> ## Documentation Index
> Fetch the complete documentation index at: https://docs.engagefabric.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update SSO configuration



## OpenAPI

````yaml /api-reference/openapi.json put /enterprise/sso
openapi: 3.0.0
info:
  title: EngageFabric API
  description: >-
    EngageFabric is a multi-tenant SaaS gamification framework. This API
    provides endpoints for managing players, tracking events, quests,
    adventures, leaderboards, lobbies, and real-time features.
  version: 1.0.0
  contact:
    name: EngageFabric Support
    url: https://engagefabric.com
    email: support@engagefabric.com
  license:
    name: Proprietary
    url: https://engagefabric.com/terms
servers:
  - url: https://api.engagefabric.com
    description: Production
  - url: http://localhost:3000
    description: Development
security: []
tags:
  - name: auth
    description: Authentication endpoints
  - name: tenants
    description: Tenant management
  - name: projects
    description: Project management
  - name: players
    description: Player management and game state
  - name: events
    description: Event ingestion and tracking
  - name: quests
    description: Quest management and progress
  - name: adventures
    description: Adventure/season management
  - name: leaderboards
    description: Leaderboard rankings
  - name: lobbies
    description: Multiplayer lobby management
  - name: chat
    description: Real-time chat
  - name: rules
    description: Rules engine configuration
paths:
  /enterprise/sso:
    put:
      tags:
        - enterprise
      summary: Update SSO configuration
      operationId: EnterpriseController_updateSsoConfig
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateSsoConfigDto'
      responses:
        '200':
          description: SSO configuration updated
        '400':
          description: Invalid configuration
        '403':
          description: Feature not available on current plan
      security:
        - JWT: []
components:
  schemas:
    UpdateSsoConfigDto:
      type: object
      properties:
        provider:
          type: string
          description: SSO provider type
          enum:
            - SAML
            - OIDC
            - AZURE_AD
            - OKTA
            - GOOGLE_WORKSPACE
        displayName:
          type: string
          description: Display name for the SSO button
          example: Sign in with Acme Corp
        samlEntityId:
          type: string
          description: SAML Entity ID (for SAML provider)
          example: https://idp.customer.com/saml
        samlSsoUrl:
          type: string
          description: SAML SSO URL (for SAML provider)
          example: https://idp.customer.com/saml/sso
        samlCertificate:
          type: string
          description: SAML X.509 Certificate (PEM format)
        oidcIssuer:
          type: string
          description: OIDC Issuer URL (for OIDC provider)
          example: https://idp.customer.com
        oidcClientId:
          type: string
          description: OIDC Client ID
        oidcClientSecret:
          type: string
          description: OIDC Client Secret
        oidcScopes:
          description: OIDC Scopes
          default:
            - openid
            - profile
            - email
          type: array
          items:
            type: string
        autoProvision:
          type: boolean
          description: Automatically create users on first login
          default: true
        defaultRole:
          type: string
          description: Default role for auto-provisioned users
          enum:
            - OWNER
            - ADMIN
            - DESIGNER
            - DEVELOPER
            - VIEWER
          default: VIEWER
        allowedDomains:
          description: Allowed email domains (empty means all domains)
          example:
            - customer.com
            - subsidiary.com
          type: array
          items:
            type: string
        enforceSso:
          type: boolean
          description: Force SSO for all users (no password login)
          default: false
      required:
        - provider
  securitySchemes:
    JWT:
      scheme: bearer
      bearerFormat: JWT
      type: http
      description: JWT token for admin console authentication

````