# SSO Connection programs: update

URL: /code/mcp/sso-connection/records-update · Id: `page:code/mcp/sso-connection/records-update`

> The SSO Connection Verbs update as MCP do programs, with inputs, result, refusals and an example.

Reference for [SSO Connection](/business/nouns/sso-connection), one group of [SSO Connection programs](/code/mcp/sso-connection).

### SSOConnection.update
Changes the given properties of a SSO Connection. [Verb page](/business/nouns/sso-connection/update?interface=mcp).

```text
do: return await $.SSOConnection.update(input)
```

Emits `SSOConnection.updated`.

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | `string` | Yes | The id of the SSO Connection. |
| `protocol` | `string` | No | How sign-in is asserted: `saml` or `oidc`. |
| `certificateExpiresAt` | `datetime` | No | When the signing certificate expires; the Customer’s admin hears 30 days before. |
| `testedAt` | `datetime` | No | When the Customer’s admin last completed a test sign-in. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `ssoConnection` | [SSO Connection](/business/nouns/sso-connection) | Yes | The SSO Connection. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```json
{
  "name": "do",
  "arguments": {
    "code": "return await $.SSOConnection.update({ id: 'sso_gFlPhZJ7A7', protocol: 'saml' })"
  }
}
```