Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Platform Provider
  4. API Docs
  5. OidcConfiguration
Viewing docs for platform 2.2.11
published on Tuesday, Aug 25, 2026 by jfrog
Schema (JSON)
jfrog/terraform-provider-platform

platform.OidcConfiguration

Viewing docs for platform 2.2.11
published on Tuesday, Aug 25, 2026 by jfrog
Schema (JSON)
jfrog/terraform-provider-platform

    Manage OIDC configuration in JFrog platform. See the JFrog OIDC configuration documentation for more information.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as platform from "@pulumi/platform";

const my_github_oidc_configuration = new platform.OidcConfiguration("my-github-oidc-configuration", {
    name: "my-github-oidc-configuration",
    description: "My GitHub OIDC configuration",
    issuerUrl: "https://token.actions.githubusercontent.com",
    providerType: "GitHub",
    organization: "jfrog",
    audience: "jfrog-github",
});
const my_github_oidc_enterprise_configuration = new platform.OidcConfiguration("my-github-oidc-enterprise-configuration", {
    name: "my-github-oidc-enterprise-configuration",
    description: "My GitHub OIDC enterprise configuration",
    issuerUrl: "https://token.actions.githubusercontent.com/jfrog",
    providerType: "GitHubEnterprise",
    organization: "jfrog",
    audience: "jfrog-github",
});
const my_generic_oidc_configuration = new platform.OidcConfiguration("my-generic-oidc-configuration", {
    name: "my-generic-oidc-configuration",
    description: "My generic OIDC configuration",
    issuerUrl: "https://tempurl.org",
    providerType: "generic",
    audience: "jfrog-generic",
    tokenIssuer: "https://tempurl.org",
});
const my_azure_oidc_configuration = new platform.OidcConfiguration("my-azure-oidc-configuration", {
    name: "my-azure-oidc-configuration",
    description: "My Azure OIDC configuration",
    issuerUrl: "https://sts.windows.net/your-tenant-id/",
    providerType: "Azure",
    audience: "azure-audience",
    azureAppId: "00000000-0000-0000-0000-000000000000",
    useDefaultProxy: true,
});

