--- title: Update one trusted issuer description: Use PUT to fully replace a PingOne schema attribute, removing any existing properties omitted from the request body component: pingone-api page_id: pingone-api:platform:trusted-issuers/update-trusted-issuer canonical_url: https://developer.pingidentity.com/pingone-api/platform/trusted-issuers/update-trusted-issuer.html llms_txt: https://developer.pingidentity.com/pingone-api/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: 2026-06-09 section_ids: prerequisites: Prerequisites headers: Headers body: Body example-request: Example Request example-response: Example Response --- # Update one trusted issuer ## Required permission: * [trustedIssuers:update:trustedIssuer](../reference/roles-and-permissions-in-pingone/pingone-permissions-by-identifier.html#permission-trustedIssuers-update-trustedIssuer "Learn more about this permission") ```none PUT {{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}} ``` You can update an existing trusted issuer using `PUT {{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}`. ### Prerequisites * Refer to [Trusted issuers](index.html) for important overview information. * [Read trusted issuers](read-trusted-issuers.html) and select a trusted issuer's UUID for the endpoint. > **Collapse: Request Model** > > Refer to the [Trusted issuers data model](index.html) for full property descriptions. > > | Property | Type | Required | > | ------------------- | ------- | ----------------- | > | `audiences[]` | Array | Optional | > | `clockSkew` | Integer | Optional | > | `description` | String | Optional | > | `expRequired` | Boolean | Optional | > | `iatRequired` | Boolean | Optional | > | `issuer` | String | Required | > | `jwks` | String | Required/Optional | > | `jwksUrl` | String | Required/Optional | > | `maxFutureValidity` | Integer | Optional | > | `name` | String | Required | > | `nbfRequired` | Boolean | Optional | ### Headers Authorization      Bearer {{accessToken}} Content-Type      application/json ### Body raw ( application/json ) ```json { "name": "Issuer - {{$randomAbbreviation}}", "description" : "My PingFederate server", "issuer": "https://issuer.accounting.com", "expRequired": true, "iatRequired": false, "nbfRequired": false, "audiences": [ "audience-one", "audience-two" ], "jwksUrl": "https://issuer.example.com/jwks" } ``` ## ### Example Request * cURL * C# * Go * HTTP * Java * jQuery * NodeJS * Python * PHP * Ruby * Swift ```shell curl --location --globoff --request PUT '{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}' \ --header 'Content-Type: application/json' \ --header 'Authorization: Bearer {{accessToken}}' \ --data '{ "name": "Issuer - {{$randomAbbreviation}}", "description" : "My PingFederate server", "issuer": "https://issuer.accounting.com", "expRequired": true, "iatRequired": false, "nbfRequired": false, "audiences": [ "audience-one", "audience-two" ], "jwksUrl": "https://issuer.example.com/jwks" }' ``` ```csharp var options = new RestClientOptions("{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}") { MaxTimeout = -1, }; var client = new RestClient(options); var request = new RestRequest("", Method.Put); request.AddHeader("Content-Type", "application/json"); request.AddHeader("Authorization", "Bearer {{accessToken}}"); var body = @"{" + "\n" + @" ""name"": ""Issuer - {{$randomAbbreviation}}""," + "\n" + @" ""description"" : ""My PingFederate server""," + "\n" + @" ""issuer"": ""https://issuer.accounting.com""," + "\n" + @" ""expRequired"": true," + "\n" + @" ""iatRequired"": false," + "\n" + @" ""nbfRequired"": false," + "\n" + @" ""audiences"": [" + "\n" + @" ""audience-one""," + "\n" + @" ""audience-two""" + "\n" + @" ]," + "\n" + @" ""jwksUrl"": ""https://issuer.example.com/jwks""" + "\n" + @"}" + "\n" + @""; request.AddStringBody(body, DataFormat.Json); RestResponse response = await client.ExecuteAsync(request); Console.WriteLine(response.Content); ``` ```golang package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}" method := "PUT" payload := strings.NewReader(`{ "name": "Issuer - {{$randomAbbreviation}}", "description" : "My PingFederate server", "issuer": "https://issuer.accounting.com", "expRequired": true, "iatRequired": false, "nbfRequired": false, "audiences": [ "audience-one", "audience-two" ], "jwksUrl": "https://issuer.example.com/jwks" }`) client := &http.Client { } req, err := http.NewRequest(method, url, payload) if err != nil { fmt.Println(err) return } req.Header.Add("Content-Type", "application/json") req.Header.Add("Authorization", "Bearer {{accessToken}}") res, err := client.Do(req) if err != nil { fmt.Println(err) return } defer res.Body.Close() body, err := io.ReadAll(res.Body) if err != nil { fmt.Println(err) return } fmt.Println(string(body)) } ``` ```http PUT /v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}} HTTP/1.1 Host: {{apiPath}} Content-Type: application/json Authorization: Bearer {{accessToken}} { "name": "Issuer - {{$randomAbbreviation}}", "description" : "My PingFederate server", "issuer": "https://issuer.accounting.com", "expRequired": true, "iatRequired": false, "nbfRequired": false, "audiences": [ "audience-one", "audience-two" ], "jwksUrl": "https://issuer.example.com/jwks" } ``` ```java OkHttpClient client = new OkHttpClient().newBuilder() .build(); MediaType mediaType = MediaType.parse("application/json"); RequestBody body = RequestBody.create(mediaType, "{\n \"name\": \"Issuer - {{$randomAbbreviation}}\",\n \"description\" : \"My PingFederate server\",\n \"issuer\": \"https://issuer.accounting.com\",\n \"expRequired\": true,\n \"iatRequired\": false,\n \"nbfRequired\": false,\n \"audiences\": [\n \"audience-one\",\n \"audience-two\"\n ],\n \"jwksUrl\": \"https://issuer.example.com/jwks\"\n}\n"); Request request = new Request.Builder() .url("{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}") .method("PUT", body) .addHeader("Content-Type", "application/json") .addHeader("Authorization", "Bearer {{accessToken}}") .build(); Response response = client.newCall(request).execute(); ``` ```javascript var settings = { "url": "{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}", "method": "PUT", "timeout": 0, "headers": { "Content-Type": "application/json", "Authorization": "Bearer {{accessToken}}" }, "data": JSON.stringify({ "name": "Issuer - {{$randomAbbreviation}}", "description": "My PingFederate server", "issuer": "https://issuer.accounting.com", "expRequired": true, "iatRequired": false, "nbfRequired": false, "audiences": [ "audience-one", "audience-two" ], "jwksUrl": "https://issuer.example.com/jwks" }), }; $.ajax(settings).done(function (response) { console.log(response); }); ``` ```javascript var request = require('request'); var options = { 'method': 'PUT', 'url': '{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}', 'headers': { 'Content-Type': 'application/json', 'Authorization': 'Bearer {{accessToken}}' }, body: JSON.stringify({ "name": "Issuer - {{$randomAbbreviation}}", "description": "My PingFederate server", "issuer": "https://issuer.accounting.com", "expRequired": true, "iatRequired": false, "nbfRequired": false, "audiences": [ "audience-one", "audience-two" ], "jwksUrl": "https://issuer.example.com/jwks" }) }; request(options, function (error, response) { if (error) throw new Error(error); console.log(response.body); }); ``` ```python import requests import json url = "{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}" payload = json.dumps({ "name": "Issuer - {{$randomAbbreviation}}", "description": "My PingFederate server", "issuer": "https://issuer.accounting.com", "expRequired": True, "iatRequired": False, "nbfRequired": False, "audiences": [ "audience-one", "audience-two" ], "jwksUrl": "https://issuer.example.com/jwks" }) headers = { 'Content-Type': 'application/json', 'Authorization': 'Bearer {{accessToken}}' } response = requests.request("PUT", url, headers=headers, data=payload) print(response.text) ``` ```php setUrl('{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}'); $request->setMethod(HTTP_Request2::METHOD_PUT); $request->setConfig(array( 'follow_redirects' => TRUE )); $request->setHeader(array( 'Content-Type' => 'application/json', 'Authorization' => 'Bearer {{accessToken}}' )); $request->setBody('{\n "name": "Issuer - {{$randomAbbreviation}}",\n "description" : "My PingFederate server",\n "issuer": "https://issuer.accounting.com",\n "expRequired": true,\n "iatRequired": false,\n "nbfRequired": false,\n "audiences": [\n "audience-one",\n "audience-two"\n ],\n "jwksUrl": "https://issuer.example.com/jwks"\n}'); try { $response = $request->send(); if ($response->getStatus() == 200) { echo $response->getBody(); } else { echo 'Unexpected HTTP status: ' . $response->getStatus() . ' ' . $response->getReasonPhrase(); } } catch(HTTP_Request2_Exception $e) { echo 'Error: ' . $e->getMessage(); } ``` ```ruby require "uri" require "json" require "net/http" url = URI("{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}") http = Net::HTTP.new(url.host, url.port); request = Net::HTTP::Put.new(url) request["Content-Type"] = "application/json" request["Authorization"] = "Bearer {{accessToken}}" request.body = JSON.dump({ "name": "Issuer - {{\$randomAbbreviation}}", "description": "My PingFederate server", "issuer": "https://issuer.accounting.com", "expRequired": true, "iatRequired": false, "nbfRequired": false, "audiences": [ "audience-one", "audience-two" ], "jwksUrl": "https://issuer.example.com/jwks" }) response = http.request(request) puts response.read_body ``` ```swift let parameters = "{\n \"name\": \"Issuer - {{$randomAbbreviation}}\",\n \"description\" : \"My PingFederate server\",\n \"issuer\": \"https://issuer.accounting.com\",\n \"expRequired\": true,\n \"iatRequired\": false,\n \"nbfRequired\": false,\n \"audiences\": [\n \"audience-one\",\n \"audience-two\"\n ],\n \"jwksUrl\": \"https://issuer.example.com/jwks\"\n}" let postData = parameters.data(using: .utf8) var request = URLRequest(url: URL(string: "{{apiPath}}/v1/environments/{{envID}}/trustedIssuers/{{trustedIssuerID}}")!,timeoutInterval: Double.infinity) request.addValue("application/json", forHTTPHeaderField: "Content-Type") request.addValue("Bearer {{accessToken}}", forHTTPHeaderField: "Authorization") request.httpMethod = "PUT" request.httpBody = postData let task = URLSession.shared.dataTask(with: request) { data, response, error in guard let data = data else { print(String(describing: error)) return } print(String(data: data, encoding: .utf8)!) } task.resume() ``` ### Example Response ```json { "id": "72fd8815-ffdc-4312-b104-b28bda61a86e", "environment": { "id": "abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6" }, "name": "Issuer - AI", "description": "My PingFederate server", "createdAt": "2026-10-30T19:46:57.352Z", "updatedAt": "2026-10-30T19:50:28.632Z", "issuer": "https://issuer.accounting.com", "audiences": [ "audience-two", "audience-one" ], "jwksUrl": "https://issuer.example.com/jwks", "clockSkew": 0, "expRequired": true, "iatRequired": false, "nbfRequired": false, "maxFutureValidity": 0, "_links": { "environment": { "href": "https://api.pingone.com/v1/environments/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6" }, "self": { "href": "https://api.pingone.com/v1/environments/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/trustedIssuers/72fd8815-ffdc-4312-b104-b28bda61a86e" } } } ```