Skip to main content

Deprecated: Update JWT Identity Provider (IDP)​

deprecated

This endpoint has been deprecated and may be removed in future versions of the API.

Update the JWT-specific configuration of an identity provider. All fields will be updated. If a field has no value it will be empty afterward.

Path Parameters
    idpId string required
Request Body required
    jwtEndpoint string required

    Possible values: non-empty and <= 200 characters

    the endpoint where the jwt can be extracted

    issuer string required

    Possible values: non-empty and <= 200 characters

    the issuer of the jwt (for validation)

    keysEndpoint string required

    Possible values: non-empty and <= 200 characters

    the endpoint to the key (JWK) which is used to sign the JWT with

    headerName string required

    Possible values: <= 200 characters

    the name of the header where the JWT is sent in, default is authorization

Responses

JWT config updated

Schema
    details object
    sequence uint64

    on read: the sequence of the last event reduced by the projection

    on manipulation: the timestamp of the event(s) added by the manipulation

    creationDate date-time

    on read: the timestamp of the first event of the object

    on create: the timestamp of the event(s) added by the manipulation

    changeDate date-time

    on read: the timestamp of the last event reduced by the projection

    on manipulation: the

    resourceOwner resource_owner is the organization an object belongs to
PUT /idps/:idpId/jwt_config

Authorization

name: OAuth2type: oauth2scopes: openid,urn:zitadel:iam:org:project:id:zitadel:audflows: {
  "authorizationCode": {
    "authorizationUrl": "$CUSTOM-DOMAIN/oauth/v2/authorize",
    "tokenUrl": "$CUSTOM-DOMAIN/oauth/v2/token",
    "scopes": {
      "openid": "openid",
      "urn:zitadel:iam:org:project:id:zitadel:aud": "urn:zitadel:iam:org:project:id:zitadel:aud"
    }
  }
}

Request

Base URL
https://$CUSTOM-DOMAIN/admin/v1
Bearer Token
idpId — path required
Content-Type
Body required
{

  "jwtEndpoint": "https://custom.com/auth/jwt",

  "issuer": "https://accounts.custom.com",

  "keysEndpoint": "https://accounts.custom.com/keys",

  "headerName": "x-auth-token"

}
Accept
curl / cURL
curl -L -X PUT 'https://$CUSTOM-DOMAIN/admin/v1/idps/:idpId/jwt_config' \
-H 'Content-Type: application/json' \
-H 'Accept: application/json' \
-H 'Authorization: Bearer <TOKEN>' \
--data-raw '{
  "jwtEndpoint": "https://custom.com/auth/jwt",
  "issuer": "https://accounts.custom.com",
  "keysEndpoint": "https://accounts.custom.com/keys",
  "headerName": "x-auth-token"
}'