    import pulumi
import pulumi_platform as platform

my_github_oidc_configuration = platform.OidcConfiguration("my-github-oidc-configuration",
    name="my-github-oidc-configuration",
    description="My GitHub OIDC configuration",
    issuer_url="https://token.actions.githubusercontent.com",
    provider_type="GitHub",
    organization="jfrog",
    audience="jfrog-github")
my_github_oidc_enterprise_configuration = platform.OidcConfiguration("my-github-oidc-enterprise-configuration",
    name="my-github-oidc-enterprise-configuration",
    description="My GitHub OIDC enterprise configuration",
    issuer_url="https://token.actions.githubusercontent.com/jfrog",
    provider_type="GitHubEnterprise",
    organization="jfrog",
    audience="jfrog-github")
my_generic_oidc_configuration = platform.OidcConfiguration("my-generic-oidc-configuration",
    name="my-generic-oidc-configuration",
    description="My generic OIDC configuration",
    issuer_url="https://tempurl.org",
    provider_type="generic",
    audience="jfrog-generic",
    token_issuer="https://tempurl.org")
my_azure_oidc_configuration = platform.OidcConfiguration("my-azure-oidc-configuration",
    name="my-azure-oidc-configuration",
    description="My Azure OIDC configuration",
    issuer_url="https://sts.windows.net/your-tenant-id/",
    provider_type="Azure",
    audience="azure-audience",
    azure_app_id="00000000-0000-0000-0000-000000000000",
    use_default_proxy=True)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/platform/v2/platform"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := platform.NewOidcConfiguration(ctx, "my-github-oidc-configuration", &platform.OidcConfigurationArgs{
			Name:         pulumi.String("my-github-oidc-configuration"),
			Description:  pulumi.String("My GitHub OIDC configuration"),
			IssuerUrl:    pulumi.String("https://token.actions.githubusercontent.com"),
			ProviderType: pulumi.String("GitHub"),
			Organization: pulumi.String("jfrog"),
			Audience:     pulumi.String("jfrog-github"),
		})
		if err != nil {
			return err
		}
		_, err = platform.NewOidcConfiguration(ctx, "my-github-oidc-enterprise-configuration", &platform.OidcConfigurationArgs{
			Name:         pulumi.String("my-github-oidc-enterprise-configuration"),
			Description:  pulumi.String("My GitHub OIDC enterprise configuration"),
			IssuerUrl:    pulumi.String("https://token.actions.githubusercontent.com/jfrog"),
			ProviderType: pulumi.String("GitHubEnterprise"),
			Organization: pulumi.String("jfrog"),
			Audience:     pulumi.String("jfrog-github"),
		})
		if err != nil {
			return err
		}
		_, err = platform.NewOidcConfiguration(ctx, "my-generic-oidc-configuration", &platform.OidcConfigurationArgs{
			Name:         pulumi.String("my-generic-oidc-configuration"),
			Description:  pulumi.String("My generic OIDC configuration"),
			IssuerUrl:    pulumi.String("https://tempurl.org"),
			ProviderType: pulumi.String("generic"),
			Audience:     pulumi.String("jfrog-generic"),
			TokenIssuer:  pulumi.String("https://tempurl.org"),
		})
		if err != nil {
			return err
		}
		_, err = platform.NewOidcConfiguration(ctx, "my-azure-oidc-configuration", &platform.OidcConfigurationArgs{
			Name:            pulumi.String("my-azure-oidc-configuration"),
			Description:     pulumi.String("My Azure OIDC configuration"),
			IssuerUrl:       pulumi.String("https://sts.windows.net/your-tenant-id/"),
			ProviderType:    pulumi.String("Azure"),
			Audience:        pulumi.String("azure-audience"),
			AzureAppId:      pulumi.String("00000000-0000-0000-0000-000000000000"),
			UseDefaultProxy: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Platform = Pulumi.Platform;

return await Deployment.RunAsync(() => 
{
    var my_github_oidc_configuration = new Platform.OidcConfiguration("my-github-oidc-configuration", new()
    {
        Name = "my-github-oidc-configuration",
        Description = "My GitHub OIDC configuration",
        IssuerUrl = "https://token.actions.githubusercontent.com",
        ProviderType = "GitHub",
        Organization = "jfrog",
        Audience = "jfrog-github",
    });

    var my_github_oidc_enterprise_configuration = new Platform.OidcConfiguration("my-github-oidc-enterprise-configuration", new()
    {
        Name = "my-github-oidc-enterprise-configuration",
        Description = "My GitHub OIDC enterprise configuration",
        IssuerUrl = "https://token.actions.githubusercontent.com/jfrog",
        ProviderType = "GitHubEnterprise",
        Organization = "jfrog",
        Audience = "jfrog-github",
    });

    var my_generic_oidc_configuration = new Platform.OidcConfiguration("my-generic-oidc-configuration", new()
    {
        Name = "my-generic-oidc-configuration",
        Description = "My generic OIDC configuration",
        IssuerUrl = "https://tempurl.org",
        ProviderType = "generic",
        Audience = "jfrog-generic",
        TokenIssuer = "https://tempurl.org",
    });

    var my_azure_oidc_configuration = new Platform.OidcConfiguration("my-azure-oidc-configuration", new()
    {
        Name = "my-azure-oidc-configuration",
        Description = "My Azure OIDC configuration",
        IssuerUrl = "https://sts.windows.net/your-tenant-id/",
        ProviderType = "Azure",
        Audience = "azure-audience",
        AzureAppId = "00000000-0000-0000-0000-000000000000",
        UseDefaultProxy = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.platform.OidcConfiguration;
import com.pulumi.platform.OidcConfigurationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var my_github_oidc_configuration = new OidcConfiguration("my-github-oidc-configuration", OidcConfigurationArgs.builder()
            .name("my-github-oidc-configuration")
            .description("My GitHub OIDC configuration")
            .issuerUrl("https://token.actions.githubusercontent.com")
            .providerType("GitHub")
            .organization("jfrog")
            .audience("jfrog-github")
            .build());

