Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Nexus Provider
  4. API Docs
  5. SecurityOidc
Viewing docs for nexus 3.0.0
published on Tuesday, Jul 28, 2026 by datadrivers
Schema (JSON)
datadrivers/terraform-provider-nexus

nexus.SecurityOidc

Viewing docs for nexus 3.0.0
published on Tuesday, Jul 28, 2026 by datadrivers
Schema (JSON)
datadrivers/terraform-provider-nexus

    PRO Feature (Nexus Repository Pro 3.93.0 or later, with nexus.security.oauth2.enabled=true and nexus.jwt.enabled=true in nexus.properties)

    Use this resource to configure Nexus Security OpenID Connect (OAuth2) integration.

    The OAuth2 Realm must be active (via nexus.SecurityRealms) for external login to succeed.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as nexus from "@pulumi/nexus";

const example = new nexus.SecurityOidc("example", {
    clientId: "nexus",
    clientSecret: "very-secret",
    authorizationUrl: "https://idp.example.test/oauth2/authorize",
    tokenUrl: "https://idp.example.test/oauth2/token",
    jwksUrl: "https://idp.example.test/.well-known/jwks.json",
    jwsAlgorithm: "RS256",
    usernameClaim: "preferred_username",
    groupsClaim: "groups",
    logoutUrl: "https://idp.example.test/oauth2/logout",
    firstNameClaim: "given_name",
    lastNameClaim: "family_name",
    emailClaim: "email",
    useTrustStore: false,
});

    import pulumi
import pulumi_nexus as nexus

example = nexus.SecurityOidc("example",
    client_id="nexus",
    client_secret="very-secret",
    authorization_url="https://idp.example.test/oauth2/authorize",
    token_url="https://idp.example.test/oauth2/token",
    jwks_url="https://idp.example.test/.well-known/jwks.json",
    jws_algorithm="RS256",
    username_claim="preferred_username",
    groups_claim="groups",
    logout_url="https://idp.example.test/oauth2/logout",
    first_name_claim="given_name",
    last_name_claim="family_name",
    email_claim="email",
    use_trust_store=False)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/nexus/v3/nexus"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := nexus.NewSecurityOidc(ctx, "example", &nexus.SecurityOidcArgs{
			ClientId:         pulumi.String("nexus"),
			ClientSecret:     pulumi.String("very-secret"),
			AuthorizationUrl: pulumi.String("https://idp.example.test/oauth2/authorize"),
			TokenUrl:         pulumi.String("https://idp.example.test/oauth2/token"),
			JwksUrl:          pulumi.String("https://idp.example.test/.well-known/jwks.json"),
			JwsAlgorithm:     pulumi.String("RS256"),
			UsernameClaim:    pulumi.String("preferred_username"),
			GroupsClaim:      pulumi.String("groups"),
			LogoutUrl:        pulumi.String("https://idp.example.test/oauth2/logout"),
			FirstNameClaim:   pulumi.String("given_name"),
			LastNameClaim:    pulumi.String("family_name"),
			EmailClaim:       pulumi.String("email"),
			UseTrustStore:    pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Nexus = Pulumi.Nexus;

return await Deployment.RunAsync(() => 
{
    var example = new Nexus.SecurityOidc("example", new()
    {
        ClientId = "nexus",
        ClientSecret = "very-secret",
        AuthorizationUrl = "https://idp.example.test/oauth2/authorize",
        TokenUrl = "https://idp.example.test/oauth2/token",
        JwksUrl = "https://idp.example.test/.well-known/jwks.json",
        JwsAlgorithm = "RS256",
        UsernameClaim = "preferred_username",
        GroupsClaim = "groups",
        LogoutUrl = "https://idp.example.test/oauth2/logout",
        FirstNameClaim = "given_name",
        LastNameClaim = "family_name",
        EmailClaim = "email",
        UseTrustStore = false,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nexus.SecurityOidc;
import com.pulumi.nexus.SecurityOidcArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new SecurityOidc("example", SecurityOidcArgs.builder()
            .clientId("nexus")
            .clientSecret("very-secret")
            .authorizationUrl("https://idp.example.test/oauth2/authorize")
            .tokenUrl("https://idp.example.test/oauth2/token")
            .jwksUrl("https://idp.example.test/.well-known/jwks.json")
            .jwsAlgorithm("RS256")
            .usernameClaim("preferred_username")
            .groupsClaim("groups")
            .logoutUrl("https://idp.example.test/oauth2/logout")
            .firstNameClaim("given_name")
            .lastNameClaim("family_name")
            .emailClaim("email")
            .useTrustStore(false)
            .build());

