Viewing docs for CAST AI v8.60.0
published on Wednesday, Aug 19, 2026 by CAST AI
published on Wednesday, Aug 19, 2026 by CAST AI
Viewing docs for CAST AI v8.60.0
published on Wednesday, Aug 19, 2026 by CAST AI
published on Wednesday, Aug 19, 2026 by CAST AI
Create SSOConnection Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new SSOConnection(name: string, args: SSOConnectionArgs, opts?: CustomResourceOptions);@overload
def SSOConnection(resource_name: str,
args: SSOConnectionArgs,
opts: Optional[ResourceOptions] = None)
@overload
def SSOConnection(resource_name: str,
opts: Optional[ResourceOptions] = None,
email_domain: Optional[str] = None,
aad: Optional[_organization.SSOConnectionAadArgs] = None,
additional_email_domains: Optional[Sequence[str]] = None,
name: Optional[str] = None,
oidc: Optional[_organization.SSOConnectionOidcArgs] = None,
okta: Optional[_organization.SSOConnectionOktaArgs] = None,
synchronize_user_groups: Optional[bool] = None)func NewSSOConnection(ctx *Context, name string, args SSOConnectionArgs, opts ...ResourceOption) (*SSOConnection, error)public SSOConnection(string name, SSOConnectionArgs args, CustomResourceOptions? opts = null)
public SSOConnection(String name, SSOConnectionArgs args)
public SSOConnection(String name, SSOConnectionArgs args, CustomResourceOptions options)
type: castai:organization:SSOConnection
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "castai_s_s_o_connection" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args SSOConnectionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SSOConnectionArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SSOConnectionArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SSOConnectionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SSOConnectionArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
SSOConnection Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The SSOConnection resource accepts the following input properties:
- Email
Domain string - Email domain of the connection
- Aad
Pulumi.
Cast AI. Organization. Inputs. SSOConnection Aad - Azure AD connector
- Additional
Email List<string>Domains - Additional email domains that will be allowed to sign in via the connection
- Name string
- Connection name
- Oidc
Pulumi.
Cast AI. Organization. Inputs. SSOConnection Oidc - OIDC connector (e.g. Keycloak)
- Okta
Pulumi.
Cast AI. Organization. Inputs. SSOConnection Okta - Okta connector
- Synchronize
User boolGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- Email
Domain string - Email domain of the connection
- Aad
SSOConnection
Aad Args - Azure AD connector
- Additional
Email []stringDomains - Additional email domains that will be allowed to sign in via the connection
- Name string
- Connection name
- Oidc
SSOConnection
Oidc Args - OIDC connector (e.g. Keycloak)
- Okta
SSOConnection
Okta Args - Okta connector
- Synchronize
User boolGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- email_
domain string - Email domain of the connection
- aad object
- Azure AD connector
- additional_
email_ list(string)domains - Additional email domains that will be allowed to sign in via the connection
- name string
- Connection name
- oidc object
- OIDC connector (e.g. Keycloak)
- okta object
- Okta connector
- synchronize_
user_ boolgroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- email
Domain String - Email domain of the connection
- aad
SSOConnection
Aad - Azure AD connector
- additional
Email List<String>Domains - Additional email domains that will be allowed to sign in via the connection
- name String
- Connection name
- oidc
SSOConnection
Oidc - OIDC connector (e.g. Keycloak)
- okta
SSOConnection
Okta - Okta connector
- synchronize
User BooleanGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- email
Domain string - Email domain of the connection
- aad
organization
SSOConnection Aad - Azure AD connector
- additional
Email string[]Domains - Additional email domains that will be allowed to sign in via the connection
- name string
- Connection name
- oidc
organization
SSOConnection Oidc - OIDC connector (e.g. Keycloak)
- okta
organization
SSOConnection Okta - Okta connector
- synchronize
User booleanGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- email_
domain str - Email domain of the connection
- aad
organization.
SSOConnection Aad Args - Azure AD connector
- additional_
email_ Sequence[str]domains - Additional email domains that will be allowed to sign in via the connection
- name str
- Connection name
- oidc
organization.
SSOConnection Oidc Args - OIDC connector (e.g. Keycloak)
- okta
organization.
SSOConnection Okta Args - Okta connector
- synchronize_
user_ boolgroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- email
Domain String - Email domain of the connection
- aad Property Map
- Azure AD connector
- additional
Email List<String>Domains - Additional email domains that will be allowed to sign in via the connection
- name String
- Connection name
- oidc Property Map
- OIDC connector (e.g. Keycloak)
- okta Property Map
- Okta connector
- synchronize
User BooleanGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
Outputs
All input properties are implicitly available as output properties. Additionally, the SSOConnection resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Sync
Auth stringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- Id string
- The provider-assigned unique ID for this managed resource.
