GoodData Cloud - switching the identity provider to AWS Cognito - configuration protection

Hello,

My organization has been using GoodData internal / dev identity provider, and we would like to switch to our new AWS Cognito identity provider.

We are following the documentation here: https://www.gooddata.com/developers/cloud-native/doc/cloud/manage-organization/set-up-authentication/aws-cognito/
 

According to the section “Configure Cognito IdP in Organization” we executed the REST API PUT method to “ $HOST_URL/api/v1/entities/admin/organizations/$ORGANIZATION_ID”, however the response is:
 

{
    "detail": "Can't proceed, OAuth configuration is protected against alteration in the organization.",
    "status": 409,
    "title": "Conflict",
    "traceId": "..."
}

Could you please advise how to lift this protection?

Thank you.