Upsert Google SSO configuration
Creates or updates the current organization's Google SSO policy. Google has no per-org credentials — only the `enabled` / domain / password flags are stored.
Authentication: personal access token. The spec defines an api_key security
scheme — send an Authorization: ApiKey <your-personal-access-token> header
(value format: ApiKey <your key>). A session_cookie scheme (connect.sid)
exists for browser sessions. Operations in this spec declare security: [], an
artifact of the upstream spec generator — authentication is still enforced by the
server.
Request body
{
"enabled": true,
"overrideEmailDomains": true,
"emailDomains": [
"string"
],
"allowPassword": true
}Responses
200 — Ok
{
"results": {
"allowPassword": true,
"emailDomains": [
"string"
],
"overrideEmailDomains": true,
"enabled": true
},
"status": "ok"
}default — Error
{
"error": {
"data": "string",
"message": "string",
"name": "string",
"statusCode": 0
},
"status": "error"
}Get Google SSO configuration
Returns the current organization's Google SSO policy. Google is enabled by default using the shared instance OAuth app; a configuration only exists when the org has set an explicit policy (e.g. disabled Google). `null` means no explicit policy — Google follows the instance default.
Delete Google SSO configuration
Removes the current organization's Google SSO policy, reverting to the instance default (Google enabled).