://api.identrahq.com/v1/dashboard/sso/connection" \
-H "Content-Type: application/json" \
-d '{
"allow_jit": false,
"client_id": "string",
"client_secret": "string",
"default_role": "string",
"email_claim": "string",
"enabled": false,
"group_mappings": [
{
"idp_group": "string",
"role": "string"
}
],
"groups_claim": "string",
"issuer": "https://login.microsoftonline.com/<tenant>/v2.0",
"name_claim": "string",
"scopes": [
"string"
]
}'Try it
live requestPUT
https://api.identrahq.com/v1/dashboard/sso/connection