    }
}

    resources:
  example:
    type: nexus:SecurityOidc
    properties:
      clientId: nexus
      clientSecret: very-secret
      authorizationUrl: https://idp.example.test/oauth2/authorize
      tokenUrl: https://idp.example.test/oauth2/token
      jwksUrl: https://idp.example.test/.well-known/jwks.json
      jwsAlgorithm: RS256
      usernameClaim: preferred_username
      groupsClaim: groups
      logoutUrl: https://idp.example.test/oauth2/logout
      firstNameClaim: given_name
      lastNameClaim: family_name
      emailClaim: email
      useTrustStore: false

    Example coming soon!

    Create SecurityOidc Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SecurityOidc(name: string, args: SecurityOidcArgs, opts?: CustomResourceOptions);
    @overload
def SecurityOidc(resource_name: str,
                 args: SecurityOidcArgs,
                 opts: Optional[ResourceOptions] = None)

@overload
def SecurityOidc(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 jwks_url: Optional[str] = None,
                 authorization_url: Optional[str] = None,
                 client_id: Optional[str] = None,
                 client_secret: Optional[str] = None,
                 username_claim: Optional[str] = None,
                 token_url: Optional[str] = None,
                 jws_algorithm: Optional[str] = None,
                 groups_claim: Optional[str] = None,
                 jwks: Optional[str] = None,
                 authorization_custom_params: Optional[Mapping[str, str]] = None,
                 first_name_claim: Optional[str] = None,
                 last_name_claim: Optional[str] = None,
                 logout_url: Optional[str] = None,
                 token_request_custom_params: Optional[Mapping[str, str]] = None,
                 exact_match_claims: Optional[Mapping[str, str]] = None,
                 use_trust_store: Optional[bool] = None,
                 email_claim: Optional[str] = None)
    func NewSecurityOidc(ctx *Context, name string, args SecurityOidcArgs, opts ...ResourceOption) (*SecurityOidc, error)
    public SecurityOidc(string name, SecurityOidcArgs args, CustomResourceOptions? opts = null)
    public SecurityOidc(String name, SecurityOidcArgs args)
public SecurityOidc(String name, SecurityOidcArgs args, CustomResourceOptions options)

    type: nexus:SecurityOidc
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "nexus_security_oidc" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args SecurityOidcArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SecurityOidcArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SecurityOidcArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SecurityOidcArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SecurityOidcArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var securityOidcResource = new Nexus.SecurityOidc("securityOidcResource", new()
{
    JwksUrl = "string",
    AuthorizationUrl = "string",
    ClientId = "string",
    ClientSecret = "string",
    UsernameClaim = "string",
    TokenUrl = "string",
    JwsAlgorithm = "string",
    GroupsClaim = "string",
    Jwks = "string",
    AuthorizationCustomParams = 
    {
        { "string", "string" },
    },
    FirstNameClaim = "string",
    LastNameClaim = "string",
    LogoutUrl = "string",
    TokenRequestCustomParams = 
    {
        { "string", "string" },
    },
    ExactMatchClaims = 
    {
        { "string", "string" },
    },
    UseTrustStore = false,
    EmailClaim = "string",
});

