authentik.ProviderWsFederation

authentik 2026.2.0, Apr 22 26

Viewing docs for authentik 2026.2.0
published on Wednesday, Apr 22, 2026 by goauthentik

goauthentik/terraform-provider-authentik

Viewing docs for authentik 2026.2.0
published on Wednesday, Apr 22, 2026 by goauthentik

goauthentik/terraform-provider-authentik

Create ProviderWsFederation Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ProviderWsFederation(name: string, args: ProviderWsFederationArgs, opts?: CustomResourceOptions);

@overload
def ProviderWsFederation(resource_name: str,
                         args: ProviderWsFederationArgs,
                         opts: Optional[ResourceOptions] = None)

@overload
def ProviderWsFederation(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         reply_url: Optional[str] = None,
                         authorization_flow: Optional[str] = None,
                         wtrealm: Optional[str] = None,
                         invalidation_flow: Optional[str] = None,
                         property_mappings: Optional[Sequence[str]] = None,
                         provider_ws_federation_id: Optional[str] = None,
                         encryption_kp: Optional[str] = None,
                         name_id_mapping: Optional[str] = None,
                         assertion_valid_not_on_or_after: Optional[str] = None,
                         name: Optional[str] = None,
                         authn_context_class_ref_mapping: Optional[str] = None,
                         digest_algorithm: Optional[str] = None,
                         assertion_valid_not_before: Optional[str] = None,
                         session_valid_not_on_or_after: Optional[str] = None,
                         sign_assertion: Optional[bool] = None,
                         sign_logout_request: Optional[bool] = None,
                         signature_algorithm: Optional[str] = None,
                         signing_kp: Optional[str] = None,
                         authentication_flow: Optional[str] = None)

func NewProviderWsFederation(ctx *Context, name string, args ProviderWsFederationArgs, opts ...ResourceOption) (*ProviderWsFederation, error)

public ProviderWsFederation(string name, ProviderWsFederationArgs args, CustomResourceOptions? opts = null)

public ProviderWsFederation(String name, ProviderWsFederationArgs args)
public ProviderWsFederation(String name, ProviderWsFederationArgs args, CustomResourceOptions options)

type: authentik:ProviderWsFederation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args ProviderWsFederationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ProviderWsFederationArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ProviderWsFederationArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ProviderWsFederationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ProviderWsFederationArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var providerWsFederationResource = new Authentik.ProviderWsFederation("providerWsFederationResource", new()
{
    ReplyUrl = "string",
    AuthorizationFlow = "string",
    Wtrealm = "string",
    InvalidationFlow = "string",
    PropertyMappings = new[]
    {
        "string",
    },
    ProviderWsFederationId = "string",
    EncryptionKp = "string",
    NameIdMapping = "string",
    AssertionValidNotOnOrAfter = "string",
    Name = "string",
    AuthnContextClassRefMapping = "string",
    DigestAlgorithm = "string",
    AssertionValidNotBefore = "string",
    SessionValidNotOnOrAfter = "string",
    SignAssertion = false,
    SignLogoutRequest = false,
    SignatureAlgorithm = "string",
    SigningKp = "string",
    AuthenticationFlow = "string",
});

example, err := authentik.NewProviderWsFederation(ctx, "providerWsFederationResource", &authentik.ProviderWsFederationArgs{
	ReplyUrl:          pulumi.String("string"),
	AuthorizationFlow: pulumi.String("string"),
	Wtrealm:           pulumi.String("string"),
	InvalidationFlow:  pulumi.String("string"),
	PropertyMappings: pulumi.StringArray{
		pulumi.String("string"),
	},
	ProviderWsFederationId:      pulumi.String("string"),
	EncryptionKp:                pulumi.String("string"),
	NameIdMapping:               pulumi.String("string"),
	AssertionValidNotOnOrAfter:  pulumi.String("string"),
	Name:                        pulumi.String("string"),
	AuthnContextClassRefMapping: pulumi.String("string"),
	DigestAlgorithm:             pulumi.String("string"),
	AssertionValidNotBefore:     pulumi.String("string"),
	SessionValidNotOnOrAfter:    pulumi.String("string"),
	SignAssertion:               pulumi.Bool(false),
	SignLogoutRequest:           pulumi.Bool(false),
	SignatureAlgorithm:          pulumi.String("string"),
	SigningKp:                   pulumi.String("string"),
	AuthenticationFlow:          pulumi.String("string"),
})

