Skip to main content

CreateOrUpdateSSOProvider

POST 
/v1/sso-providers

CreateOrUpdateSSOProvider upserts the deployment's SSO provider row. The oidc_config jsonb it writes keeps better-auth's camelCase keys, because valet's own login parses those exact keys back out (identitysvc.SSOProviderOIDC): a write that renamed them would break the next sign-in rather than fail here.

One gate, both verbs. The old auth service reached this row two ways and answered differently on each -- /api/sso-providers required a grant while /api/sso-init required nothing at all -- and that split was deliberately not ported: create and edit are separate verbs on one resource behind one annotation, so there is no second way in.

Request​

Responses​

Success