google_identity_platform_tenant_inbound_saml_config

Inbound SAML configuration for a Identity Toolkit tenant.

You must enable the Google Identity Platform in the marketplace prior to using this resource.

Open in Cloud Shell

Example Usage - Identity Platform Tenant Inbound Saml Config Basic

resource "google_identity_platform_tenant" "tenant" {
  display_name  = "tenant"
}

resource "google_identity_platform_tenant_inbound_saml_config" "tenant_saml_config" {
  name         = "saml.tf-config"
  display_name = "Display Name"
  tenant       = google_identity_platform_tenant.tenant.name
  idp_config {
    idp_entity_id = "tf-idp"
    sign_request  = true
    sso_url       = "https://example.com"
    idp_certificates {
      x509_certificate = file("test-fixtures/rsa_cert.pem")
    }
  }

  sp_config {
    sp_entity_id = "tf-sp"
    callback_uri = "https://example.com"
  }
}

Argument Reference

The following arguments are supported:

The idp_config block supports:

The idp_certificates block supports:

The sp_config block supports:

The sp_certificates block contains:


Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

Timeouts

This resource provides the following Timeouts configuration options:

Import

TenantInboundSamlConfig can be imported using any of these accepted formats:

In Terraform v1.5.0 and later, use an import block to import TenantInboundSamlConfig using one of the formats above. For example:

import {
  id = "projects/{{project}}/tenants/{{tenant}}/inboundSamlConfigs/{{name}}"
  to = google_identity_platform_tenant_inbound_saml_config.default
}

When using the terraform import command, TenantInboundSamlConfig can be imported using one of the formats above. For example:

$ terraform import google_identity_platform_tenant_inbound_saml_config.default projects/{{project}}/tenants/{{tenant}}/inboundSamlConfigs/{{name}}
$ terraform import google_identity_platform_tenant_inbound_saml_config.default {{project}}/{{tenant}}/{{name}}
$ terraform import google_identity_platform_tenant_inbound_saml_config.default {{tenant}}/{{name}}

User Project Overrides

This resource supports User Project Overrides.