# Toggle AuthN request signing

Enable or disable signed SAML authentication requests for an organization SSO provider.

Source: https://statusdashboard.com/docs/api/security/sso/authn-signing

`PATCH /app/sso/providers/{providerId}/authn-signing`

Turns SAML AuthN request signing on or off for one organization SSO provider. Requires the **SSO** feature entitlement.

The general [Create](/docs/api/security/sso/create) and [Update](/docs/api/security/sso/update) provider bodies are unchanged and do not accept a signing flag. Use this endpoint instead.

Returns `409` when the provider is OIDC (`Authn request signing applies to SAML providers only.`).

***

## Path parameters
| Parameter    | Description                   |
| ------------ | ----------------------------- |
| `providerId` | The UUID of the SSO provider. |

***

## Request
See [API Basics](/docs/api) for required headers.

### Request body
| Field     | Type    | Required | Description                                             |
| --------- | ------- | -------- | ------------------------------------------------------- |
| `enabled` | boolean | Yes      | `true` to sign AuthN requests; `false` to stop signing. |

***

## Sample request
```bash
curl -X PATCH https://api.statusdashboard.com/app/sso/providers/a1b2c3d4-e5f6-7890-abcd-ef1234567890/authn-signing \
  -H "Authorization: Bearer bcf847abf5c6:def456" \
  -H "Content-Type: application/json" \
  -d '{ "enabled": true }'
```

## Sample response
**Status: `200 OK`**

```json
{
  "enabled": true
}
```

***

## Error responses
| Status | When                                                         |
| ------ | ------------------------------------------------------------ |
| `400`  | Body fails validation.                                       |
| `403`  | Caller is not a tenant admin, or the org lacks SSO.          |
| `404`  | Provider is missing or belongs to another organization.      |
| `409`  | Provider is OIDC.                                            |
| `500`  | Identity provider did not reach the requested signing state. |