    example, err := nexus.NewSecurityOidc(ctx, "securityOidcResource", &nexus.SecurityOidcArgs{
	JwksUrl:          pulumi.String("string"),
	AuthorizationUrl: pulumi.String("string"),
	ClientId:         pulumi.String("string"),
	ClientSecret:     pulumi.String("string"),
	UsernameClaim:    pulumi.String("string"),
	TokenUrl:         pulumi.String("string"),
	JwsAlgorithm:     pulumi.String("string"),
	GroupsClaim:      pulumi.String("string"),
	Jwks:             pulumi.String("string"),
	AuthorizationCustomParams: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	FirstNameClaim: pulumi.String("string"),
	LastNameClaim:  pulumi.String("string"),
	LogoutUrl:      pulumi.String("string"),
	TokenRequestCustomParams: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	ExactMatchClaims: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	UseTrustStore: pulumi.Bool(false),
	EmailClaim:    pulumi.String("string"),
})

    resource "nexus_security_oidc" "securityOidcResource" {
  lifecycle {
    create_before_destroy = true
  }
  jwks_url          = "string"
  authorization_url = "string"
  client_id         = "string"
  client_secret     = "string"
  username_claim    = "string"
  token_url         = "string"
  jws_algorithm     = "string"
  groups_claim      = "string"
  jwks              = "string"
  authorization_custom_params = {
    "string" = "string"
  }
  first_name_claim = "string"
  last_name_claim  = "string"
  logout_url       = "string"
  token_request_custom_params = {
    "string" = "string"
  }
  exact_match_claims = {
    "string" = "string"
  }
  use_trust_store = false
  email_claim     = "string"
}

    var securityOidcResource = new SecurityOidc("securityOidcResource", SecurityOidcArgs.builder()
    .jwksUrl("string")
    .authorizationUrl("string")
    .clientId("string")
    .clientSecret("string")
    .usernameClaim("string")
    .tokenUrl("string")
    .jwsAlgorithm("string")
    .groupsClaim("string")
    .jwks("string")
    .authorizationCustomParams(Map.of("string", "string"))
    .firstNameClaim("string")
    .lastNameClaim("string")
    .logoutUrl("string")
    .tokenRequestCustomParams(Map.of("string", "string"))
    .exactMatchClaims(Map.of("string", "string"))
    .useTrustStore(false)
    .emailClaim("string")
    .build());

    security_oidc_resource = nexus.SecurityOidc("securityOidcResource",
    jwks_url="string",
    authorization_url="string",
    client_id="string",
    client_secret="string",
    username_claim="string",
    token_url="string",
    jws_algorithm="string",
    groups_claim="string",
    jwks="string",
    authorization_custom_params={
        "string": "string",
    },
    first_name_claim="string",
    last_name_claim="string",
    logout_url="string",
    token_request_custom_params={
        "string": "string",
    },
    exact_match_claims={
        "string": "string",
    },
    use_trust_store=False,
    email_claim="string")

    const securityOidcResource = new nexus.SecurityOidc("securityOidcResource", {
    jwksUrl: "string",
    authorizationUrl: "string",
    clientId: "string",
    clientSecret: "string",
    usernameClaim: "string",
    tokenUrl: "string",
    jwsAlgorithm: "string",
    groupsClaim: "string",
    jwks: "string",
    authorizationCustomParams: {
        string: "string",
    },
    firstNameClaim: "string",
    lastNameClaim: "string",
    logoutUrl: "string",
    tokenRequestCustomParams: {
        string: "string",
    },
    exactMatchClaims: {
        string: "string",
    },
    useTrustStore: false,
    emailClaim: "string",
});

    type: nexus:SecurityOidc
properties:
    authorizationCustomParams:
        string: string
    authorizationUrl: string
    clientId: string
    clientSecret: string
    emailClaim: string
    exactMatchClaims:
        string: string
    firstNameClaim: string
    groupsClaim: string
    jwks: string
    jwksUrl: string
    jwsAlgorithm: string
    lastNameClaim: string
    logoutUrl: string
    tokenRequestCustomParams:
        string: string
    tokenUrl: string
    useTrustStore: false
    usernameClaim: string