        var my_github_oidc_enterprise_configuration = new OidcConfiguration("my-github-oidc-enterprise-configuration", OidcConfigurationArgs.builder()
            .name("my-github-oidc-enterprise-configuration")
            .description("My GitHub OIDC enterprise configuration")
            .issuerUrl("https://token.actions.githubusercontent.com/jfrog")
            .providerType("GitHubEnterprise")
            .organization("jfrog")
            .audience("jfrog-github")
            .build());

        var my_generic_oidc_configuration = new OidcConfiguration("my-generic-oidc-configuration", OidcConfigurationArgs.builder()
            .name("my-generic-oidc-configuration")
            .description("My generic OIDC configuration")
            .issuerUrl("https://tempurl.org")
            .providerType("generic")
            .audience("jfrog-generic")
            .tokenIssuer("https://tempurl.org")
            .build());

        var my_azure_oidc_configuration = new OidcConfiguration("my-azure-oidc-configuration", OidcConfigurationArgs.builder()
            .name("my-azure-oidc-configuration")
            .description("My Azure OIDC configuration")
            .issuerUrl("https://sts.windows.net/your-tenant-id/")
            .providerType("Azure")
            .audience("azure-audience")
            .azureAppId("00000000-0000-0000-0000-000000000000")
            .useDefaultProxy(true)
            .build());

    }
}

    resources:
  my-github-oidc-configuration:
    type: platform:OidcConfiguration
    properties:
      name: my-github-oidc-configuration
      description: My GitHub OIDC configuration
      issuerUrl: https://token.actions.githubusercontent.com
      providerType: GitHub
      organization: jfrog
      audience: jfrog-github
  my-github-oidc-enterprise-configuration:
    type: platform:OidcConfiguration
    properties:
      name: my-github-oidc-enterprise-configuration
      description: My GitHub OIDC enterprise configuration
      issuerUrl: https://token.actions.githubusercontent.com/jfrog
      providerType: GitHubEnterprise
      organization: jfrog
      audience: jfrog-github
  my-generic-oidc-configuration:
    type: platform:OidcConfiguration
    properties:
      name: my-generic-oidc-configuration
      description: My generic OIDC configuration
      issuerUrl: https://tempurl.org
      providerType: generic
      audience: jfrog-generic
      tokenIssuer: https://tempurl.org
  my-azure-oidc-configuration:
    type: platform:OidcConfiguration
    properties:
      name: my-azure-oidc-configuration
      description: My Azure OIDC configuration
      issuerUrl: https://sts.windows.net/your-tenant-id/
      providerType: Azure
      audience: azure-audience
      azureAppId: 00000000-0000-0000-0000-000000000000
      useDefaultProxy: true

    Example coming soon!

    Create OidcConfiguration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new OidcConfiguration(name: string, args: OidcConfigurationArgs, opts?: CustomResourceOptions);
    @overload
def OidcConfiguration(resource_name: str,
                      args: OidcConfigurationArgs,
                      opts: Optional[ResourceOptions] = None)

@overload
def OidcConfiguration(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      issuer_url: Optional[str] = None,
                      provider_type: Optional[str] = None,
                      audience: Optional[str] = None,
                      azure_app_id: Optional[str] = None,
                      description: Optional[str] = None,
                      enable_permissive_configuration: Optional[bool] = None,
                      name: Optional[str] = None,
                      organization: Optional[str] = None,
                      project_key: Optional[str] = None,
                      token_issuer: Optional[str] = None,
                      use_default_proxy: Optional[bool] = None)
    func NewOidcConfiguration(ctx *Context, name string, args OidcConfigurationArgs, opts ...ResourceOption) (*OidcConfiguration, error)
    public OidcConfiguration(string name, OidcConfigurationArgs args, CustomResourceOptions? opts = null)
    public OidcConfiguration(String name, OidcConfigurationArgs args)
public OidcConfiguration(String name, OidcConfigurationArgs args, CustomResourceOptions options)