var providerWsFederationResource = new ProviderWsFederation("providerWsFederationResource", ProviderWsFederationArgs.builder()
    .replyUrl("string")
    .authorizationFlow("string")
    .wtrealm("string")
    .invalidationFlow("string")
    .propertyMappings("string")
    .providerWsFederationId("string")
    .encryptionKp("string")
    .nameIdMapping("string")
    .assertionValidNotOnOrAfter("string")
    .name("string")
    .authnContextClassRefMapping("string")
    .digestAlgorithm("string")
    .assertionValidNotBefore("string")
    .sessionValidNotOnOrAfter("string")
    .signAssertion(false)
    .signLogoutRequest(false)
    .signatureAlgorithm("string")
    .signingKp("string")
    .authenticationFlow("string")
    .build());

provider_ws_federation_resource = authentik.ProviderWsFederation("providerWsFederationResource",
    reply_url="string",
    authorization_flow="string",
    wtrealm="string",
    invalidation_flow="string",
    property_mappings=["string"],
    provider_ws_federation_id="string",
    encryption_kp="string",
    name_id_mapping="string",
    assertion_valid_not_on_or_after="string",
    name="string",
    authn_context_class_ref_mapping="string",
    digest_algorithm="string",
    assertion_valid_not_before="string",
    session_valid_not_on_or_after="string",
    sign_assertion=False,
    sign_logout_request=False,
    signature_algorithm="string",
    signing_kp="string",
    authentication_flow="string")

const providerWsFederationResource = new authentik.ProviderWsFederation("providerWsFederationResource", {
    replyUrl: "string",
    authorizationFlow: "string",
    wtrealm: "string",
    invalidationFlow: "string",
    propertyMappings: ["string"],
    providerWsFederationId: "string",
    encryptionKp: "string",
    nameIdMapping: "string",
    assertionValidNotOnOrAfter: "string",
    name: "string",
    authnContextClassRefMapping: "string",
    digestAlgorithm: "string",
    assertionValidNotBefore: "string",
    sessionValidNotOnOrAfter: "string",
    signAssertion: false,
    signLogoutRequest: false,
    signatureAlgorithm: "string",
    signingKp: "string",
    authenticationFlow: "string",
});

type: authentik:ProviderWsFederation
properties:
    assertionValidNotBefore: string
    assertionValidNotOnOrAfter: string
    authenticationFlow: string
    authnContextClassRefMapping: string
    authorizationFlow: string
    digestAlgorithm: string
    encryptionKp: string
    invalidationFlow: string
    name: string
    nameIdMapping: string
    propertyMappings:
        - string
    providerWsFederationId: string
    replyUrl: string
    sessionValidNotOnOrAfter: string
    signAssertion: false
    signLogoutRequest: false
    signatureAlgorithm: string
    signingKp: string
    wtrealm: string

ProviderWsFederation Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ProviderWsFederation resource accepts the following input properties:

AuthorizationFlow string

InvalidationFlow string

ReplyUrl string

Wtrealm string

AssertionValidNotBefore string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

AssertionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

AuthenticationFlow string

AuthnContextClassRefMapping string

DigestAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

EncryptionKp string

Name string

NameIdMapping string

PropertyMappings List<string>

ProviderWsFederationId string

SessionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

SignAssertion bool

Defaults to true.

SignLogoutRequest bool

Defaults to false.

SignatureAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

SigningKp string

AuthorizationFlow string

InvalidationFlow string

ReplyUrl string

Wtrealm string

AssertionValidNotBefore string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

AssertionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

AuthenticationFlow string

AuthnContextClassRefMapping string

DigestAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

EncryptionKp string

Name string

NameIdMapping string

PropertyMappings []string

ProviderWsFederationId string

SessionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

SignAssertion bool

Defaults to true.

SignLogoutRequest bool

Defaults to false.

SignatureAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

SigningKp string

authorizationFlow String

invalidationFlow String

replyUrl String

wtrealm String

assertionValidNotBefore String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

assertionValidNotOnOrAfter String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

authenticationFlow String

authnContextClassRefMapping String

digestAlgorithm String

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

encryptionKp String

name String

nameIdMapping String

propertyMappings List<String>

providerWsFederationId String

sessionValidNotOnOrAfter String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

signAssertion Boolean

Defaults to true.

signLogoutRequest Boolean

Defaults to false.

signatureAlgorithm String

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

signingKp String

authorizationFlow string

invalidationFlow string

replyUrl string

wtrealm string

assertionValidNotBefore string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

assertionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

authenticationFlow string

authnContextClassRefMapping string

digestAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

encryptionKp string

name string

nameIdMapping string

propertyMappings string[]

providerWsFederationId string

sessionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

signAssertion boolean

Defaults to true.

signLogoutRequest boolean

Defaults to false.

signatureAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

signingKp string

authorization_flow str

invalidation_flow str

reply_url str

wtrealm str

assertion_valid_not_before str

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

assertion_valid_not_on_or_after str

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

authentication_flow str

authn_context_class_ref_mapping str

digest_algorithm str

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

encryption_kp str

name str

name_id_mapping str

property_mappings Sequence[str]

provider_ws_federation_id str

session_valid_not_on_or_after str

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

sign_assertion bool

Defaults to true.

sign_logout_request bool

Defaults to false.

signature_algorithm str

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

signing_kp str

authorizationFlow String

invalidationFlow String

replyUrl String

wtrealm String

assertionValidNotBefore String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

assertionValidNotOnOrAfter String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

authenticationFlow String

authnContextClassRefMapping String

digestAlgorithm String

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

encryptionKp String

name String

nameIdMapping String

propertyMappings List<String>

providerWsFederationId String

sessionValidNotOnOrAfter String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

signAssertion Boolean

Defaults to true.

signLogoutRequest Boolean

Defaults to false.

signatureAlgorithm String

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

signingKp String

Outputs

All input properties are implicitly available as output properties. Additionally, the ProviderWsFederation resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing ProviderWsFederation Resource

Get an existing ProviderWsFederation resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ProviderWsFederationState, opts?: CustomResourceOptions): ProviderWsFederation

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        assertion_valid_not_before: Optional[str] = None,
        assertion_valid_not_on_or_after: Optional[str] = None,
        authentication_flow: Optional[str] = None,
        authn_context_class_ref_mapping: Optional[str] = None,
        authorization_flow: Optional[str] = None,
        digest_algorithm: Optional[str] = None,
        encryption_kp: Optional[str] = None,
        invalidation_flow: Optional[str] = None,
        name: Optional[str] = None,
        name_id_mapping: Optional[str] = None,
        property_mappings: Optional[Sequence[str]] = None,
        provider_ws_federation_id: Optional[str] = None,
        reply_url: Optional[str] = None,
        session_valid_not_on_or_after: Optional[str] = None,
        sign_assertion: Optional[bool] = None,
        sign_logout_request: Optional[bool] = None,
        signature_algorithm: Optional[str] = None,
        signing_kp: Optional[str] = None,
        wtrealm: Optional[str] = None) -> ProviderWsFederation

func GetProviderWsFederation(ctx *Context, name string, id IDInput, state *ProviderWsFederationState, opts ...ResourceOption) (*ProviderWsFederation, error)

public static ProviderWsFederation Get(string name, Input<string> id, ProviderWsFederationState? state, CustomResourceOptions? opts = null)

public static ProviderWsFederation get(String name, Output<String> id, ProviderWsFederationState state, CustomResourceOptions options)

resources:  _:    type: authentik:ProviderWsFederation    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AssertionValidNotBefore string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

AssertionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

AuthenticationFlow string

AuthnContextClassRefMapping string

AuthorizationFlow string

DigestAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

EncryptionKp string

InvalidationFlow string

Name string

NameIdMapping string

PropertyMappings List<string>

ProviderWsFederationId string

ReplyUrl string

SessionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

SignAssertion bool

Defaults to true.