    SecurityOidc Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SecurityOidc resource accepts the following input properties:

    AuthorizationUrl string
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    ClientId string
    Unique identifier (client ID) issued by the OpenID Provider.
    ClientSecret string
    Client secret issued by the OpenID Provider.
    GroupsClaim string
    ID token claim carrying the user's group memberships (required for role mapping).
    JwksUrl string
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    JwsAlgorithm string
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    TokenUrl string
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    UsernameClaim string
    ID token claim that uniquely identifies the user.
    AuthorizationCustomParams Dictionary<string, string>
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    EmailClaim string
    ID token claim mapped to the user's email address.
    ExactMatchClaims Dictionary<string, string>
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    FirstNameClaim string
    ID token claim mapped to the user's given name.
    Jwks string
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    LastNameClaim string
    ID token claim mapped to the user's surname.
    LogoutUrl string
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    TokenRequestCustomParams Dictionary<string, string>
    Extra parameters appended to the token request (tokenRequestCustomParams).
    UseTrustStore bool
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    AuthorizationUrl string
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    ClientId string
    Unique identifier (client ID) issued by the OpenID Provider.
    ClientSecret string
    Client secret issued by the OpenID Provider.
    GroupsClaim string
    ID token claim carrying the user's group memberships (required for role mapping).
    JwksUrl string
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    JwsAlgorithm string
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    TokenUrl string
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    UsernameClaim string
    ID token claim that uniquely identifies the user.
    AuthorizationCustomParams map[string]string
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    EmailClaim string
    ID token claim mapped to the user's email address.
    ExactMatchClaims map[string]string
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    FirstNameClaim string
    ID token claim mapped to the user's given name.
    Jwks string
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    LastNameClaim string
    ID token claim mapped to the user's surname.
    LogoutUrl string
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    TokenRequestCustomParams map[string]string
    Extra parameters appended to the token request (tokenRequestCustomParams).
    UseTrustStore bool
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    authorization_url string
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    client_id string
    Unique identifier (client ID) issued by the OpenID Provider.
    client_secret string
    Client secret issued by the OpenID Provider.
    groups_claim string
    ID token claim carrying the user's group memberships (required for role mapping).
    jwks_url string
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jws_algorithm string
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    token_url string
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    username_claim string
    ID token claim that uniquely identifies the user.
    authorization_custom_params map(string)
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    email_claim string
    ID token claim mapped to the user's email address.
    exact_match_claims map(string)
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    first_name_claim string
    ID token claim mapped to the user's given name.
    jwks string
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    last_name_claim string
    ID token claim mapped to the user's surname.
    logout_url string
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    token_request_custom_params map(string)
    Extra parameters appended to the token request (tokenRequestCustomParams).
    use_trust_store bool
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    authorizationUrl String
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    clientId String
    Unique identifier (client ID) issued by the OpenID Provider.
    clientSecret String
    Client secret issued by the OpenID Provider.
    groupsClaim String
    ID token claim carrying the user's group memberships (required for role mapping).
    jwksUrl String
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jwsAlgorithm String
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    tokenUrl String
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    usernameClaim String
    ID token claim that uniquely identifies the user.
