Update passkey policy
Turns passkey sign-in on or off for your organization. Sending the value already stored changes nothing.
The option belongs to the organization resolved from your token; nothing in the request names another one. Passkeys and SSO exclude each other: passkeys cannot be turned on while an SSO provider is active, and an SSO provider cannot be configured while passkeys are on.
While passkeys are on, a person who has a passkey cannot sign in with a password (403 AUT-1019 on the password grant); everyone else signs in with password and second factor as before. Turning passkeys off lets everyone sign in with a password again; passkeys stay stored.
Failures:
400— the body is malformed, orenabledis missing.404— the application backing your organization’s login was not found.409 IDE-1068— an SSO provider is active; remove it before turning passkeys on.503 IDE-0066— the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.
Authorizations
JWT bearer token issued by the identity provider.
Body
The passkey option for the caller's organization.
True offers passkey sign-in to the organization; false stops offering it. Existing passkeys stay stored either way.
true
Response
OK

