oci_identity_domains_identity_propagation_trust

This resource provides the Identity Propagation Trust resource in Oracle Cloud Infrastructure Identity Domains service.

Register a new Identity Propagation Trust configuration.

Example Usage

resource "oci_identity_domains_identity_propagation_trust" "test_identity_propagation_trust" {
    #Required
    idcs_endpoint = data.oci_identity_domain.test_domain.url
    issuer = var.identity_propagation_trust_issuer
    name = var.identity_propagation_trust_name
    schemas = ["urn:ietf:params:scim:schemas:oracle:idcs:IdentityPropagationTrust"]
    type = var.identity_propagation_trust_type

    #Optional
    account_id = "accountId"
    active = var.identity_propagation_trust_active
    allow_impersonation = var.identity_propagation_trust_allow_impersonation
    attribute_sets = ["all"]
    attributes = ""
    authorization = var.identity_propagation_trust_authorization
    client_claim_name = var.identity_propagation_trust_client_claim_name
    client_claim_values = ["clientClaimValues"]
    clock_skew_seconds = var.identity_propagation_trust_clock_skew_seconds
    description = var.identity_propagation_trust_description
    impersonation_service_users {
        #Required
        rule = var.identity_propagation_trust_impersonation_service_users_rule
        value = oci_identity_domains_user.test_identity_propagation_trust_user.id

        #Optional
        ocid = var.identity_propagation_trust_impersonation_service_users_ocid
    }
    keytab {
        #Required
        secret_ocid = var.identity_propagation_trust_keytab_secret_ocid

        #Optional
        secret_version = var.identity_propagation_trust_keytab_secret_version
    }
    oauth_clients = ["oauthClients"]
    ocid = var.identity_propagation_trust_ocid
    public_certificate = var.identity_propagation_trust_public_certificate
    public_key_endpoint = var.identity_propagation_trust_public_key_endpoint
    resource_type_schema_version = var.identity_propagation_trust_resource_type_schema_version
    subject_claim_name = var.identity_propagation_trust_subject_claim_name
    subject_mapping_attribute = var.identity_propagation_trust_subject_mapping_attribute
    subject_type = var.identity_propagation_trust_subject_type
    tags {
        #Required
        key = var.identity_propagation_trust_tags_key
        value = var.identity_propagation_trust_tags_value
    }
}

Argument Reference

The following arguments are supported:

* IMPORTANT * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Attributes Reference

The following attributes are exported:

Timeouts

The timeouts block allows you to specify timeouts for certain operations: * create - (Defaults to 20 minutes), when creating the Identity Propagation Trust * update - (Defaults to 20 minutes), when updating the Identity Propagation Trust * delete - (Defaults to 20 minutes), when destroying the Identity Propagation Trust

Import

IdentityPropagationTrusts can be imported using the id, e.g.

$ terraform import oci_identity_domains_identity_propagation_trust.test_identity_propagation_trust "idcsEndpoint/{idcsEndpoint}/identityPropagationTrusts/{identityPropagationTrustId}"