Upsert SSO provider configuration
Creates or replaces the caller tenant’s single active OAuth SSO provider. Upserting with the SAME type as the currently-active provider rotates its credentials/endpoints in place; a different (or absent) type replaces it, demoting and pruning the old one. Unless disablePasswordLogin is explicitly false, local password login is also disabled. The tenant is resolved from the authenticated identity, never from the payload.
Autorizações
Bearer authentication. Send Authorization: Bearer .
Corpo
SSO Provider Input
SSOProviderConfigInput payload
#nosec G117 -- write-only credential, never echoed back in any response
Google, AzureAD, Okta, Custom "Google"
true
Domain is REQUIRED for Type=Okta and ignored otherwise: Casdoor derives an Okta provider's authorize, token and userinfo endpoints from it, and no constant can stand in because they are per-org. Either the org URL (https://.okta.com) or an authorization server base (https://.okta.com/oauth2/default) is accepted; the org URL is completed to its authorization server on write.
"https://your-org.okta.com"

