# tuist organization update sso

Update the SSO provider for your organization.

## Arguments

### organization-name

**Environment variable** `TUIST_ORGANIZATION_UPDATE_SSO_ORGANIZATION_NAME`

The name of the organization for which you want to update the SSO provider for.

```bash
tuist organization update sso [organization-name]
```

### provider

**Environment variable** `TUIST_ORGANIZATION_UPDATE_SSO_PROVIDER`

The SSO provider to use.

```bash
tuist organization update sso --provider [provider]
```

### organization-id

**Environment variable** `TUIST_ORGANIZATION_UPDATE_SSO_ORGANIZATION_ID`

The identity provider organization identifier used to scope identities. For Google, this is the Google Workspace domain (for example, tuist.dev for tuist@tuist.dev). For Okta, it is the Okta organization domain (such as my-org.okta.com). This is distinct from the verified login email domain used for discovery and enrollment, which is configured in the dashboard.

```bash
tuist organization update sso --organization-id [organization-id]
tuist organization update sso -o [organization-id]
```

### enrollment-policy `Optional`

**Environment variable** `TUIST_ORGANIZATION_UPDATE_SSO_ENROLLMENT_POLICY`

How authenticated users join the organization. Automatic enrollment allows users from the provider's trusted domain to join without an invitation; invitation-only requires an invitation. When omitted, the current policy is preserved if the provider is unchanged. New configurations and provider changes default to automatic for Google and invitation-only for Okta.

```bash
tuist organization update sso --enrollment-policy [enrollment-policy]
```

### path `Optional`

**Environment variable** `TUIST_ORGANIZATION_UPDATE_SSO_PATH`

The path to the directory or a subdirectory of the project.

```bash
tuist organization update sso --path [path]
tuist organization update sso -p [path]
```