Patch third party application | API Reference

POST

/v1/mgmt/thirdparty/app/patch

Authorization

Descope Project ID and Management Key

AuthorizationBearer <token>

Project ID:Management Key as bearer token.

In: header

Request Body

application/json

id?string

name?string

description?string

logo?string

loginPageUrl?string

approvedCallbackUrls?array<string>

string

permissionsScopes?array<managementv1.ApplicationScope>

attributesScopes?array<managementv1.ApplicationScope>

logoUrl?string

jwtBearerSettings?object

string backChannelLogoutUrl = 10 [(validate).string = {url: true, optional: true}];

sessionSettings?object

audienceWhitelist?array<string>

string

forceAddAllAuthorizationInfo?boolean

connectionsScopes?array<managementv1.ApplicationScope>

defaultAudience?string

customAttributes?object

Custom attributes as key-value pairs. Keys must be strings; values can be strings, numbers, booleans, or arrays.

Example

{
  "attribute-key": "attribute-value"
}

cibaSettings?object

jarSettings?object

JAR (JWT-Secured Authorization Request, RFC 9101) settings for Third Party Applications

allowedTenants?array<string>

string

clientType?string

clientCredentialsDisabled?boolean

jwtBearerDisabled?boolean

cibaEnabled?boolean

forcePkce?boolean

allowPartialScopes?boolean

scopeClaimMapping?array<AppScopeClaimMappingEntry>

scopeClaimMapping replaces the stored mapping when provided; when absent the existing mapping is preserved. Consumed by PatchThirdPartyApplicationV2; v1 preserves the legacy attributesScopes.

mtlsClientAuthMethods?object

forceDpop?boolean

rarSettings?object

idJagTargetClients?object

idJagTargetClients replaces the stored mapping when provided. An absent field preserves it, and so does an empty map: a protobuf map has no presence, so it reaches the service as nil after the gRPC hop. Clear the mapping through the full update, which always writes the field.

Patch a third party application, using a valid management key.

curl -X POST "https://api.descope.com/v1/mgmt/thirdparty/app/patch" \  -H "Content-Type: application/json" \  -d '{}'

Was this helpful?