    authorizationCustomParams Map<String,String>
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    emailClaim String
    ID token claim mapped to the user's email address.
    exactMatchClaims Map<String,String>
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    firstNameClaim String
    ID token claim mapped to the user's given name.
    jwks String
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    lastNameClaim String
    ID token claim mapped to the user's surname.
    logoutUrl String
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    tokenRequestCustomParams Map<String,String>
    Extra parameters appended to the token request (tokenRequestCustomParams).
    useTrustStore Boolean
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    authorizationUrl string
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    clientId string
    Unique identifier (client ID) issued by the OpenID Provider.
    clientSecret string
    Client secret issued by the OpenID Provider.
    groupsClaim string
    ID token claim carrying the user's group memberships (required for role mapping).
    jwksUrl string
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jwsAlgorithm string
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    tokenUrl string
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    usernameClaim string
    ID token claim that uniquely identifies the user.
    authorizationCustomParams {[key: string]: string}
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    emailClaim string
    ID token claim mapped to the user's email address.
    exactMatchClaims {[key: string]: string}
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    firstNameClaim string
    ID token claim mapped to the user's given name.
    jwks string
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    lastNameClaim string
    ID token claim mapped to the user's surname.
    logoutUrl string
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    tokenRequestCustomParams {[key: string]: string}
    Extra parameters appended to the token request (tokenRequestCustomParams).
    useTrustStore boolean
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    authorization_url str
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    client_id str
    Unique identifier (client ID) issued by the OpenID Provider.
    client_secret str
    Client secret issued by the OpenID Provider.
    groups_claim str
    ID token claim carrying the user's group memberships (required for role mapping).
    jwks_url str
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jws_algorithm str
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    token_url str
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    username_claim str
    ID token claim that uniquely identifies the user.
    authorization_custom_params Mapping[str, str]
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    email_claim str
    ID token claim mapped to the user's email address.
    exact_match_claims Mapping[str, str]
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    first_name_claim str
    ID token claim mapped to the user's given name.
    jwks str
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    last_name_claim str
    ID token claim mapped to the user's surname.
    logout_url str
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    token_request_custom_params Mapping[str, str]
    Extra parameters appended to the token request (tokenRequestCustomParams).
    use_trust_store bool
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    authorizationUrl String
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    clientId String
    Unique identifier (client ID) issued by the OpenID Provider.
    clientSecret String
    Client secret issued by the OpenID Provider.
    groupsClaim String
    ID token claim carrying the user's group memberships (required for role mapping).
    jwksUrl String
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jwsAlgorithm String
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    tokenUrl String
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    usernameClaim String
    ID token claim that uniquely identifies the user.
    authorizationCustomParams Map<String>
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    emailClaim String
    ID token claim mapped to the user's email address.
    exactMatchClaims Map<String>
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    firstNameClaim String
    ID token claim mapped to the user's given name.
    jwks String
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    lastNameClaim String
    ID token claim mapped to the user's surname.
    logoutUrl String
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    tokenRequestCustomParams Map<String>
    Extra parameters appended to the token request (tokenRequestCustomParams).
    useTrustStore Boolean
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SecurityOidc resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing SecurityOidc Resource

