> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-findings-decoys-followup.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Update

> Update changes the tenant's SSO provider settings. Supply the settings
 object and an update mask listing the fields to change; only masked fields
 are applied. Editable paths: enabled, default_subject_type,
 default_assertion_lifetime, default_id_token_signed_response_alg.



## OpenAPI

````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/settings/sso
openapi: 3.1.0
info:
  description: The C1 API is a HTTP API for managing C1 resources.
  title: C1 API
  version: 0.1.0-alpha
servers:
  - description: The C1 API server for the current tenant.
    url: https://{tenantDomain}.conductor.one
    variables:
      tenantDomain:
        default: example
        description: The domain of the tenant to use for this request.
security:
  - bearerAuth: []
    oauth: []
paths:
  /api/v1/settings/sso:
    post:
      tags:
        - SSO
      summary: Update
      description: |-
        Update changes the tenant's SSO provider settings. Supply the settings
         object and an update mask listing the fields to change; only masked fields
         are applied. Editable paths: enabled, default_subject_type,
         default_assertion_lifetime, default_id_token_signed_response_alg.
      operationId: c1.api.sso.v1.SSOSettingsService.Update
      requestBody:
        content:
          application/json:
            schema:
              $ref: >-
                #/components/schemas/c1.api.sso.v1.SSOSettingsServiceUpdateRequest
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/c1.api.sso.v1.SSOSettingsServiceUpdateResponse
          description: SSOSettingsServiceUpdateResponse returns the updated settings.
components:
  schemas:
    c1.api.sso.v1.SSOSettingsServiceUpdateRequest:
      description: >-
        SSOSettingsServiceUpdateRequest updates the tenant's SSO provider
        settings.
      properties:
        settings:
          oneOf:
            - $ref: '#/components/schemas/c1.api.sso.v1.SSOSettings'
            - type: 'null'
        updateMask:
          type:
            - string
            - 'null'
      required:
        - settings
        - updateMask
      title: Sso Settings Service Update Request
      type: object
      x-speakeasy-name-override: SSOSettingsServiceUpdateRequest
    c1.api.sso.v1.SSOSettingsServiceUpdateResponse:
      description: SSOSettingsServiceUpdateResponse returns the updated settings.
      properties:
        settings:
          oneOf:
            - $ref: '#/components/schemas/c1.api.sso.v1.SSOSettings'
            - type: 'null'
      title: Sso Settings Service Update Response
      type: object
      x-speakeasy-name-override: SSOSettingsServiceUpdateResponse
    c1.api.sso.v1.SSOSettings:
      description: >-
        SSOSettings is the per-tenant configuration for ConductorOne acting as
        an SSO
         provider.
      properties:
        createdAt:
          format: date-time
          type:
            - string
            - 'null'
        defaultAssertionLifetime:
          format: duration
          type:
            - string
            - 'null'
        defaultIdTokenSignedResponseAlg:
          description: >-
            The id_token signing algorithm applied to OIDC applications that do
            not
             choose one. When unset, the server uses EdDSA.
          enum:
            - OIDC_SIGNING_ALGORITHM_UNSPECIFIED
            - OIDC_SIGNING_ALGORITHM_EDDSA
            - OIDC_SIGNING_ALGORITHM_ES256
            - OIDC_SIGNING_ALGORITHM_RS256
          type: string
          x-speakeasy-unknown-values: allow
        defaultSubjectType:
          description: >-
            The subject type materialized onto new SSO applications that do not
            choose
             one. Changing this default does not change existing applications. When
             unset, the server uses pairwise subjects.
          enum:
            - SSO_SUBJECT_TYPE_UNSPECIFIED
            - SSO_SUBJECT_TYPE_PAIRWISE
            - SSO_SUBJECT_TYPE_PUBLIC
          type: string
          x-speakeasy-unknown-values: allow
        enabled:
          description: >-
            Master switch for the SSO provider. ConductorOne also gates the
            feature
             behind an operator-controlled rollout flag; this is the tenant
             administrator's intent. Individual SSO applications can still be disabled
             one at a time.
          type: boolean
        updatedAt:
          format: date-time
          type:
            - string
            - 'null'
      title: Sso Settings
      type: object
      x-speakeasy-name-override: SSOSettings
  securitySchemes:
    bearerAuth:
      scheme: bearer
      type: http
    oauth:
      description: >-
        This API uses OAuth2 with the Client Credential flow.

        Client Credentials must be sent in the BODY, not the headers.

        For an example of how to implement this, refer to the
        [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187)
        function.
      flows:
        clientCredentials:
          scopes: {}
          tokenUrl: /auth/v1/token
      type: oauth2

````