> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt
> Use this file to discover all available pages before exploring further.

# Update SSO login policy

> Toggles whether the caller's tenant offers the local password login form (SSO-only when false). The tenant is resolved from the authenticated identity, never from the payload. Only Application.EnablePassword is changed.



## OpenAPI

````yaml /pt/openapi/v3-current/AM-identity.yaml patch /v1/sso/policy
openapi: 3.0.1
info:
  contact: {}
  description: This is a swagger documentation for the Identity API
  termsOfService: http://swagger.io/terms/
  title: Identity API
  version: 1.0.0
servers:
  - url: //localhost:4001/
security: []
paths:
  /v1/sso/policy:
    patch:
      tags:
        - SSO
      summary: Update SSO login policy
      description: >-
        Toggles whether the caller's tenant offers the local password login form
        (SSO-only when false). The tenant is resolved from the authenticated
        identity, never from the payload. Only Application.EnablePassword is
        changed.
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SSOPolicyInput'
        description: SSO Policy Input
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOPolicyResponse'
          description: OK
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/pkg.HTTPError'
          description: Bad Request
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/pkg.HTTPError'
          description: Unauthorized
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/pkg.HTTPError'
          description: Forbidden
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/pkg.HTTPError'
          description: Not Found
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/pkg.HTTPError'
          description: Internal Server Error
      security:
        - BearerAuth: []
components:
  schemas:
    SSOPolicyInput:
      description: SSOPolicyInput payload
      example:
        allowLocalPassword: true
      properties:
        allowLocalPassword:
          description: >-
            AllowLocalPassword controls whether the tenant login screen renders
            the

            password form. false makes the tenant SSO-only.
          example: true
          type: boolean
      type: object
    SSOPolicyResponse:
      description: SSOPolicyResponse payload
      example:
        allowLocalPassword: true
      properties:
        allowLocalPassword:
          example: true
          type: boolean
      type: object
    pkg.HTTPError:
      properties:
        code:
          type: string
        entityType:
          type: string
        err:
          type: object
        message:
          type: string
        title:
          type: string
      type: object
  securitySchemes:
    BearerAuth:
      description: 'Bearer authentication. Send Authorization: Bearer <token>.'
      in: header
      name: Authorization
      type: apiKey

````