    Get an existing SecurityOidc resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SecurityOidcState, opts?: CustomResourceOptions): SecurityOidc
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        authorization_custom_params: Optional[Mapping[str, str]] = None,
        authorization_url: Optional[str] = None,
        client_id: Optional[str] = None,
        client_secret: Optional[str] = None,
        email_claim: Optional[str] = None,
        exact_match_claims: Optional[Mapping[str, str]] = None,
        first_name_claim: Optional[str] = None,
        groups_claim: Optional[str] = None,
        jwks: Optional[str] = None,
        jwks_url: Optional[str] = None,
        jws_algorithm: Optional[str] = None,
        last_name_claim: Optional[str] = None,
        logout_url: Optional[str] = None,
        token_request_custom_params: Optional[Mapping[str, str]] = None,
        token_url: Optional[str] = None,
        use_trust_store: Optional[bool] = None,
        username_claim: Optional[str] = None) -> SecurityOidc
    func GetSecurityOidc(ctx *Context, name string, id IDInput, state *SecurityOidcState, opts ...ResourceOption) (*SecurityOidc, error)
    public static SecurityOidc Get(string name, Input<string> id, SecurityOidcState? state, CustomResourceOptions? opts = null)
    public static SecurityOidc get(String name, Output<String> id, SecurityOidcState state, CustomResourceOptions options)
    resources:  _:    type: nexus:SecurityOidc    get:      id: ${id}
    import {
  to = nexus_security_oidc.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AuthorizationCustomParams Dictionary<string, string>
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    AuthorizationUrl string
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    ClientId string
    Unique identifier (client ID) issued by the OpenID Provider.
    ClientSecret string
    Client secret issued by the OpenID Provider.
    EmailClaim string
    ID token claim mapped to the user's email address.
    ExactMatchClaims Dictionary<string, string>
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    FirstNameClaim string
    ID token claim mapped to the user's given name.
    GroupsClaim string
    ID token claim carrying the user's group memberships (required for role mapping).
    Jwks string
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    JwksUrl string
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    JwsAlgorithm string
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    LastNameClaim string
    ID token claim mapped to the user's surname.
    LogoutUrl string
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    TokenRequestCustomParams Dictionary<string, string>
    Extra parameters appended to the token request (tokenRequestCustomParams).
    TokenUrl string
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    UseTrustStore bool
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    UsernameClaim string
    ID token claim that uniquely identifies the user.
    AuthorizationCustomParams map[string]string
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    AuthorizationUrl string
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    ClientId string
    Unique identifier (client ID) issued by the OpenID Provider.
    ClientSecret string
    Client secret issued by the OpenID Provider.
    EmailClaim string
    ID token claim mapped to the user's email address.
    ExactMatchClaims map[string]string
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    FirstNameClaim string
    ID token claim mapped to the user's given name.
    GroupsClaim string
    ID token claim carrying the user's group memberships (required for role mapping).
    Jwks string
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    JwksUrl string
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    JwsAlgorithm string
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    LastNameClaim string
    ID token claim mapped to the user's surname.
    LogoutUrl string
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    TokenRequestCustomParams map[string]string
    Extra parameters appended to the token request (tokenRequestCustomParams).
    TokenUrl string
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    UseTrustStore bool
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    UsernameClaim string
    ID token claim that uniquely identifies the user.
    authorization_custom_params map(string)
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    authorization_url string
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    client_id string
    Unique identifier (client ID) issued by the OpenID Provider.
    client_secret string
    Client secret issued by the OpenID Provider.
    email_claim string
    ID token claim mapped to the user's email address.
    exact_match_claims map(string)
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    first_name_claim string
    ID token claim mapped to the user's given name.
    groups_claim string
    ID token claim carrying the user's group memberships (required for role mapping).
    jwks string
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    jwks_url string
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jws_algorithm string
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    last_name_claim string
    ID token claim mapped to the user's surname.
    logout_url string
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    token_request_custom_params map(string)
    Extra parameters appended to the token request (tokenRequestCustomParams).
    token_url string
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    use_trust_store bool
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    username_claim string
    ID token claim that uniquely identifies the user.
    authorizationCustomParams Map<String,String>
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    authorizationUrl String
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    clientId String
    Unique identifier (client ID) issued by the OpenID Provider.
    clientSecret String
