Optionalallowed_Email domains allowed for SSO (required for strict mode)
Optionalclaim_Maps Contio user fields to IdP claim names
Optionaldiscovery_OIDC discovery endpoint URL from your Identity Provider
Optionalidp_OAuth Client ID from your Identity Provider's OIDC application. This is NOT your Contio Partner client_id.
Optionalidp_OAuth Client Secret from your Identity Provider's OIDC application. This is NOT your Contio Partner client_secret. Stored encrypted at rest.
Optionalis_Enable or disable this IdP configuration
OptionalmodeDomain validation mode: "strict" or "partner_managed"
OptionalnameDisplay name for this IdP configuration
OptionalscopesOIDC scopes to request during authentication
Request to update an IdP configuration.
IMPORTANT: The idp_client_id and idp_client_secret are the OIDC credentials from your Identity Provider (e.g., Okta, Azure AD, Auth0), NOT your Contio Partner OAuth credentials.