Require members on this provider's domain to sign in through it
Enabling sends every address on the provider’s domain to it, leaving those members no other way in. Refused with a 409 until the domain is verified. Disabling needs nothing, so the way out is always open.
Authorizations
The access token received from the authorization server in the OAuth 2.0 flow.
Path Parameters
Unique identifier for a specific organization
[a-zA-Z0-9_-~:]+Alias identifying one of the organization's SSO identity providers
Body
Whether members on a provider's domain must sign in through it.
Enable to send every address on the domain to this provider. Disable to let members sign in however they could before.
Response
Identity provider after the change
An identity provider serving one of the organization's verified domains. The client secret is write-only and is never returned.
Stable identifier for this provider, used in its own endpoints.
Which identity provider this is. google pins the login to a Google Workspace domain and microsoft to a single Entra tenant, taken from the issuer; oidc is the fallback for anything else that speaks OpenID Connect.
google, microsoft, oidc Name members see for this provider when signing in.
The verified email domain this provider serves.
Whether members on this domain are sent to this provider automatically, leaving no other way in. Registering a provider does not set this; it is enabled separately once a sign-in through it has worked.
OAuth client ID the organization registered with the provider.
OIDC issuer URL, without the /.well-known suffix.