    type: platform:OidcConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "platform_oidc_configuration" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args OidcConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args OidcConfigurationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args OidcConfigurationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args OidcConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args OidcConfigurationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var oidcConfigurationResource = new Platform.OidcConfiguration("oidcConfigurationResource", new()
{
    IssuerUrl = "string",
    ProviderType = "string",
    Audience = "string",
    AzureAppId = "string",
    Description = "string",
    EnablePermissiveConfiguration = false,
    Name = "string",
    Organization = "string",
    ProjectKey = "string",
    TokenIssuer = "string",
    UseDefaultProxy = false,
});

    example, err := platform.NewOidcConfiguration(ctx, "oidcConfigurationResource", &platform.OidcConfigurationArgs{
	IssuerUrl:                     pulumi.String("string"),
	ProviderType:                  pulumi.String("string"),
	Audience:                      pulumi.String("string"),
	AzureAppId:                    pulumi.String("string"),
	Description:                   pulumi.String("string"),
	EnablePermissiveConfiguration: pulumi.Bool(false),
	Name:                          pulumi.String("string"),
	Organization:                  pulumi.String("string"),
	ProjectKey:                    pulumi.String("string"),
	TokenIssuer:                   pulumi.String("string"),
	UseDefaultProxy:               pulumi.Bool(false),
})

    resource "platform_oidc_configuration" "oidcConfigurationResource" {
  lifecycle {
    create_before_destroy = true
  }
  issuer_url                      = "string"
  provider_type                   = "string"
  audience                        = "string"
  azure_app_id                    = "string"
  description                     = "string"
  enable_permissive_configuration = false
  name                            = "string"
  organization                    = "string"
  project_key                     = "string"
  token_issuer                    = "string"
  use_default_proxy               = false
}

    var oidcConfigurationResource = new OidcConfiguration("oidcConfigurationResource", OidcConfigurationArgs.builder()
    .issuerUrl("string")
    .providerType("string")
    .audience("string")
    .azureAppId("string")
    .description("string")
    .enablePermissiveConfiguration(false)
    .name("string")
    .organization("string")
    .projectKey("string")
    .tokenIssuer("string")
    .useDefaultProxy(false)
    .build());

    oidc_configuration_resource = platform.OidcConfiguration("oidcConfigurationResource",
    issuer_url="string",
    provider_type="string",
    audience="string",
    azure_app_id="string",
    description="string",
    enable_permissive_configuration=False,
    name="string",
    organization="string",
    project_key="string",
    token_issuer="string",
    use_default_proxy=False)

    const oidcConfigurationResource = new platform.OidcConfiguration("oidcConfigurationResource", {
    issuerUrl: "string",
    providerType: "string",
    audience: "string",
    azureAppId: "string",
    description: "string",
    enablePermissiveConfiguration: false,
    name: "string",
    organization: "string",
    projectKey: "string",
    tokenIssuer: "string",
    useDefaultProxy: false,
});

    type: platform:OidcConfiguration
properties:
    audience: string
    azureAppId: string
    description: string
    enablePermissiveConfiguration: false
    issuerUrl: string
    name: string
    organization: string
    projectKey: string
    providerType: string
    tokenIssuer: string
    useDefaultProxy: false

    OidcConfiguration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The OidcConfiguration resource accepts the following input properties:

    IssuerUrl string
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    ProviderType string
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    Audience string
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    AzureAppId string
    Azure Application ID. Only applicable when provider_type is Azure.
    Description string
    Description of the OIDC provider
    EnablePermissiveConfiguration bool
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    Name string
    Name of the OIDC provider
    Organization string
    ProjectKey string
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    TokenIssuer string
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    UseDefaultProxy bool
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    IssuerUrl string
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    ProviderType string
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    Audience string
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    AzureAppId string
    Azure Application ID. Only applicable when provider_type is Azure.
    Description string
    Description of the OIDC provider
    EnablePermissiveConfiguration bool
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    Name string
    Name of the OIDC provider
    Organization string
    ProjectKey string
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    TokenIssuer string
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    UseDefaultProxy bool
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    issuer_url string
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    provider_type string
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    audience string
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azure_app_id string
    Azure Application ID. Only applicable when provider_type is Azure.
    description string
    Description of the OIDC provider
    enable_permissive_configuration bool
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    name string
    Name of the OIDC provider
    organization string
    project_key string
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    token_issuer string
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    use_default_proxy bool
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    issuerUrl String
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    providerType String
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    audience String
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azureAppId String
    Azure Application ID. Only applicable when provider_type is Azure.
    description String
    Description of the OIDC provider
    enablePermissiveConfiguration Boolean
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    name String
    Name of the OIDC provider
    organization String
    projectKey String
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    tokenIssuer String
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    useDefaultProxy Boolean
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    issuerUrl string
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    providerType string
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    audience string
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azureAppId string
    Azure Application ID. Only applicable when provider_type is Azure.
    description string
    Description of the OIDC provider
    enablePermissiveConfiguration boolean
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    name string
    Name of the OIDC provider
    organization string
    projectKey string
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    tokenIssuer string
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    useDefaultProxy boolean
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    issuer_url str
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    provider_type str
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    audience str
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azure_app_id str
    Azure Application ID. Only applicable when provider_type is Azure.
    description str
    Description of the OIDC provider
    enable_permissive_configuration bool
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    name str
    Name of the OIDC provider
    organization str
    project_key str
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    token_issuer str
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    use_default_proxy bool
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    issuerUrl String
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    providerType String
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    audience String
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azureAppId String
    Azure Application ID. Only applicable when provider_type is Azure.
    description String
    Description of the OIDC provider
    enablePermissiveConfiguration Boolean
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    name String
    Name of the OIDC provider
    organization String
    projectKey String
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    tokenIssuer String
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    useDefaultProxy Boolean
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the OidcConfiguration resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing OidcConfiguration Resource

    Get an existing OidcConfiguration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: OidcConfigurationState, opts?: CustomResourceOptions): OidcConfiguration
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        audience: Optional[str] = None,
        azure_app_id: Optional[str] = None,
        description: Optional[str] = None,
        enable_permissive_configuration: Optional[bool] = None,
        issuer_url: Optional[str] = None,
        name: Optional[str] = None,
        organization: Optional[str] = None,
        project_key: Optional[str] = None,
        provider_type: Optional[str] = None,
        token_issuer: Optional[str] = None,
        use_default_proxy: Optional[bool] = None) -> OidcConfiguration
    func GetOidcConfiguration(ctx *Context, name string, id IDInput, state *OidcConfigurationState, opts ...ResourceOption) (*OidcConfiguration, error)
    public static OidcConfiguration Get(string name, Input<string> id, OidcConfigurationState? state, CustomResourceOptions? opts = null)
    public static OidcConfiguration get(String name, Output<String> id, OidcConfigurationState state, CustomResourceOptions options)
    resources:  _:    type: platform:OidcConfiguration    get:      id: ${id}
    import {
  to = platform_oidc_configuration.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Audience string
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    AzureAppId string
    Azure Application ID. Only applicable when provider_type is Azure.
    Description string
    Description of the OIDC provider
    EnablePermissiveConfiguration bool
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    IssuerUrl string
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    Name string
    Name of the OIDC provider
    Organization string
    ProjectKey string
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    ProviderType string
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    TokenIssuer string
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    UseDefaultProxy bool
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    Audience string
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    AzureAppId string
    Azure Application ID. Only applicable when provider_type is Azure.
    Description string
    Description of the OIDC provider
    EnablePermissiveConfiguration bool
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    IssuerUrl string
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    Name string
    Name of the OIDC provider
    Organization string
    ProjectKey string
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    ProviderType string
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    TokenIssuer string
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    UseDefaultProxy bool
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    audience string
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azure_app_id string
    Azure Application ID. Only applicable when provider_type is Azure.
    description string
    Description of the OIDC provider
    enable_permissive_configuration bool
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    issuer_url string
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    name string
    Name of the OIDC provider
    organization string
    project_key string
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    provider_type string
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    token_issuer string
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    use_default_proxy bool
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    audience String
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azureAppId String
    Azure Application ID. Only applicable when provider_type is Azure.
    description String
    Description of the OIDC provider
    enablePermissiveConfiguration Boolean
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    issuerUrl String
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    name String
    Name of the OIDC provider
    organization String
    projectKey String
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    providerType String
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    tokenIssuer String
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    useDefaultProxy Boolean
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    audience string
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azureAppId string
    Azure Application ID. Only applicable when provider_type is Azure.
    description string
    Description of the OIDC provider
    enablePermissiveConfiguration boolean
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    issuerUrl string
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    name string
    Name of the OIDC provider
    organization string
    projectKey string
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    providerType string
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    tokenIssuer string
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    useDefaultProxy boolean
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    audience str
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azure_app_id str
    Azure Application ID. Only applicable when provider_type is Azure.
    description str
    Description of the OIDC provider
    enable_permissive_configuration bool
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    issuer_url str
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    name str
    Name of the OIDC provider
    organization str
    project_key str
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    provider_type str
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    token_issuer str
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    use_default_proxy bool
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.
    audience String
    Informational field that you can use to include details of the audience that uses the OIDC configuration.
    azureAppId String
    Azure Application ID. Only applicable when provider_type is Azure.
    description String
    Description of the OIDC provider
    enablePermissiveConfiguration Boolean
    Only GitHub accepts false. Setting enable_permissive_configuration = false for GitHubEnterprise, generic, or Azure is rejected at plan time: the JFrog platform does not enforce restrictive (non-permissive) authentication for those provider types and keeps permissive authentication enabled regardless. When set to true or left unset, the attribute is accepted for all provider types but only enforced for GitHub. When set, allows authentication without any restrictions. For security best practices, it is recommended to add restrictions to limit access and enforce stricter controls. Use with caution, as this may grant broader access.
    issuerUrl String
    OIDC issuer URL. For GitHub actions, the URL must start with https://token.actions.githubusercontent.com.
    name String
    Name of the OIDC provider
    organization String
    projectKey String
    If set, this Identity Configuration will be available in the scope of the given project (editable by platform admin and project admin). If not set, this Identity Configuration will be global and only editable by platform admin. Once set, the projectKey cannot be changed.
    providerType String
    Type of OIDC provider. Can be generic, GitHub, GitHubEnterprise or Azure.
    tokenIssuer String
    Token issuer URL of the identity provider. Not allowed when provider_type is GitHub or GitHubEnterprise.
    useDefaultProxy Boolean
    This enables and disables the default proxy for OIDC integration. If enabled, the OIDC mechanism will utilize the default proxy for all OIDC requests. If disabled, the OIDC mechanism does not use any proxy for all OIDC requests. Before enabling this functionality you must configure the default proxy.

    Import

    $ pulumi import platform:index/oidcConfiguration:OidcConfiguration my-oidc-configuration my-oidc-configuration

    $ pulumi import platform:index/oidcConfiguration:OidcConfiguration my-oidc-configuration my-oidc-configuration:myproj

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    platform jfrog/terraform-provider-platform
    License
    Notes
    This Pulumi package is based on the platform Terraform Provider.
    Viewing docs for platform 2.2.11
    published on Tuesday, Aug 25, 2026 by jfrog
    Schema (JSON)
    jfrog/terraform-provider-platform

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial