Update third party application | API Reference

POST

/v1/mgmt/thirdparty/app/update

Authorization

Descope Project ID and Management Key

AuthorizationBearer <token>

Project ID:Management Key as bearer token.

In: header

Request Body

application/json

id?string

name?string

description?string

logo?string

loginPageUrl?string

approvedCallbackUrls?array<string>

string

permissionsScopes?array<managementv1.ApplicationScope>

attributesScopes?array<managementv1.ApplicationScope>

logoUrl?string

jwtBearerSettings?object

string backChannelLogoutUrl = 10 [(validate).string = {url: true, optional: true}];

sessionSettings?object

audienceWhitelist?array<string>

string

forceAddAllAuthorizationInfo?boolean

connectionsScopes?array<managementv1.ApplicationScope>

defaultAudience?string

customAttributes?object

Custom attributes as key-value pairs. Keys must be strings; values can be strings, numbers, booleans, or arrays.

Example

{
  "attribute-key": "attribute-value"
}

cibaSettings?object

jarSettings?object

JAR (JWT-Secured Authorization Request, RFC 9101) settings for Third Party Applications

allowedTenants?array<string>

string

clientType?string

clientCredentialsDisabled?boolean

jwtBearerDisabled?boolean

cibaEnabled?boolean

forcePkce?boolean

allowPartialScopes?boolean

scopeClaimMapping?array<AppScopeClaimMappingEntry>

scopeClaimMapping is the structured scope→claim model. Consumed by UpdateThirdPartyApplicationV2 (v2 write-replace: attributesScopes is ignored/cleared). v1 ignores this field.

mtlsClientAuthMethods?object

forceDpop?boolean

rarSettings?object

idJagTargetClients?object

clientAuthMethod?string

clientAuthMethod: "clientSecret" (default when empty), "privateKeyJwt" (only clientAssertions are accepted) or "workloadIdentity" (only workloadClientAssertions are accepted).

clientAssertions?array<ThirdPartyApplicationClientAssertion>

clientAssertions are the private_key_jwt trust entries (JWKS URL or PEM public key per entry).

workloadClientAssertions?array<ThirdPartyApplicationWorkloadClientAssertion>

workloadClientAssertions are the workload identity trust entries (SPIFFE trust domain or OIDC issuer per entry).

Update a third party application, using a valid management key.

curl -X POST "https://api.descope.com/v1/mgmt/thirdparty/app/update" \  -H "Content-Type: application/json" \  -d '{}'

Was this helpful?