Latest Content

How to Update an OIDC Issuer

Updated on 08 April, 2026

Update an existing OIDC issuer configuration in Vultr IAM. Modify the issuer URL, audience, or other settings through the Vultr IAM API or Console interface.

Updating an OIDC issuer allows you to modify its configuration, such as rotating the public key when the external identity provider rotates its signing keys.

Note
The Update OIDC Issuer endpoint currently returns a 500 Internal Server Error. This is a known issue. As a workaround, delete the existing issuer and create a new one with the updated values.

This guide explains how to update an OIDC issuer using the Vultr API.

  1. Send a GET request to the List OIDC Issuers endpoint to retrieve all issuers.

    console 
    $ curl "https://api.vultr.com/v2/oidc/issuer" \
    -X GET \
    -H "Authorization: Bearer ${VULTR_API_KEY}"

    Note the id of the issuer you want to update.

  2. Send a PATCH request to the Update OIDC Issuer endpoint. Replace {issuer-id} with the issuer id and include the fields to update.

    console 
    $ curl "https://api.vultr.com/v2/oidc/issuer/{issuer-id}" \
    -X PATCH \
    -H "Authorization: Bearer ${VULTR_API_KEY}" \
    -H "Content-Type: application/json" \
    -d '{
        "issuer": {
            "kid": "NEW-KEY-ID",
            "n": "NEW-RSA-MODULUS",
            "e": "AQAB"
        }
    }'

    A successful update returns an HTTP 202 Accepted response with the updated issuer details.

Comments