API ReferenceManagementProject Management
POST
/v1/mgmt/project/oidc/settings

Authorization

Descope Project ID and Management Key
AuthorizationBearer <token>

Project ID:Management Key as bearer token.

In: header

Request Body

application/json

dynamicRegistration?object

Keep this message synchronized with the matching one in ProjectService

cimdSettings?object
dynamicRegistrationTemplateId?string

The dynamic registration template registered clients take their defaults from. Empty clears it

poppyDomains?object

Represents a dynamically typed value which can be either null, a number, a string, a boolean, a recursive struct value, or a list of values.

errorRedirectUrl?string

Where a failed authorization request (inbound or federated app) sends the end user instead of the Descope-hosted error page. Used only while it is on the project's approved domains, if any are set. Empty clears it

Update the project OIDC settings, using a valid management key. Fields that are not sent keep their current value.

curl -X POST "https://api.descope.com/v1/mgmt/project/oidc/settings" \  -H "Content-Type: application/json" \  -d '{}'
{  "dynamicRegistration": {    "enabled": true,    "disableApprovedScopesAsDefault": true,    "flowId": "string"  },  "cimdSettings": {    "enabled": true,    "domainPolicies": {      "policies": [        {          "domainPattern": "string",          "enabled": true        }      ]    }  },  "dynamicRegistrationTemplateId": "string",  "poppyDomains": null,  "errorRedirectUrl": "string"}
/** * Project OIDC settings: the dynamic client registration and Client ID Metadata Document settings project-issuer *  resources take, the Poppy domains, and the error redirect URL. Patch semantics: omitted fields are left untouched *  and present fields are written. The submessage fields are replace-units that fully replace the stored value when *  present. The Get and Update responses use the same message with all fields populated. */export interface Response {/** * Keep this message synchronized with the matching one in ProjectService */dynamicRegistration?: {enabled?: booleandisableApprovedScopesAsDefault?: booleanflowId?: string}cimdSettings?: {enabled?: booleandomainPolicies?: CIMDDomainPolicies}/** * The dynamic registration template registered clients take their defaults from. Empty clears it */dynamicRegistrationTemplateId?: string/** * Personal Agent Protocol 3.2: the domains whose poppy.json names this project as issuer. A JSON array of strings; *  Value makes empty and absent distinct: null/absent = keep, [] = clear, values = set */poppyDomains?: {[k: string]: unknown}/** * Where a failed authorization request (inbound or federated app) sends the end user instead of the Descope-hosted *  error page. Used only while it is on the project's approved domains, if any are set. Empty clears it */errorRedirectUrl?: string}export interface CIMDDomainPolicies {/** * @maxItems 100 */policies?: CIMDDomainPolicy[]}export interface CIMDDomainPolicy {domainPattern: stringenabled?: boolean}
Was this helpful?