POST
/v1/mgmt/sso/idp/app/oidc/update

Authorization

Descope Project ID and Management Key
AuthorizationBearer <token>

Project ID:Management Key as bearer token.

In: header

Request Body

application/json

id?string
name?string
description?string
enabled?boolean
logo?string
loginPageUrl?string
claims?array<string>
string
forceAuthentication?boolean
backChannelLogoutUrl?string
jwtBearerSettings?object
customIdpInitiatedLoginPageUrl?string
sessionSettings?object
clientType?string
approvedRedirectUrls?array<string>
string
authorizationCodeDisabled?boolean
clientCredentialsDisabled?boolean
refreshTokenDisabled?boolean
jwtBearerDisabled?boolean
deviceCodeDisabled?boolean
forcePkce?boolean
clientId?string

Optional: import an existing OIDC client. Both are accepted on create only (immutable afterward); empty means the client_id is computed and the client_secret is generated server-side. The client_id must be unique within the project. The client_secret is returned once on the create response.

clientSecret?string
defaultAudience?string

Default audience policy for issued tokens. Applies only to modern apps (non-empty clientType): 'projectId', 'clientId', or empty (both). Legacy apps are unaffected. Mirrors third-party apps.

trustedAppIds?array<string>
string

trustedAppIds lists sibling SSO apps whose roles are included in this app's JWT under the trustedApps claim at login time. Apps where the user has no roles are silently omitted.

Update OIDC Application within a project

This endpoint updates an OIDC Application within your Descope project.

See Also

curl -X POST "https://api.descope.com/v1/mgmt/sso/idp/app/oidc/update" \  -H "Content-Type: application/json" \  -d '{}'
Was this helpful?