SignLogoutRequest bool

Defaults to false.

SignatureAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

SigningKp string

Wtrealm string

AssertionValidNotBefore string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

AssertionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

AuthenticationFlow string

AuthnContextClassRefMapping string

AuthorizationFlow string

DigestAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

EncryptionKp string

InvalidationFlow string

Name string

NameIdMapping string

PropertyMappings []string

ProviderWsFederationId string

ReplyUrl string

SessionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

SignAssertion bool

Defaults to true.

SignLogoutRequest bool

Defaults to false.

SignatureAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

SigningKp string

Wtrealm string

assertionValidNotBefore String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

assertionValidNotOnOrAfter String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

authenticationFlow String

authnContextClassRefMapping String

authorizationFlow String

digestAlgorithm String

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

encryptionKp String

invalidationFlow String

name String

nameIdMapping String

propertyMappings List<String>

providerWsFederationId String

replyUrl String

sessionValidNotOnOrAfter String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

signAssertion Boolean

Defaults to true.

signLogoutRequest Boolean

Defaults to false.

signatureAlgorithm String

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

signingKp String

wtrealm String

assertionValidNotBefore string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

assertionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

authenticationFlow string

authnContextClassRefMapping string

authorizationFlow string

digestAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

encryptionKp string

invalidationFlow string

name string

nameIdMapping string

propertyMappings string[]

providerWsFederationId string

replyUrl string

sessionValidNotOnOrAfter string

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

signAssertion boolean

Defaults to true.

signLogoutRequest boolean

Defaults to false.

signatureAlgorithm string

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

signingKp string

wtrealm string

assertion_valid_not_before str

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

assertion_valid_not_on_or_after str

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

authentication_flow str

authn_context_class_ref_mapping str

authorization_flow str

digest_algorithm str

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

encryption_kp str

invalidation_flow str

name str

name_id_mapping str

property_mappings Sequence[str]

provider_ws_federation_id str

reply_url str

session_valid_not_on_or_after str

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

sign_assertion bool

Defaults to true.

sign_logout_request bool

Defaults to false.

signature_algorithm str

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

signing_kp str

wtrealm str

assertionValidNotBefore String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=-5.

assertionValidNotOnOrAfter String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=5.

authenticationFlow String

authnContextClassRefMapping String

authorizationFlow String

digestAlgorithm String

Allowed values:

http://www.w3.org/2000/09/xmldsig#sha1
http://www.w3.org/2001/04/xmlenc#sha256
http://www.w3.org/2001/04/xmldsig-more#sha384
http://www.w3.org/2001/04/xmlenc#sha512 Defaults to http://www.w3.org/2001/04/xmlenc#sha256.

encryptionKp String

invalidationFlow String

name String

nameIdMapping String

propertyMappings List<String>

providerWsFederationId String

replyUrl String

sessionValidNotOnOrAfter String

Format: hours=1;minutes=2;seconds=3. Defaults to minutes=86400.

signAssertion Boolean

Defaults to true.

signLogoutRequest Boolean

Defaults to false.

signatureAlgorithm String

Allowed values:

http://www.w3.org/2000/09/xmldsig#rsa-sha1
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
http://www.w3.org/2001/04/xmldsig-more#rsa-sha384
http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384
http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512
http://www.w3.org/2000/09/xmldsig#dsa-sha1 Defaults to http://www.w3.org/2001/04/xmldsig-more#rsa-sha256.

signingKp String

wtrealm String