# /third-party-applications/reconcile-access - Align Logto access rules with the portal lists

**POST /third-party-applications/reconcile-access**

For every third-party application whose sync config sets access_control.idp_enforced, aligns Logto app-level access control with the organizations the portal admits: the Owner organization, every distributor when the distributor role is admitted, and the resellers and customers whose distributor grants the portal. An application pinned to organization_ids gets exactly those. idp_enforced: false makes sure Logto enforces nothing for the application. The same reconcile runs on its own after organization changes and periodically; call this for the rollout or to check the state. Never enables enforcement over an empty organization list. Owner organization only.


## Servers
- Backend API server: https://my.nethesis.it/backend/api (Backend API server)


## Authentication methods
- Bearer auth


## Parameters


### Query parameters

- **dry_run** (boolean)
  When true nothing is written to Logto; the report says what would change.



## Responses
### 200
Reconcile report

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object)


### 401
Unauthorized - invalid or missing token

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)


### 403
Forbidden - insufficient permissions

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)


### 500
Internal server error

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)



[Powered by Bump.sh](https://bump.sh)