# SSO Connection commands: update

URL: /code/cli/sso-connection/records-update · Id: `page:code/cli/sso-connection/records-update`

> The SSO Connection Verbs update as CLI commands, with inputs, result, refusals and an example.

Reference for [SSO Connection](/business/nouns/sso-connection), one group of [SSO Connection commands](/code/cli/sso-connection).

### SSOConnection.update
Changes the given properties of a SSO Connection. [Verb page](/business/nouns/sso-connection/update?interface=cli).

```text
npx startup-builder do SSOConnection.update --json '<input>' [--try | --send | --do]
```

Emits `SSOConnection.updated`.

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | `string` | Yes | The id of the SSO Connection. |
| `protocol` | `string` | No | How sign-in is asserted: `saml` or `oidc`. |
| `certificateExpiresAt` | `datetime` | No | When the signing certificate expires; the Customer’s admin hears 30 days before. |
| `testedAt` | `datetime` | No | When the Customer’s admin last completed a test sign-in. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `ssoConnection` | [SSO Connection](/business/nouns/sso-connection) | Yes | The SSO Connection. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```bash
npx startup-builder do SSOConnection.update --json '{"id":"sso_gFlPhZJ7A7","protocol":"saml"}'
```