- Sync
Auth stringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- id string
- The provider-assigned unique ID for this managed resource.
- sync_
auth_ stringtoken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- id String
- The provider-assigned unique ID for this managed resource.
- sync
Auth StringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- id string
- The provider-assigned unique ID for this managed resource.
- sync
Auth stringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- id str
- The provider-assigned unique ID for this managed resource.
- sync_
auth_ strtoken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- id String
- The provider-assigned unique ID for this managed resource.
- sync
Auth StringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
Look up Existing SSOConnection Resource
Get an existing SSOConnection resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SSOConnectionState, opts?: CustomResourceOptions): SSOConnection@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
aad: Optional[_organization.SSOConnectionAadArgs] = None,
additional_email_domains: Optional[Sequence[str]] = None,
email_domain: Optional[str] = None,
name: Optional[str] = None,
oidc: Optional[_organization.SSOConnectionOidcArgs] = None,
okta: Optional[_organization.SSOConnectionOktaArgs] = None,
sync_auth_token: Optional[str] = None,
synchronize_user_groups: Optional[bool] = None) -> SSOConnectionfunc GetSSOConnection(ctx *Context, name string, id IDInput, state *SSOConnectionState, opts ...ResourceOption) (*SSOConnection, error)public static SSOConnection Get(string name, Input<string> id, SSOConnectionState? state, CustomResourceOptions? opts = null)public static SSOConnection get(String name, Output<String> id, SSOConnectionState state, CustomResourceOptions options)resources: _: type: castai:organization:SSOConnection get: id: ${id}import {
to = castai_s_s_o_connection.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Aad
Pulumi.
Cast AI. Organization. Inputs. SSOConnection Aad - Azure AD connector
- Additional
Email List<string>Domains - Additional email domains that will be allowed to sign in via the connection
- Email
Domain string - Email domain of the connection
- Name string
- Connection name
- Oidc
Pulumi.
Cast AI. Organization. Inputs. SSOConnection Oidc - OIDC connector (e.g. Keycloak)
- Okta
Pulumi.
Cast AI. Organization. Inputs. SSOConnection Okta - Okta connector
- Sync
Auth stringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- Synchronize
User boolGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- Aad
SSOConnection
Aad Args - Azure AD connector
- Additional
Email []stringDomains - Additional email domains that will be allowed to sign in via the connection
- Email
Domain string - Email domain of the connection
- Name string
- Connection name
- Oidc
SSOConnection
Oidc Args - OIDC connector (e.g. Keycloak)
- Okta
SSOConnection
Okta Args - Okta connector
- Sync
Auth stringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- Synchronize
User boolGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- aad object
- Azure AD connector
- additional_
email_ list(string)domains - Additional email domains that will be allowed to sign in via the connection
- email_
domain string - Email domain of the connection
- name string
- Connection name
- oidc object
- OIDC connector (e.g. Keycloak)
- okta object
- Okta connector
- sync_
auth_ stringtoken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- synchronize_
user_ boolgroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- aad
SSOConnection
Aad - Azure AD connector
- additional
Email List<String>Domains - Additional email domains that will be allowed to sign in via the connection
- email
Domain String - Email domain of the connection
- name String
- Connection name
- oidc
SSOConnection
Oidc - OIDC connector (e.g. Keycloak)
- okta
SSOConnection
Okta - Okta connector
- sync
Auth StringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- synchronize
User BooleanGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- aad
organization
SSOConnection Aad - Azure AD connector
- additional
Email string[]Domains - Additional email domains that will be allowed to sign in via the connection
- email
Domain string - Email domain of the connection
- name string
- Connection name
- oidc
organization
SSOConnection Oidc - OIDC connector (e.g. Keycloak)
- okta
organization
SSOConnection Okta - Okta connector
- sync
Auth stringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- synchronize
User booleanGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- aad
organization.
SSOConnection Aad Args - Azure AD connector
- additional_
email_ Sequence[str]domains - Additional email domains that will be allowed to sign in via the connection
- email_
domain str - Email domain of the connection
- name str
- Connection name
- oidc
organization.
SSOConnection Oidc Args - OIDC connector (e.g. Keycloak)
- okta
organization.
SSOConnection Okta Args - Okta connector
- sync_
auth_ strtoken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- synchronize_
user_ boolgroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
- aad Property Map
- Azure AD connector
- additional
Email List<String>Domains - Additional email domains that will be allowed to sign in via the connection
- email
Domain String - Email domain of the connection
- name String
- Connection name
- oidc Property Map
- OIDC connector (e.g. Keycloak)
- okta Property Map
- Okta connector
- sync
Auth StringToken - Auth token generated when synchronizeUserGroups is enabled. Only populated on the transition from false to true.
- synchronize
User BooleanGroups - When enabled, user groups from the identity provider will be synchronized with CAST AI. A sync auth token is generated on activation and stored in sync_auth_token.
Supporting Types
SSOConnectionAad, SSOConnectionAadArgs
- Ad
Domain string - Azure AD domain
- Client
Id string - Azure AD client ID
- Client
Secret string - Azure AD client secret
- Ad
Domain string - Azure AD domain
- Client
Id string - Azure AD client ID
- Client
Secret string - Azure AD client secret
- ad_
domain string - Azure AD domain
- client_
id string - Azure AD client ID
- client_
secret string - Azure AD client secret
- ad
Domain String - Azure AD domain
- client
Id String - Azure AD client ID
- client
Secret String - Azure AD client secret
- ad
Domain string - Azure AD domain
- client
Id string - Azure AD client ID
- client
Secret string - Azure AD client secret
- ad_
domain str - Azure AD domain
- client_
id str - Azure AD client ID
- client_
secret str - Azure AD client secret
- ad
Domain String - Azure AD domain
- client
Id String - Azure AD client ID
- client
Secret String - Azure AD client secret
SSOConnectionOidc, SSOConnectionOidcArgs
- Client
Id string - OIDC client ID
- Client
Secret string - OIDC client secret
- Issuer
Url string - Issuer URL of the OpenID Connect provider
- Type string
- OIDC connection type (TYPE_BACK_CHANNEL or TYPE_FRONT_CHANNEL)
- Client
Id string - OIDC client ID
- Client
Secret string - OIDC client secret
- Issuer
Url string - Issuer URL of the OpenID Connect provider
- Type string
- OIDC connection type (TYPE_BACK_CHANNEL or TYPE_FRONT_CHANNEL)
- client_
id string - OIDC client ID
- client_
secret string - OIDC client secret
- issuer_
url string - Issuer URL of the OpenID Connect provider
- type string
- OIDC connection type (TYPE_BACK_CHANNEL or TYPE_FRONT_CHANNEL)
- client
Id String - OIDC client ID
- client
Secret String - OIDC client secret
- issuer
Url String - Issuer URL of the OpenID Connect provider
- type String
- OIDC connection type (TYPE_BACK_CHANNEL or TYPE_FRONT_CHANNEL)
- client
Id string - OIDC client ID
- client
Secret string - OIDC client secret
- issuer
Url string - Issuer URL of the OpenID Connect provider
- type string
- OIDC connection type (TYPE_BACK_CHANNEL or TYPE_FRONT_CHANNEL)
- client_
id str - OIDC client ID
- client_
secret str - OIDC client secret
- issuer_
url str - Issuer URL of the OpenID Connect provider
- type str
- OIDC connection type (TYPE_BACK_CHANNEL or TYPE_FRONT_CHANNEL)
- client
Id String - OIDC client ID
- client
Secret String - OIDC client secret
- issuer
Url String - Issuer URL of the OpenID Connect provider
- type String
- OIDC connection type (TYPE_BACK_CHANNEL or TYPE_FRONT_CHANNEL)
SSOConnectionOkta, SSOConnectionOktaArgs
- Client
Id string - Okta client ID
- Client
Secret string - Okta client secret
- Okta
Domain string - Okta domain
- Client
Id string - Okta client ID
- Client
Secret string - Okta client secret
- Okta
Domain string - Okta domain
- client_
id string - Okta client ID
- client_
secret string - Okta client secret
- okta_
domain string - Okta domain
- client
Id String - Okta client ID
- client
Secret String - Okta client secret
- okta
Domain String - Okta domain
- client
Id string - Okta client ID
- client
Secret string - Okta client secret
- okta
Domain string - Okta domain
- client_
id str - Okta client ID
- client_
secret str - Okta client secret
- okta_
domain str - Okta domain
- client
Id String - Okta client ID
- client
Secret String - Okta client secret
- okta
Domain String - Okta domain
Package Details
- Repository
- castai castai/pulumi-castai
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
castaiTerraform Provider.
Viewing docs for CAST AI v8.60.0
published on Wednesday, Aug 19, 2026 by CAST AI
published on Wednesday, Aug 19, 2026 by CAST AI