Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. FusionAuth
  3. API Docs
  4. FusionAuthIdpGoogle
FusionAuth v6.0.2 published on Sunday, Feb 9, 2025 by Theo Gravity
theogravity/pulumi-fusionauth

fusionauth.FusionAuthIdpGoogle

Explore with Pulumi AI

fusionauth logo
FusionAuth v6.0.2 published on Sunday, Feb 9, 2025 by Theo Gravity
theogravity/pulumi-fusionauth

    # Google Identity Provider Resource

    The Google identity provider type will use the Google OAuth v2.0 login API. it will provide a Login with Google button on FusionAuth’s login page that will leverage the Google login pop-up dialog. Additionally, this identity provider will call Google’s /oauth2/v3/tokeninfo API to load additional details about the user and store them in FusionAuth.

    The email address returned by the Google Token info API will be used to create or lookup the existing user. Additional claims returned by Google can be used to reconcile the User to FusionAuth by using a Google Reconcile Lambda. Unless you assign a reconcile lambda to this provider, on the email address will be used from the available claims returned by Google.

    FusionAuth will also store the Google access_token that is returned from the login pop-up dialog in the UserRegistration object inside the tokens Map. This Map stores the tokens from the various identity providers so that you can use them in your application to call their APIs.

    Google Identity Providers API

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as fusionauth from "pulumi-fusionauth";

const google = new fusionauth.FusionAuthIdpGoogle("google", {
    applicationConfigurations: [{
        applicationId: fusionauth_application.myapp.id,
        createRegistration: true,
        enabled: true,
    }],
    buttonText: "Login with Google",
    debug: false,
    clientId: "254311943570-8e2i2hds0qdnee4124socceeh2q2mtjl.apps.googleusercontent.com",
    clientSecret: "BRr7x7xz_-cXxIFznBDIdxF1",
    scope: "profile",
});

    import pulumi
import theogravity_pulumi_fusionauth as fusionauth

google = fusionauth.FusionAuthIdpGoogle("google",
    application_configurations=[{
        "application_id": fusionauth_application["myapp"]["id"],
        "create_registration": True,
        "enabled": True,
    }],
    button_text="Login with Google",
    debug=False,
    client_id="254311943570-8e2i2hds0qdnee4124socceeh2q2mtjl.apps.googleusercontent.com",
    client_secret="BRr7x7xz_-cXxIFznBDIdxF1",
    scope="profile")

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/theogravity/pulumi-fusionauth/sdk/go/fusionauth"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := fusionauth.NewFusionAuthIdpGoogle(ctx, "google", &fusionauth.FusionAuthIdpGoogleArgs{
			ApplicationConfigurations: fusionauth.FusionAuthIdpGoogleApplicationConfigurationArray{
				&fusionauth.FusionAuthIdpGoogleApplicationConfigurationArgs{
					ApplicationId:      pulumi.Any(fusionauth_application.Myapp.Id),
					CreateRegistration: pulumi.Bool(true),
					Enabled:            pulumi.Bool(true),
				},
			},
			ButtonText:   pulumi.String("Login with Google"),
			Debug:        pulumi.Bool(false),
			ClientId:     pulumi.String("254311943570-8e2i2hds0qdnee4124socceeh2q2mtjl.apps.googleusercontent.com"),
			ClientSecret: pulumi.String("BRr7x7xz_-cXxIFznBDIdxF1"),
			Scope:        pulumi.String("profile"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fusionauth = theogravity.Fusionauth;

return await Deployment.RunAsync(() => 
{
    var google = new Fusionauth.FusionAuthIdpGoogle("google", new()
    {
        ApplicationConfigurations = new[]
        {
            new Fusionauth.Inputs.FusionAuthIdpGoogleApplicationConfigurationArgs
            {
                ApplicationId = fusionauth_application.Myapp.Id,
                CreateRegistration = true,
                Enabled = true,
            },
        },
        ButtonText = "Login with Google",
        Debug = false,
        ClientId = "254311943570-8e2i2hds0qdnee4124socceeh2q2mtjl.apps.googleusercontent.com",
        ClientSecret = "BRr7x7xz_-cXxIFznBDIdxF1",
        Scope = "profile",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fusionauth.FusionAuthIdpGoogle;
import com.pulumi.fusionauth.FusionAuthIdpGoogleArgs;
import com.pulumi.fusionauth.inputs.FusionAuthIdpGoogleApplicationConfigurationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var google = new FusionAuthIdpGoogle("google", FusionAuthIdpGoogleArgs.builder()
            .applicationConfigurations(FusionAuthIdpGoogleApplicationConfigurationArgs.builder()
                .applicationId(fusionauth_application.myapp().id())
                .createRegistration(true)
                .enabled(true)
                .build())
            .buttonText("Login with Google")
            .debug(false)
            .clientId("254311943570-8e2i2hds0qdnee4124socceeh2q2mtjl.apps.googleusercontent.com")
            .clientSecret("BRr7x7xz_-cXxIFznBDIdxF1")
            .scope("profile")
            .build());

    }
}

    resources:
  google:
    type: fusionauth:FusionAuthIdpGoogle
    properties:
      applicationConfigurations:
        - applicationId: ${fusionauth_application.myapp.id}
          createRegistration: true
          enabled: true
      buttonText: Login with Google
      debug: false
      clientId: 254311943570-8e2i2hds0qdnee4124socceeh2q2mtjl.apps.googleusercontent.com
      clientSecret: BRr7x7xz_-cXxIFznBDIdxF1
      scope: profile

    Create FusionAuthIdpGoogle Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new FusionAuthIdpGoogle(name: string, args: FusionAuthIdpGoogleArgs, opts?: CustomResourceOptions);
    @overload
def FusionAuthIdpGoogle(resource_name: str,
                        args: FusionAuthIdpGoogleArgs,
                        opts: Optional[ResourceOptions] = None)

@overload
def FusionAuthIdpGoogle(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        button_text: Optional[str] = None,
                        client_id: Optional[str] = None,
                        application_configurations: Optional[Sequence[FusionAuthIdpGoogleApplicationConfigurationArgs]] = None,
                        client_secret: Optional[str] = None,
                        debug: Optional[bool] = None,
                        enabled: Optional[bool] = None,
                        lambda_reconcile_id: Optional[str] = None,
                        linking_strategy: Optional[str] = None,
                        login_method: Optional[str] = None,
                        properties: Optional[FusionAuthIdpGooglePropertiesArgs] = None,
                        scope: Optional[str] = None,
                        tenant_configurations: Optional[Sequence[FusionAuthIdpGoogleTenantConfigurationArgs]] = None)
    func NewFusionAuthIdpGoogle(ctx *Context, name string, args FusionAuthIdpGoogleArgs, opts ...ResourceOption) (*FusionAuthIdpGoogle, error)
    public FusionAuthIdpGoogle(string name, FusionAuthIdpGoogleArgs args, CustomResourceOptions? opts = null)
    public FusionAuthIdpGoogle(String name, FusionAuthIdpGoogleArgs args)
public FusionAuthIdpGoogle(String name, FusionAuthIdpGoogleArgs args, CustomResourceOptions options)

    type: fusionauth:FusionAuthIdpGoogle
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args FusionAuthIdpGoogleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FusionAuthIdpGoogleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FusionAuthIdpGoogleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FusionAuthIdpGoogleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FusionAuthIdpGoogleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var fusionAuthIdpGoogleResource = new Fusionauth.FusionAuthIdpGoogle("fusionAuthIdpGoogleResource", new()
{
    ButtonText = "string",
    ClientId = "string",
    ApplicationConfigurations = new[]
    {
        new Fusionauth.Inputs.FusionAuthIdpGoogleApplicationConfigurationArgs
        {
            ApplicationId = "string",
            ButtonText = "string",
            ClientId = "string",
            ClientSecret = "string",
            CreateRegistration = false,
            Enabled = false,
            Properties = new Fusionauth.Inputs.FusionAuthIdpGoogleApplicationConfigurationPropertiesArgs
            {
                Api = "string",
                Button = "string",
            },
            Scope = "string",
        },
    },
    ClientSecret = "string",
    Debug = false,
    Enabled = false,
    LambdaReconcileId = "string",
    LinkingStrategy = "string",
    LoginMethod = "string",
    Properties = new Fusionauth.Inputs.FusionAuthIdpGooglePropertiesArgs
    {
        Api = "string",
        Button = "string",
    },
    Scope = "string",
    TenantConfigurations = new[]
    {
        new Fusionauth.Inputs.FusionAuthIdpGoogleTenantConfigurationArgs
        {
            LimitUserLinkCountEnabled = false,
            LimitUserLinkCountMaximumLinks = 0,
            TenantId = "string",
        },
    },
});

    example, err := fusionauth.NewFusionAuthIdpGoogle(ctx, "fusionAuthIdpGoogleResource", &fusionauth.FusionAuthIdpGoogleArgs{
	ButtonText: pulumi.String("string"),
	ClientId:   pulumi.String("string"),
	ApplicationConfigurations: fusionauth.FusionAuthIdpGoogleApplicationConfigurationArray{
		&fusionauth.FusionAuthIdpGoogleApplicationConfigurationArgs{
			ApplicationId:      pulumi.String("string"),
			ButtonText:         pulumi.String("string"),
			ClientId:           pulumi.String("string"),
			ClientSecret:       pulumi.String("string"),
			CreateRegistration: pulumi.Bool(false),
			Enabled:            pulumi.Bool(false),
			Properties: &fusionauth.FusionAuthIdpGoogleApplicationConfigurationPropertiesArgs{
				Api:    pulumi.String("string"),
				Button: pulumi.String("string"),
			},
			Scope: pulumi.String("string"),
		},
	},
	ClientSecret:      pulumi.String("string"),
	Debug:             pulumi.Bool(false),
	Enabled:           pulumi.Bool(false),
	LambdaReconcileId: pulumi.String("string"),
	LinkingStrategy:   pulumi.String("string"),
	LoginMethod:       pulumi.String("string"),
	Properties: &fusionauth.FusionAuthIdpGooglePropertiesArgs{
		Api:    pulumi.String("string"),
		Button: pulumi.String("string"),
	},
	Scope: pulumi.String("string"),
	TenantConfigurations: fusionauth.FusionAuthIdpGoogleTenantConfigurationArray{
		&fusionauth.FusionAuthIdpGoogleTenantConfigurationArgs{
			LimitUserLinkCountEnabled:      pulumi.Bool(false),
			LimitUserLinkCountMaximumLinks: pulumi.Int(0),
			TenantId:                       pulumi.String("string"),
		},
	},
})

    var fusionAuthIdpGoogleResource = new FusionAuthIdpGoogle("fusionAuthIdpGoogleResource", FusionAuthIdpGoogleArgs.builder()
    .buttonText("string")
    .clientId("string")
    .applicationConfigurations(FusionAuthIdpGoogleApplicationConfigurationArgs.builder()
        .applicationId("string")
        .buttonText("string")
        .clientId("string")
        .clientSecret("string")
        .createRegistration(false)
        .enabled(false)
        .properties(FusionAuthIdpGoogleApplicationConfigurationPropertiesArgs.builder()
            .api("string")
            .button("string")
            .build())
        .scope("string")
        .build())
    .clientSecret("string")
    .debug(false)
    .enabled(false)
    .lambdaReconcileId("string")
    .linkingStrategy("string")
    .loginMethod("string")
    .properties(FusionAuthIdpGooglePropertiesArgs.builder()
        .api("string")
        .button("string")
        .build())
    .scope("string")
    .tenantConfigurations(FusionAuthIdpGoogleTenantConfigurationArgs.builder()
        .limitUserLinkCountEnabled(false)
        .limitUserLinkCountMaximumLinks(0)
        .tenantId("string")
        .build())
    .build());

    fusion_auth_idp_google_resource = fusionauth.FusionAuthIdpGoogle("fusionAuthIdpGoogleResource",
    button_text="string",
    client_id="string",
    application_configurations=[{
        "application_id": "string",
        "button_text": "string",
        "client_id": "string",
        "client_secret": "string",
        "create_registration": False,
        "enabled": False,
        "properties": {
            "api": "string",
            "button": "string",
        },
        "scope": "string",
    }],
    client_secret="string",
    debug=False,
    enabled=False,
    lambda_reconcile_id="string",
    linking_strategy="string",
    login_method="string",
    properties={
        "api": "string",
        "button": "string",
    },
    scope="string",
    tenant_configurations=[{
        "limit_user_link_count_enabled": False,
        "limit_user_link_count_maximum_links": 0,
        "tenant_id": "string",
    }])

    const fusionAuthIdpGoogleResource = new fusionauth.FusionAuthIdpGoogle("fusionAuthIdpGoogleResource", {
    buttonText: "string",
    clientId: "string",
    applicationConfigurations: [{
        applicationId: "string",
        buttonText: "string",
        clientId: "string",
        clientSecret: "string",
        createRegistration: false,
        enabled: false,
        properties: {
            api: "string",
            button: "string",
        },
        scope: "string",
    }],
    clientSecret: "string",
    debug: false,
    enabled: false,
    lambdaReconcileId: "string",
    linkingStrategy: "string",
    loginMethod: "string",
    properties: {
        api: "string",
        button: "string",
    },
    scope: "string",
    tenantConfigurations: [{
        limitUserLinkCountEnabled: false,
        limitUserLinkCountMaximumLinks: 0,
        tenantId: "string",
    }],
});

    type: fusionauth:FusionAuthIdpGoogle
properties:
    applicationConfigurations:
        - applicationId: string
          buttonText: string
          clientId: string
          clientSecret: string
          createRegistration: false
          enabled: false
          properties:
            api: string
            button: string
          scope: string
    buttonText: string
    clientId: string
    clientSecret: string
    debug: false
    enabled: false
    lambdaReconcileId: string
    linkingStrategy: string
    loginMethod: string
    properties:
        api: string
        button: string
    scope: string
    tenantConfigurations:
        - limitUserLinkCountEnabled: false
          limitUserLinkCountMaximumLinks: 0
          tenantId: string

    FusionAuthIdpGoogle Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The FusionAuthIdpGoogle resource accepts the following input properties:

    ButtonText string
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    ClientId string
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    ApplicationConfigurations List<theogravity.Fusionauth.Inputs.FusionAuthIdpGoogleApplicationConfiguration>
    The configuration for each Application that the identity provider is enabled for.
    ClientSecret string
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    Debug bool
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    Enabled bool
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    LambdaReconcileId string
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    LinkingStrategy string
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    LoginMethod string
    The login method to use for this Identity Provider.
    Properties theogravity.Fusionauth.Inputs.FusionAuthIdpGoogleProperties
    An object to hold configuration parameters for the Google Identity Services API.
    Scope string
    The top-level scope that you are requesting from Google.
    TenantConfigurations List<theogravity.Fusionauth.Inputs.FusionAuthIdpGoogleTenantConfiguration>
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    ButtonText string
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    ClientId string
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    ApplicationConfigurations []FusionAuthIdpGoogleApplicationConfigurationArgs
    The configuration for each Application that the identity provider is enabled for.
    ClientSecret string
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    Debug bool
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    Enabled bool
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    LambdaReconcileId string
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    LinkingStrategy string
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    LoginMethod string
    The login method to use for this Identity Provider.
    Properties FusionAuthIdpGooglePropertiesArgs
    An object to hold configuration parameters for the Google Identity Services API.
    Scope string
    The top-level scope that you are requesting from Google.
    TenantConfigurations []FusionAuthIdpGoogleTenantConfigurationArgs
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    buttonText String
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    clientId String
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    applicationConfigurations List<FusionAuthIdpGoogleApplicationConfiguration>
    The configuration for each Application that the identity provider is enabled for.
    clientSecret String
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    debug Boolean
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    enabled Boolean
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    lambdaReconcileId String
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    linkingStrategy String
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    loginMethod String
    The login method to use for this Identity Provider.
    properties FusionAuthIdpGoogleProperties
    An object to hold configuration parameters for the Google Identity Services API.
    scope String
    The top-level scope that you are requesting from Google.
    tenantConfigurations List<FusionAuthIdpGoogleTenantConfiguration>
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    buttonText string
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    clientId string
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    applicationConfigurations FusionAuthIdpGoogleApplicationConfiguration[]
    The configuration for each Application that the identity provider is enabled for.
    clientSecret string
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    debug boolean
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    enabled boolean
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    lambdaReconcileId string
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    linkingStrategy string
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    loginMethod string
    The login method to use for this Identity Provider.
    properties FusionAuthIdpGoogleProperties
    An object to hold configuration parameters for the Google Identity Services API.
    scope string
    The top-level scope that you are requesting from Google.
    tenantConfigurations FusionAuthIdpGoogleTenantConfiguration[]
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    button_text str
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    client_id str
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    application_configurations Sequence[FusionAuthIdpGoogleApplicationConfigurationArgs]
    The configuration for each Application that the identity provider is enabled for.
    client_secret str
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    debug bool
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    enabled bool
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    lambda_reconcile_id str
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    linking_strategy str
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    login_method str
    The login method to use for this Identity Provider.
    properties FusionAuthIdpGooglePropertiesArgs
    An object to hold configuration parameters for the Google Identity Services API.
    scope str
    The top-level scope that you are requesting from Google.
    tenant_configurations Sequence[FusionAuthIdpGoogleTenantConfigurationArgs]
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    buttonText String
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    clientId String
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    applicationConfigurations List<Property Map>
    The configuration for each Application that the identity provider is enabled for.
    clientSecret String
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    debug Boolean
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    enabled Boolean
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    lambdaReconcileId String
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    linkingStrategy String
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    loginMethod String
    The login method to use for this Identity Provider.
    properties Property Map
    An object to hold configuration parameters for the Google Identity Services API.
    scope String
    The top-level scope that you are requesting from Google.
    tenantConfigurations List<Property Map>
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the FusionAuthIdpGoogle resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing FusionAuthIdpGoogle Resource

    Get an existing FusionAuthIdpGoogle resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: FusionAuthIdpGoogleState, opts?: CustomResourceOptions): FusionAuthIdpGoogle
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        application_configurations: Optional[Sequence[FusionAuthIdpGoogleApplicationConfigurationArgs]] = None,
        button_text: Optional[str] = None,
        client_id: Optional[str] = None,
        client_secret: Optional[str] = None,
        debug: Optional[bool] = None,
        enabled: Optional[bool] = None,
        lambda_reconcile_id: Optional[str] = None,
        linking_strategy: Optional[str] = None,
        login_method: Optional[str] = None,
        properties: Optional[FusionAuthIdpGooglePropertiesArgs] = None,
        scope: Optional[str] = None,
        tenant_configurations: Optional[Sequence[FusionAuthIdpGoogleTenantConfigurationArgs]] = None) -> FusionAuthIdpGoogle
    func GetFusionAuthIdpGoogle(ctx *Context, name string, id IDInput, state *FusionAuthIdpGoogleState, opts ...ResourceOption) (*FusionAuthIdpGoogle, error)
    public static FusionAuthIdpGoogle Get(string name, Input<string> id, FusionAuthIdpGoogleState? state, CustomResourceOptions? opts = null)
    public static FusionAuthIdpGoogle get(String name, Output<String> id, FusionAuthIdpGoogleState state, CustomResourceOptions options)
    resources:  _:    type: fusionauth:FusionAuthIdpGoogle    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApplicationConfigurations List<theogravity.Fusionauth.Inputs.FusionAuthIdpGoogleApplicationConfiguration>
    The configuration for each Application that the identity provider is enabled for.
    ButtonText string
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    ClientId string
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    ClientSecret string
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    Debug bool
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    Enabled bool
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    LambdaReconcileId string
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    LinkingStrategy string
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    LoginMethod string
    The login method to use for this Identity Provider.
    Properties theogravity.Fusionauth.Inputs.FusionAuthIdpGoogleProperties
    An object to hold configuration parameters for the Google Identity Services API.
    Scope string
    The top-level scope that you are requesting from Google.
    TenantConfigurations List<theogravity.Fusionauth.Inputs.FusionAuthIdpGoogleTenantConfiguration>
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    ApplicationConfigurations []FusionAuthIdpGoogleApplicationConfigurationArgs
    The configuration for each Application that the identity provider is enabled for.
    ButtonText string
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    ClientId string
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    ClientSecret string
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    Debug bool
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    Enabled bool
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    LambdaReconcileId string
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    LinkingStrategy string
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    LoginMethod string
    The login method to use for this Identity Provider.
    Properties FusionAuthIdpGooglePropertiesArgs
    An object to hold configuration parameters for the Google Identity Services API.
    Scope string
    The top-level scope that you are requesting from Google.
    TenantConfigurations []FusionAuthIdpGoogleTenantConfigurationArgs
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    applicationConfigurations List<FusionAuthIdpGoogleApplicationConfiguration>
    The configuration for each Application that the identity provider is enabled for.
    buttonText String
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    clientId String
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    clientSecret String
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    debug Boolean
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    enabled Boolean
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    lambdaReconcileId String
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    linkingStrategy String
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    loginMethod String
    The login method to use for this Identity Provider.
    properties FusionAuthIdpGoogleProperties
    An object to hold configuration parameters for the Google Identity Services API.
    scope String
    The top-level scope that you are requesting from Google.
    tenantConfigurations List<FusionAuthIdpGoogleTenantConfiguration>
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    applicationConfigurations FusionAuthIdpGoogleApplicationConfiguration[]
    The configuration for each Application that the identity provider is enabled for.
    buttonText string
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    clientId string
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    clientSecret string
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    debug boolean
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    enabled boolean
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    lambdaReconcileId string
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    linkingStrategy string
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    loginMethod string
    The login method to use for this Identity Provider.
    properties FusionAuthIdpGoogleProperties
    An object to hold configuration parameters for the Google Identity Services API.
    scope string
    The top-level scope that you are requesting from Google.
    tenantConfigurations FusionAuthIdpGoogleTenantConfiguration[]
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    application_configurations Sequence[FusionAuthIdpGoogleApplicationConfigurationArgs]
    The configuration for each Application that the identity provider is enabled for.
    button_text str
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    client_id str
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    client_secret str
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    debug bool
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    enabled bool
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    lambda_reconcile_id str
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    linking_strategy str
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    login_method str
    The login method to use for this Identity Provider.
    properties FusionAuthIdpGooglePropertiesArgs
    An object to hold configuration parameters for the Google Identity Services API.
    scope str
    The top-level scope that you are requesting from Google.
    tenant_configurations Sequence[FusionAuthIdpGoogleTenantConfigurationArgs]
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.
    applicationConfigurations List<Property Map>
    The configuration for each Application that the identity provider is enabled for.
    buttonText String
    The top-level button text to use on the FusionAuth login page for this Identity Provider.
    clientId String
    The top-level Google client id for your Application. This value is retrieved from the Google developer website when you setup your Google developer account.
    clientSecret String
    The top-level client secret to use with the Google Identity Provider when retrieving the long-lived token. This value is retrieved from the Google developer website when you setup your Google developer account.
    debug Boolean
    Determines if debug is enabled for this provider. When enabled, each time this provider is invoked to reconcile a login an Event Log will be created.
    enabled Boolean
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    lambdaReconcileId String
    The unique Id of the lambda to used during the user reconcile process to map custom claims from the external identity provider to the FusionAuth user.
    linkingStrategy String
    The linking strategy to use when creating the link between the {idp_display_name} Identity Provider and the user.
    loginMethod String
    The login method to use for this Identity Provider.
    properties Property Map
    An object to hold configuration parameters for the Google Identity Services API.
    scope String
    The top-level scope that you are requesting from Google.
    tenantConfigurations List<Property Map>
    The configuration for each Tenant that limits the number of links a user may have for a particular identity provider.

    Supporting Types

    FusionAuthIdpGoogleApplicationConfiguration, FusionAuthIdpGoogleApplicationConfigurationArgs

    ApplicationId string
    ID of the Application to apply this configuration to.
    ButtonText string
    This is an optional Application specific override for the top level button text.
    ClientId string
    This is an optional Application specific override for the top level client id.
    ClientSecret string
    This is an optional Application specific override for the top level client secret.
    CreateRegistration bool
    Determines if a UserRegistration is created for the User automatically or not. If a user doesn’t exist in FusionAuth and logs in through an identity provider, this boolean controls whether or not FusionAuth creates a registration for the User in the Application they are logging into.
    Enabled bool
    Determines if this identity provider is enabled for the Application specified by the applicationId key.
    Properties theogravity.Fusionauth.Inputs.FusionAuthIdpGoogleApplicationConfigurationProperties
    This is an optional Application specific override for the top level properties.
    Scope string
    This is an optional Application specific override for for the top level scope.
    ApplicationId string
    ID of the Application to apply this configuration to.
    ButtonText string
    This is an optional Application specific override for the top level button text.
    ClientId string
    This is an optional Application specific override for the top level client id.
    ClientSecret string
    This is an optional Application specific override for the top level client secret.
    CreateRegistration bool
    Determines if a UserRegistration is created for the User automatically or not. If a user doesn’t exist in FusionAuth and logs in through an identity provider, this boolean controls whether or not FusionAuth creates a registration for the User in the Application they are logging into.
    Enabled bool
    Determines if this identity provider is enabled for the Application specified by the applicationId key.
    Properties FusionAuthIdpGoogleApplicationConfigurationProperties
    This is an optional Application specific override for the top level properties.
    Scope string
    This is an optional Application specific override for for the top level scope.
    applicationId String
    ID of the Application to apply this configuration to.
    buttonText String
    This is an optional Application specific override for the top level button text.
    clientId String
    This is an optional Application specific override for the top level client id.
    clientSecret String
    This is an optional Application specific override for the top level client secret.
    createRegistration Boolean
    Determines if a UserRegistration is created for the User automatically or not. If a user doesn’t exist in FusionAuth and logs in through an identity provider, this boolean controls whether or not FusionAuth creates a registration for the User in the Application they are logging into.
    enabled Boolean
    Determines if this identity provider is enabled for the Application specified by the applicationId key.
    properties FusionAuthIdpGoogleApplicationConfigurationProperties
    This is an optional Application specific override for the top level properties.
    scope String
    This is an optional Application specific override for for the top level scope.
    applicationId string
    ID of the Application to apply this configuration to.
    buttonText string
    This is an optional Application specific override for the top level button text.
    clientId string
    This is an optional Application specific override for the top level client id.
    clientSecret string
    This is an optional Application specific override for the top level client secret.
    createRegistration boolean
    Determines if a UserRegistration is created for the User automatically or not. If a user doesn’t exist in FusionAuth and logs in through an identity provider, this boolean controls whether or not FusionAuth creates a registration for the User in the Application they are logging into.
    enabled boolean
    Determines if this identity provider is enabled for the Application specified by the applicationId key.
    properties FusionAuthIdpGoogleApplicationConfigurationProperties
    This is an optional Application specific override for the top level properties.
    scope string
    This is an optional Application specific override for for the top level scope.
    application_id str
    ID of the Application to apply this configuration to.
    button_text str
    This is an optional Application specific override for the top level button text.
    client_id str
    This is an optional Application specific override for the top level client id.
    client_secret str
    This is an optional Application specific override for the top level client secret.
    create_registration bool
    Determines if a UserRegistration is created for the User automatically or not. If a user doesn’t exist in FusionAuth and logs in through an identity provider, this boolean controls whether or not FusionAuth creates a registration for the User in the Application they are logging into.
    enabled bool
    Determines if this identity provider is enabled for the Application specified by the applicationId key.
    properties FusionAuthIdpGoogleApplicationConfigurationProperties
    This is an optional Application specific override for the top level properties.
    scope str
    This is an optional Application specific override for for the top level scope.
    applicationId String
    ID of the Application to apply this configuration to.
    buttonText String
    This is an optional Application specific override for the top level button text.
    clientId String
    This is an optional Application specific override for the top level client id.
    clientSecret String
    This is an optional Application specific override for the top level client secret.
    createRegistration Boolean
    Determines if a UserRegistration is created for the User automatically or not. If a user doesn’t exist in FusionAuth and logs in through an identity provider, this boolean controls whether or not FusionAuth creates a registration for the User in the Application they are logging into.
    enabled Boolean
    Determines if this identity provider is enabled for the Application specified by the applicationId key.
    properties Property Map
    This is an optional Application specific override for the top level properties.
    scope String
    This is an optional Application specific override for for the top level scope.

    FusionAuthIdpGoogleApplicationConfigurationProperties, FusionAuthIdpGoogleApplicationConfigurationPropertiesArgs

    Api string
    This is an optional Application specific override for the top level properties.api . If this login_method is set to UsePopup, or the Application configuration is unset and the top level loginMethod is set to UsePopup, and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    Button string
    This is an optional Application specific override for the top level button.
    Api string
    This is an optional Application specific override for the top level properties.api . If this login_method is set to UsePopup, or the Application configuration is unset and the top level loginMethod is set to UsePopup, and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    Button string
    This is an optional Application specific override for the top level button.
    api String
    This is an optional Application specific override for the top level properties.api . If this login_method is set to UsePopup, or the Application configuration is unset and the top level loginMethod is set to UsePopup, and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    button String
    This is an optional Application specific override for the top level button.
    api string
    This is an optional Application specific override for the top level properties.api . If this login_method is set to UsePopup, or the Application configuration is unset and the top level loginMethod is set to UsePopup, and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    button string
    This is an optional Application specific override for the top level button.
    api str
    This is an optional Application specific override for the top level properties.api . If this login_method is set to UsePopup, or the Application configuration is unset and the top level loginMethod is set to UsePopup, and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    button str
    This is an optional Application specific override for the top level button.
    api String
    This is an optional Application specific override for the top level properties.api . If this login_method is set to UsePopup, or the Application configuration is unset and the top level loginMethod is set to UsePopup, and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    button String
    This is an optional Application specific override for the top level button.

    FusionAuthIdpGoogleProperties, FusionAuthIdpGooglePropertiesArgs

    Api string
    Google Identity Services login API configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to initialize the API via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name. If the login_method is set to UsePopup and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    Button string
    Google Identity Services button configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to render the login button via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name.
    Api string
    Google Identity Services login API configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to initialize the API via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name. If the login_method is set to UsePopup and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    Button string
    Google Identity Services button configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to render the login button via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name.
    api String
    Google Identity Services login API configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to initialize the API via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name. If the login_method is set to UsePopup and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    button String
    Google Identity Services button configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to render the login button via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name.
    api string
    Google Identity Services login API configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to initialize the API via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name. If the login_method is set to UsePopup and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    button string
    Google Identity Services button configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to render the login button via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name.
    api str
    Google Identity Services login API configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to initialize the API via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name. If the login_method is set to UsePopup and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    button str
    Google Identity Services button configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to render the login button via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name.
    api String
    Google Identity Services login API configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to initialize the API via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name. If the login_method is set to UsePopup and this value contains the conflicting ux_mode=redirect property, that single property will be replaced with ux_mode=popup.
    button String
    Google Identity Services button configuration in a properties file formatted String. Any attribute from Google's documentation can be added. Properties can be referenced in templates that support Google login to render the login button via HTML or JavaScript. The properties specified in this field should not include the data- prefix on the property name.

    FusionAuthIdpGoogleTenantConfiguration, FusionAuthIdpGoogleTenantConfigurationArgs

    LimitUserLinkCountEnabled bool
    When enabled, the number of identity provider links a user may create is enforced by maximumLinks
    LimitUserLinkCountMaximumLinks int
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    TenantId string
    The unique Id of the tenant that this configuration applies to.
    LimitUserLinkCountEnabled bool
    When enabled, the number of identity provider links a user may create is enforced by maximumLinks
    LimitUserLinkCountMaximumLinks int
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    TenantId string
    The unique Id of the tenant that this configuration applies to.
    limitUserLinkCountEnabled Boolean
    When enabled, the number of identity provider links a user may create is enforced by maximumLinks
    limitUserLinkCountMaximumLinks Integer
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    tenantId String
    The unique Id of the tenant that this configuration applies to.
    limitUserLinkCountEnabled boolean
    When enabled, the number of identity provider links a user may create is enforced by maximumLinks
    limitUserLinkCountMaximumLinks number
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    tenantId string
    The unique Id of the tenant that this configuration applies to.
    limit_user_link_count_enabled bool
    When enabled, the number of identity provider links a user may create is enforced by maximumLinks
    limit_user_link_count_maximum_links int
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    tenant_id str
    The unique Id of the tenant that this configuration applies to.
    limitUserLinkCountEnabled Boolean
    When enabled, the number of identity provider links a user may create is enforced by maximumLinks
    limitUserLinkCountMaximumLinks Number
    Determines if this provider is enabled. If it is false then it will be disabled globally.
    tenantId String
    The unique Id of the tenant that this configuration applies to.

    Package Details

    Repository
    fusionauth theogravity/pulumi-fusionauth
    License
    MIT
    Notes
    This Pulumi package is based on the fusionauth Terraform Provider.
    fusionauth logo
    FusionAuth v6.0.2 published on Sunday, Feb 9, 2025 by Theo Gravity
    theogravity/pulumi-fusionauth