PUT /api/v1/idps/{idpId}

Replaces an identity provider (IdP) integration by idpId

Servers

Path parameters

Name Type Required Description
idpId String Yes

id of IdP

Request headers

Name Type Required Description
Content-Type String Yes The media type of the request body.

Default value: "application/json"

Request body fields

Name Type Required Description
id String No

Unique key for the IdP

_links Object No

Specifies link relations (see Web Linking) available using the JSON Hypertext Application Language specification. This object is used for dynamic discovery of related resources and lifecycle operations.

created String No

Timestamp when the object was created

issuerMode String No

Indicates whether Okta uses the original Okta org domain URL or a custom domain URL in the request to the social IdP

Valid values:

  • "CUSTOM_URL"
  • "DYNAMIC"
  • "ORG_URL"

Default value: "DYNAMIC"

name String No

Unique name for the IdP

properties Object No

The properties in the IdP properties object vary depending on the IdP type

properties.aalValue String No

The authentication assurance level (AAL) value for the Login.gov IdP. See Add a Login.gov IdP. Applies to LOGINGOV and LOGINGOV_SANDBOX IdP types.

properties.additionalAmr[] Array No

The additional Assurance Methods References (AMR) values for Smart Card IdPs. Applies to X509 IdP type.

properties.inquiryTemplateId String Yes

The ID of the inquiry template from your Persona dashboard. The inquiry template always starts with itmpl. Applies to the IDV_PERSONA IdP type.

properties.ialValue String No

The type of identity verification (IAL) value for the Login.gov IdP. See Add a Login.gov IdP. Applies to LOGINGOV and LOGINGOV_SANDBOX IdP types.

properties.idvMetadata Object No

Metadata about the IDV vendor. Available only for IDV_STANDARD IdPs.

properties.idvMetadata.privacyPolicy String No

A URL that links to the privacy policy for the IDV vendor

properties.idvMetadata.termsOfUse String No

A URL that links to the terms of use for the IDV vendor

properties.idvMetadata.vendorDisplayName String No

The display name of the IDV vendor

protocol No

IdP-specific protocol settings for endpoints, bindings, and algorithms used to connect with the IdP and validate messages

type String No

The IdP object's type property identifies the social or enterprise IdP used for authentication. Each IdP uses a specific protocol, therefore the protocol object must correspond with the IdP type. If the protocol is OAuth 2.0-based, the protocol object's scopes property must also correspond with the scopes supported by the IdP type. For policy actions supported by each IdP type, see IdP type policy actions.

TypeDescriptionCorresponding protocolCorresponding protocol scopes
AMAZONAmazon as the IdPOpenID Connectprofile, profile:user_id
APPLEApple as the IdPOpenID Connectnames, email, openid
DISCORDDiscord as the IdPOAuth 2.0identify, email
FACEBOOKFacebook as the IdPOAuth 2.0public_profile, email
GITHUBGitHub as the IdPOAuth 2.0user
GITLABGitLab as the IdPOpenID Connectopenid, read_user, profile, email
GOOGLEGoogle as the IdPOpenID Connectopenid, email, profile
IDV_PERSONAPersona as the IDV IdPID verification
IDV_CLEARCLEAR Verified as the IDV IdPID verificationopenid, profile, identity_assurance
IDV_INCODEIncode as the IDV IdPID verificationopenid, profile, identity_assurance
IDV_STANDARDCustom IDV as the IDV IdPID verificationopenid, profile, identity_assurance
LINKEDINLinkedIn as the IdPOAuth 2.0r_emailaddress, r_liteprofile
LOGINGOVLogin.gov as the IdPOpenID Connectemail, profile, profile:name
LOGINGOV_SANDBOXLogin.gov's identity sandbox as the IdPOpenID Connectemail, profile, profile:name
MICROSOFTMicrosoft Enterprise SSO as the IdPOpenID Connectopenid, email, profile, https://graph.microsoft.com/User.Read
OIDCIdP that supports OpenID ConnectOpenID Connectopenid, email, profile
PAYPALPaypal as the IdPOpenID Connectopenid, email, profile
PAYPAL_SANDBOXPaypal Sandbox as the IdPOpenID Connectopenid, email, profile
SALESFORCESalesForce as the IdPOAuth 2.0id, email, profile
SAML2Enterprise IdP that supports the SAML 2.0 Web Browser SSO ProfileSAML 2.0
SPOTIFYSpotify as the IdPOpenID Connectuser-read-email, user-read-private
X509Smart Card IdPMutual TLS
XEROXero as the IdPOpenID Connectopenid, profile, email
YAHOOYahoo as the IdPOpenID Connectopenid, profile, email
YAHOOJPYahoo Japan as the IdPOpenID Connectopenid, profile, email
OKTA_INTEGRATIONIdP that supports the OpenID Connect Org2Org IdPOpenID Connectopenid, email, profile

Valid values:

  • "APPLE"
  • "PAYPAL_SANDBOX"
  • "OIDC"
  • "YAHOO"
  • "FACEBOOK"
  • "SAML2"
  • "LINKEDIN"
  • "MICROSOFT"
  • "LOGINGOV_SANDBOX"
  • "GITHUB"
  • "IDV_STANDARD"
  • "XERO"
  • "GOOGLE"
  • "IDV_CLEAR"
  • "X509"
  • "SPOTIFY"
  • "YAHOOJP"
  • "GITLAB"
  • "IDV_PERSONA"
  • "OKTA_INTEGRATION"
  • "IDV_INCODE"
  • "AMAZON"
  • "LOGINGOV"
  • "PAYPAL"
  • "SALESFORCE"
  • "DISCORD"
status String No

Valid values:

  • "ACTIVE"
  • "INACTIVE"
lastUpdated String No

Timestamp when the object was last updated

How to start integrating

  1. Add HTTP Task to your workflow definition.
  2. Search for the API you want to integrate with and click on the name.
    • This loads the API reference documentation and prepares the Http request settings.
  3. Click Test request to test run your request to the API and see the API's response.