    Client secret issued by the OpenID Provider.
    emailClaim String
    ID token claim mapped to the user's email address.
    exactMatchClaims Map<String,String>
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    firstNameClaim String
    ID token claim mapped to the user's given name.
    groupsClaim String
    ID token claim carrying the user's group memberships (required for role mapping).
    jwks String
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    jwksUrl String
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jwsAlgorithm String
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    lastNameClaim String
    ID token claim mapped to the user's surname.
    logoutUrl String
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    tokenRequestCustomParams Map<String,String>
    Extra parameters appended to the token request (tokenRequestCustomParams).
    tokenUrl String
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    useTrustStore Boolean
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    usernameClaim String
    ID token claim that uniquely identifies the user.
    authorizationCustomParams {[key: string]: string}
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    authorizationUrl string
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    clientId string
    Unique identifier (client ID) issued by the OpenID Provider.
    clientSecret string
    Client secret issued by the OpenID Provider.
    emailClaim string
    ID token claim mapped to the user's email address.
    exactMatchClaims {[key: string]: string}
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    firstNameClaim string
    ID token claim mapped to the user's given name.
    groupsClaim string
    ID token claim carrying the user's group memberships (required for role mapping).
    jwks string
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    jwksUrl string
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jwsAlgorithm string
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    lastNameClaim string
    ID token claim mapped to the user's surname.
    logoutUrl string
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    tokenRequestCustomParams {[key: string]: string}
    Extra parameters appended to the token request (tokenRequestCustomParams).
    tokenUrl string
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    useTrustStore boolean
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    usernameClaim string
    ID token claim that uniquely identifies the user.
    authorization_custom_params Mapping[str, str]
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    authorization_url str
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    client_id str
    Unique identifier (client ID) issued by the OpenID Provider.
    client_secret str
    Client secret issued by the OpenID Provider.
    email_claim str
    ID token claim mapped to the user's email address.
    exact_match_claims Mapping[str, str]
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    first_name_claim str
    ID token claim mapped to the user's given name.
    groups_claim str
    ID token claim carrying the user's group memberships (required for role mapping).
    jwks str
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    jwks_url str
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jws_algorithm str
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    last_name_claim str
    ID token claim mapped to the user's surname.
    logout_url str
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    token_request_custom_params Mapping[str, str]
    Extra parameters appended to the token request (tokenRequestCustomParams).
    token_url str
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    use_trust_store bool
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    username_claim str
    ID token claim that uniquely identifies the user.
    authorizationCustomParams Map<String>
    Extra query parameters appended to the authorization request (authorizationCustomParams).
    authorizationUrl String
    Authorization endpoint URL of the OpenID Provider (idpAuthorizationUrl).
    clientId String
    Unique identifier (client ID) issued by the OpenID Provider.
    clientSecret String
    Client secret issued by the OpenID Provider.
    emailClaim String
    ID token claim mapped to the user's email address.
    exactMatchClaims Map<String>
    Claims that must match exactly for a token to be accepted (exactMatchClaims).
    firstNameClaim String
    ID token claim mapped to the user's given name.
    groupsClaim String
    ID token claim carrying the user's group memberships (required for role mapping).
    jwks String
    Inline JWKS JSON content (idpJwks). Use only when jwks_url cannot be reached and Nexus must validate tokens with a static key set.
    jwksUrl String
    JSON Web Key Set endpoint URL of the OpenID Provider (idpJwksUrl).
    jwsAlgorithm String
    JWT signature algorithm advertised by the OpenID Provider (idpJwsAlgorithm), for example RS256.
    lastNameClaim String
    ID token claim mapped to the user's surname.
    logoutUrl String
    Logout (end-session) endpoint URL of the OpenID Provider (idpLogoutUrl).
    tokenRequestCustomParams Map<String>
    Extra parameters appended to the token request (tokenRequestCustomParams).
    tokenUrl String
    Token endpoint URL of the OpenID Provider (idpTokenUrl).
    useTrustStore Boolean
    Validate the OpenID Provider certificate against the Nexus Repository truststore (useTrustStore).
    usernameClaim String
    ID token claim that uniquely identifies the user.

    Import

    import of OIDC/OAuth2 configuration (singleton)

    $ pulumi import nexus:index/securityOidc:SecurityOidc example oidc

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    nexus datadrivers/terraform-provider-nexus
    License
    Notes
    This Pulumi package is based on the nexus Terraform Provider.
    Viewing docs for nexus 3.0.0
    published on Tuesday, Jul 28, 2026 by datadrivers
    Schema (JSON)
    datadrivers/terraform-provider-nexus

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial