konnect.IdentityTrustedIdp

Example coming soon!

name string

The unique name of the resource.

args IdentityTrustedIdpArgs

The arguments to resource properties.

opts CustomResourceOptions

Bag of options to control resource's behavior.

resource_name str

The unique name of the resource.

args IdentityTrustedIdpArgs

The arguments to resource properties.

opts ResourceOptions

Bag of options to control resource's behavior.

ctx Context

Context object for the current deployment.

name string

The unique name of the resource.

args IdentityTrustedIdpArgs

The arguments to resource properties.

opts ResourceOption

Bag of options to control resource's behavior.

name string

The unique name of the resource.

args IdentityTrustedIdpArgs

The arguments to resource properties.

opts CustomResourceOptions

Bag of options to control resource's behavior.

name String

The unique name of the resource.

args IdentityTrustedIdpArgs

The arguments to resource properties.

options CustomResourceOptions

Bag of options to control resource's behavior.

DirectoryId string

ID of the directory

IssuerUrl string

The issuer URL of the trusted IdP. Unique per vault.

DisplayName string

A human-friendly display name for the trusted IdP, distinct from its unique issuer_url.

Jit IdentityTrustedIdpJit

Just-in-time provisioning configuration for this trusted IdP. The mapping decides how the OIDC claims a client presents to fetch-principal shape a principal provisioned just in time.

JitProvisioningEnabled bool

Whether a principal is provisioned just-in-time on first exchange when no principal matches the subject_token's issuer and sub claim. Default: true

JwksUri string

JWKS URI of the trusted IdP. Overrides OIDC discovery when set.

VaultAccessEnabled bool

Whether vault token exchange is enabled for principals provisioned by this trusted IdP. Defaults to false; it can be set on create, is reset to false when omitted in the replace operation, and can be changed via the patch operation. Default: false

DirectoryId string

ID of the directory

IssuerUrl string

The issuer URL of the trusted IdP. Unique per vault.

DisplayName string

A human-friendly display name for the trusted IdP, distinct from its unique issuer_url.

Jit IdentityTrustedIdpJitArgs

Just-in-time provisioning configuration for this trusted IdP. The mapping decides how the OIDC claims a client presents to fetch-principal shape a principal provisioned just in time.

JitProvisioningEnabled bool

Whether a principal is provisioned just-in-time on first exchange when no principal matches the subject_token's issuer and sub claim. Default: true

JwksUri string

JWKS URI of the trusted IdP. Overrides OIDC discovery when set.

VaultAccessEnabled bool

Whether vault token exchange is enabled for principals provisioned by this trusted IdP. Defaults to false; it can be set on create, is reset to false when omitted in the replace operation, and can be changed via the patch operation. Default: false

directory_id string

ID of the directory

issuer_url string

The issuer URL of the trusted IdP. Unique per vault.

display_name string

A human-friendly display name for the trusted IdP, distinct from its unique issuer_url.

jit object

Just-in-time provisioning configuration for this trusted IdP. The mapping decides how the OIDC claims a client presents to fetch-principal shape a principal provisioned just in time.

jit_provisioning_enabled bool

Whether a principal is provisioned just-in-time on first exchange when no principal matches the subject_token's issuer and sub claim. Default: true

jwks_uri string

JWKS URI of the trusted IdP. Overrides OIDC discovery when set.

vault_access_enabled bool

Whether vault token exchange is enabled for principals provisioned by this trusted IdP. Defaults to false; it can be set on create, is reset to false when omitted in the replace operation, and can be changed via the patch operation. Default: false

directoryId String

ID of the directory

issuerUrl String

The issuer URL of the trusted IdP. Unique per vault.

displayName String

A human-friendly display name for the trusted IdP, distinct from its unique issuer_url.

jit IdentityTrustedIdpJit

Just-in-time provisioning configuration for this trusted IdP. The mapping decides how the OIDC claims a client presents to fetch-principal shape a principal provisioned just in time.

jitProvisioningEnabled Boolean

Whether a principal is provisioned just-in-time on first exchange when no principal matches the subject_token's issuer and sub claim. Default: true

jwksUri String

JWKS URI of the trusted IdP. Overrides OIDC discovery when set.

vaultAccessEnabled Boolean

Whether vault token exchange is enabled for principals provisioned by this trusted IdP. Defaults to false; it can be set on create, is reset to false when omitted in the replace operation, and can be changed via the patch operation. Default: false

directoryId string

ID of the directory

issuerUrl string

The issuer URL of the trusted IdP. Unique per vault.

displayName string

A human-friendly display name for the trusted IdP, distinct from its unique issuer_url.

jit IdentityTrustedIdpJit

Just-in-time provisioning configuration for this trusted IdP. The mapping decides how the OIDC claims a client presents to fetch-principal shape a principal provisioned just in time.

jitProvisioningEnabled boolean

Whether a principal is provisioned just-in-time on first exchange when no principal matches the subject_token's issuer and sub claim. Default: true

jwksUri string

JWKS URI of the trusted IdP. Overrides OIDC discovery when set.

vaultAccessEnabled boolean

Whether vault token exchange is enabled for principals provisioned by this trusted IdP. Defaults to false; it can be set on create, is reset to false when omitted in the replace operation, and can be changed via the patch operation. Default: false

directory_id str

ID of the directory

issuer_url str

The issuer URL of the trusted IdP. Unique per vault.

display_name str

A human-friendly display name for the trusted IdP, distinct from its unique issuer_url.

jit IdentityTrustedIdpJitArgs

Just-in-time provisioning configuration for this trusted IdP. The mapping decides how the OIDC claims a client presents to fetch-principal shape a principal provisioned just in time.

jit_provisioning_enabled bool

Whether a principal is provisioned just-in-time on first exchange when no principal matches the subject_token's issuer and sub claim. Default: true

jwks_uri str

JWKS URI of the trusted IdP. Overrides OIDC discovery when set.

vault_access_enabled bool

Whether vault token exchange is enabled for principals provisioned by this trusted IdP. Defaults to false; it can be set on create, is reset to false when omitted in the replace operation, and can be changed via the patch operation. Default: false

directoryId String

ID of the directory

issuerUrl String

The issuer URL of the trusted IdP. Unique per vault.

displayName String

A human-friendly display name for the trusted IdP, distinct from its unique issuer_url.

jit Property Map

Just-in-time provisioning configuration for this trusted IdP. The mapping decides how the OIDC claims a client presents to fetch-principal shape a principal provisioned just in time.

jitProvisioningEnabled Boolean

Whether a principal is provisioned just-in-time on first exchange when no principal matches the subject_token's issuer and sub claim. Default: true

jwksUri String

JWKS URI of the trusted IdP. Overrides OIDC discovery when set.

vaultAccessEnabled Boolean

Whether vault token exchange is enabled for principals provisioned by this trusted IdP. Defaults to false; it can be set on create, is reset to false when omitted in the replace operation, and can be changed via the patch operation. Default: false

CreatedAt string

An ISO-8601 timestamp representation of entity creation date.

Id string

The provider-assigned unique ID for this managed resource.

UpdatedAt string

An ISO-8601 timestamp representation of entity update date.

CreatedAt string

An ISO-8601 timestamp representation of entity creation date.

Id string

The provider-assigned unique ID for this managed resource.

UpdatedAt string

An ISO-8601 timestamp representation of entity update date.

created_at string

An ISO-8601 timestamp representation of entity creation date.

id string

The provider-assigned unique ID for this managed resource.

updated_at string

An ISO-8601 timestamp representation of entity update date.

createdAt String

An ISO-8601 timestamp representation of entity creation date.

id String

The provider-assigned unique ID for this managed resource.

updatedAt String

An ISO-8601 timestamp representation of entity update date.

createdAt string

An ISO-8601 timestamp representation of entity creation date.

id string

The provider-assigned unique ID for this managed resource.

updatedAt string

An ISO-8601 timestamp representation of entity update date.

created_at str

An ISO-8601 timestamp representation of entity creation date.

id str

The provider-assigned unique ID for this managed resource.

updated_at str

An ISO-8601 timestamp representation of entity update date.

createdAt String

An ISO-8601 timestamp representation of entity creation date.

id String

The provider-assigned unique ID for this managed resource.

updatedAt String

An ISO-8601 timestamp representation of entity update date.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

resource_name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

name

The unique name of the resulting resource.

id

The unique provider ID of the resource to lookup.

state

Any extra arguments used during the lookup.

opts

A bag of options that control this resource's behavior.

Mapping IdentityTrustedIdpJitMapping

How the OIDC claims a client presents to fetch-principal map onto a principal provisioned just in time for this trusted IdP. Every field names one of those claims and is optional; a claim the mapping names but the lookup does not carry contributes nothing. An absent mapping — or an absent jit — means no claim mapping: provisioned principals get empty metadata and the lookup's claim value as display name.

Mapping IdentityTrustedIdpJitMapping

How the OIDC claims a client presents to fetch-principal map onto a principal provisioned just in time for this trusted IdP. Every field names one of those claims and is optional; a claim the mapping names but the lookup does not carry contributes nothing. An absent mapping — or an absent jit — means no claim mapping: provisioned principals get empty metadata and the lookup's claim value as display name.

mapping object

How the OIDC claims a client presents to fetch-principal map onto a principal provisioned just in time for this trusted IdP. Every field names one of those claims and is optional; a claim the mapping names but the lookup does not carry contributes nothing. An absent mapping — or an absent jit — means no claim mapping: provisioned principals get empty metadata and the lookup's claim value as display name.

mapping IdentityTrustedIdpJitMapping

How the OIDC claims a client presents to fetch-principal map onto a principal provisioned just in time for this trusted IdP. Every field names one of those claims and is optional; a claim the mapping names but the lookup does not carry contributes nothing. An absent mapping — or an absent jit — means no claim mapping: provisioned principals get empty metadata and the lookup's claim value as display name.

mapping IdentityTrustedIdpJitMapping

How the OIDC claims a client presents to fetch-principal map onto a principal provisioned just in time for this trusted IdP. Every field names one of those claims and is optional; a claim the mapping names but the lookup does not carry contributes nothing. An absent mapping — or an absent jit — means no claim mapping: provisioned principals get empty metadata and the lookup's claim value as display name.

mapping IdentityTrustedIdpJitMapping

How the OIDC claims a client presents to fetch-principal map onto a principal provisioned just in time for this trusted IdP. Every field names one of those claims and is optional; a claim the mapping names but the lookup does not carry contributes nothing. An absent mapping — or an absent jit — means no claim mapping: provisioned principals get empty metadata and the lookup's claim value as display name.

mapping Property Map

How the OIDC claims a client presents to fetch-principal map onto a principal provisioned just in time for this trusted IdP. Every field names one of those claims and is optional; a claim the mapping names but the lookup does not carry contributes nothing. An absent mapping — or an absent jit — means no claim mapping: provisioned principals get empty metadata and the lookup's claim value as display name.

DisplayName string

Name of the claim whose string value becomes the provisioned principal's display name. When absent from the token, the lookup's claim value is used instead.

Email string

Name of the claim whose string value is attached to the provisioned principal as a custom identity keyed email. When a principal already carries it, that principal adopts the looked-up identity instead of a new one being provisioned.

Groups string

Name of the claim carrying the names of the groups the provisioned principal joins — a string is one group, an array is many. Groups that do not exist yet are created. At most 100 groups per token.

Metadata Dictionary<string, string>

Maps a principal metadata key to the name of the claim whose value populates it: metadata[key] = claims[claim], values narrowed to the shapes the metadata render paths accept. At most 64 entries.

DisplayName string

Name of the claim whose string value becomes the provisioned principal's display name. When absent from the token, the lookup's claim value is used instead.

Email string

Name of the claim whose string value is attached to the provisioned principal as a custom identity keyed email. When a principal already carries it, that principal adopts the looked-up identity instead of a new one being provisioned.

Groups string

Name of the claim carrying the names of the groups the provisioned principal joins — a string is one group, an array is many. Groups that do not exist yet are created. At most 100 groups per token.

Metadata map[string]string

Maps a principal metadata key to the name of the claim whose value populates it: metadata[key] = claims[claim], values narrowed to the shapes the metadata render paths accept. At most 64 entries.

display_name string

Name of the claim whose string value becomes the provisioned principal's display name. When absent from the token, the lookup's claim value is used instead.

email string

Name of the claim whose string value is attached to the provisioned principal as a custom identity keyed email. When a principal already carries it, that principal adopts the looked-up identity instead of a new one being provisioned.

groups string

Name of the claim carrying the names of the groups the provisioned principal joins — a string is one group, an array is many. Groups that do not exist yet are created. At most 100 groups per token.

metadata map(string)

Maps a principal metadata key to the name of the claim whose value populates it: metadata[key] = claims[claim], values narrowed to the shapes the metadata render paths accept. At most 64 entries.

displayName String

Name of the claim whose string value becomes the provisioned principal's display name. When absent from the token, the lookup's claim value is used instead.

email String

Name of the claim whose string value is attached to the provisioned principal as a custom identity keyed email. When a principal already carries it, that principal adopts the looked-up identity instead of a new one being provisioned.

groups String

Name of the claim carrying the names of the groups the provisioned principal joins — a string is one group, an array is many. Groups that do not exist yet are created. At most 100 groups per token.

metadata Map<String,String>

Maps a principal metadata key to the name of the claim whose value populates it: metadata[key] = claims[claim], values narrowed to the shapes the metadata render paths accept. At most 64 entries.

displayName string

Name of the claim whose string value becomes the provisioned principal's display name. When absent from the token, the lookup's claim value is used instead.

email string

Name of the claim whose string value is attached to the provisioned principal as a custom identity keyed email. When a principal already carries it, that principal adopts the looked-up identity instead of a new one being provisioned.

groups string

Name of the claim carrying the names of the groups the provisioned principal joins — a string is one group, an array is many. Groups that do not exist yet are created. At most 100 groups per token.

metadata {[key: string]: string}

Maps a principal metadata key to the name of the claim whose value populates it: metadata[key] = claims[claim], values narrowed to the shapes the metadata render paths accept. At most 64 entries.

display_name str

Name of the claim whose string value becomes the provisioned principal's display name. When absent from the token, the lookup's claim value is used instead.

email str

Name of the claim whose string value is attached to the provisioned principal as a custom identity keyed email. When a principal already carries it, that principal adopts the looked-up identity instead of a new one being provisioned.

groups str

Name of the claim carrying the names of the groups the provisioned principal joins — a string is one group, an array is many. Groups that do not exist yet are created. At most 100 groups per token.

metadata Mapping[str, str]

Maps a principal metadata key to the name of the claim whose value populates it: metadata[key] = claims[claim], values narrowed to the shapes the metadata render paths accept. At most 64 entries.

displayName String

Name of the claim whose string value becomes the provisioned principal's display name. When absent from the token, the lookup's claim value is used instead.

email String

Name of the claim whose string value is attached to the provisioned principal as a custom identity keyed email. When a principal already carries it, that principal adopts the looked-up identity instead of a new one being provisioned.

groups String

Name of the claim carrying the names of the groups the provisioned principal joins — a string is one group, an array is many. Groups that do not exist yet are created. At most 100 groups per token.

metadata Map<String>

Maps a principal metadata key to the name of the claim whose value populates it: metadata[key] = claims[claim], values narrowed to the shapes the metadata render paths accept. At most 64 entries.