Skip to content

Update Sso Enforcement

PUT
/org/sso/enforcement

Decide whether SSO is the ONLY way in.

Enforcing it blocks every other sign-in method. That is the point of it, and it is also the single most effective way to lock an org out of its own account - enforce only once you have signed in through SSO yourself.

Authorizations

Parameters

Header Parameters

X-Target-Org-Id
Any of:
string

Request Body required

Whether SSO is the only way in, and on what terms.

require_sso: true blocks every other sign-in method. Do it only once you have signed in through SSO yourself.

object
allow_unverified_domain_members
Any of:
boolean
allowed_domains
Any of:
Array<string>
grant_ttl_minutes
Any of:
integer
require_sso

True makes SSO the only way in. Defaults to false, as the app’s does.

boolean

Responses

200

Successful Response

object
data
required

An open envelope for a settings object.

Open because an ontology concept and an SSO config both grow fields as the product does, and on a settings read a dropped field reads as “not configured” rather than “we did not tell you”.

object
key
additional properties
any
pagination
Any of:
object
has_next
required

Whether there are more pages

boolean
limit
required

Items per page

integer
next_cursor
Any of:
string
notes
Any of:
Array<string>
page
required

Current page number (1-indexed)

integer
total
required

Total number of items

integer
total_available
Any of:
integer
total_is_lower_bound
Any of:
boolean

422

Validation Error

object
detail
Array<object>
object
loc
required
Array
msg
required
string
type
required
string