Update the IdP configuration for an organization. All currently authenticated principals will be logged out immediately, and all tokens will be invalidated, including the caller's.
Warning: If you are performing this operation on your "home" organization (the one for which your token is issued), the IdP update will be done, but the admin group ID will typically not point to a valid group in the new IdP. We recommend that you reach out to Cognite Support if you want to update the IdP of your own organization.
Requires the caller to be an admin in the organization, or any of its ancestors.
Example: Assume an organization hierarchy like: org-a
-> org-b
-> org-c
.
To update the IdP configuration for org-c
, which means calling 'PUT /orgs/org-c/idp', the caller must be an
admin in org-a
, org-b
or org-c
.
A request to update the IdP configuration of an organization
Successfully updated
{- "idpVendor": "AZURE_AD",
}