com.oracle.bmc.identitydomains.model

Class IdentityPropagationTrust.Builder

java.lang.Object

com.oracle.bmc.identitydomains.model.IdentityPropagationTrust.Builder

Enclosing class:

IdentityPropagationTrust

public static class IdentityPropagationTrust.Builder
extends Object

Constructor Summary

Constructors

Constructor and Description
Builder()

Method Summary

Modifier and Type	Method and Description
IdentityPropagationTrust.Builder	accountId(String accountId) The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS Account ID, or GCP Project ID.
IdentityPropagationTrust.Builder	active(Boolean active) If true, specifies that this Identity Propagation Trust is in an enabled state.
IdentityPropagationTrust.Builder	allowImpersonation(Boolean allowImpersonation) Allow customers to define whether the resulting token should contain the authenticated user as the subject or whether the token should impersonate another Application Principal in IAM.
IdentityPropagationTrust	build()
IdentityPropagationTrust.Builder	clientClaimName(String clientClaimName) The claim name that identifies to whom the JWT/SAML token is issued.
IdentityPropagationTrust.Builder	clientClaimValues(List<String> clientClaimValues) The value that corresponds to the client claim name used to identify to whom the token is issued.
IdentityPropagationTrust.Builder	clockSkewSeconds(Integer clockSkewSeconds) The clock skew (in secs) that’s allowed for the token issue and expiry time.
IdentityPropagationTrust.Builder	compartmentOcid(String compartmentOcid) OCI Compartment Id (ocid) in which the resource lives.
IdentityPropagationTrust.Builder	copy(IdentityPropagationTrust model)
IdentityPropagationTrust.Builder	deleteInProgress(Boolean deleteInProgress) A boolean flag indicating this resource in the process of being deleted.
IdentityPropagationTrust.Builder	description(String description) The description of the Identity Propagation Trust.
IdentityPropagationTrust.Builder	domainOcid(String domainOcid) OCI Domain Id (ocid) in which the resource lives.
IdentityPropagationTrust.Builder	id(String id) Unique identifier for the SCIM Resource as defined by the Service Provider.
IdentityPropagationTrust.Builder	idcsCreatedBy(IdcsCreatedBy idcsCreatedBy)
IdentityPropagationTrust.Builder	idcsLastModifiedBy(IdcsLastModifiedBy idcsLastModifiedBy)
IdentityPropagationTrust.Builder	idcsLastUpgradedInRelease(String idcsLastUpgradedInRelease) The release number when the resource was upgraded.
IdentityPropagationTrust.Builder	idcsPreventedOperations(List<IdcsPreventedOperations> idcsPreventedOperations) Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.
IdentityPropagationTrust.Builder	impersonationServiceUsers(List<IdentityPropagationTrustImpersonationServiceUsers> impersonationServiceUsers) The Impersonating Principal.
IdentityPropagationTrust.Builder	issuer(String issuer) The issuer claim of the Identity provider.
IdentityPropagationTrust.Builder	keytab(IdentityPropagationTrustKeytab keytab)
IdentityPropagationTrust.Builder	meta(Meta meta)
IdentityPropagationTrust.Builder	name(String name) The name of the the Identity Propagation Trust.
IdentityPropagationTrust.Builder	oauthClients(List<String> oauthClients) The value of all the authorized OAuth Clients.
IdentityPropagationTrust.Builder	ocid(String ocid) Unique OCI identifier for the SCIM Resource.
IdentityPropagationTrust.Builder	publicCertificate(String publicCertificate) Store the public key if public key cert.
IdentityPropagationTrust.Builder	publicKeyEndpoint(String publicKeyEndpoint) The cloud provider’s public key API of SAML and OIDC providers for signature validation.
IdentityPropagationTrust.Builder	schemas(List<String> schemas) REQUIRED.
IdentityPropagationTrust.Builder	subjectClaimName(String subjectClaimName) Used for locating the subject claim from the incoming token.
IdentityPropagationTrust.Builder	subjectMappingAttribute(String subjectMappingAttribute) Subject Mapping Attribute to which the value from subject claim name value would be used for identity lookup.
IdentityPropagationTrust.Builder	subjectType(IdentityPropagationTrust.SubjectType subjectType) The type of the resource against which lookup will be made in the identity domain in IAM for the incoming subject claim value.
IdentityPropagationTrust.Builder	tags(List<Tags> tags) A list of tags on this resource.
IdentityPropagationTrust.Builder	tenancyOcid(String tenancyOcid) OCI Tenant Id (ocid) in which the resource lives.
IdentityPropagationTrust.Builder	type(IdentityPropagationTrust.Type type) The type of the inbound token from the Identity cloud provider.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Builder

public Builder()

Method Detail

id

public IdentityPropagationTrust.Builder id(String id)

Unique identifier for the SCIM Resource as defined by the Service Provider. Each representation of the Resource MUST include a non-empty id value. This identifier MUST be unique across the Service Provider’s entire set of Resources. It MUST be a stable, non-reassignable identifier that does not change when the same Resource is returned in subsequent requests. The value of the id attribute is always issued by the Service Provider and MUST never be specified by the Service Consumer. bulkId: is a reserved keyword and MUST NOT be used in the unique identifier.

*SCIM++ Properties:** - caseExact: false - idcsSearchable: true - multiValued: false - mutability: readOnly - required: false - returned: always - type: string - uniqueness: global

Parameters:

id - the value to set

Returns:

this builder

ocid

public IdentityPropagationTrust.Builder ocid(String ocid)

Unique OCI identifier for the SCIM Resource.

*SCIM++ Properties:** - caseExact: true - idcsSearchable: true - multiValued: false - mutability: immutable - required: false - returned: default - type: string - uniqueness: global

Parameters:

ocid - the value to set

Returns:

this builder

schemas

public IdentityPropagationTrust.Builder schemas(List<String> schemas)

REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard \“enterprise\” extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior.

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: true - mutability: readWrite - required: true - returned: default - type: string - uniqueness: none

Parameters:

schemas - the value to set

Returns:

this builder

meta

public IdentityPropagationTrust.Builder meta(Meta meta)

idcsCreatedBy

public IdentityPropagationTrust.Builder idcsCreatedBy(IdcsCreatedBy idcsCreatedBy)

idcsLastModifiedBy

public IdentityPropagationTrust.Builder idcsLastModifiedBy(IdcsLastModifiedBy idcsLastModifiedBy)

idcsPreventedOperations

public IdentityPropagationTrust.Builder idcsPreventedOperations(List<IdcsPreventedOperations> idcsPreventedOperations)

Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.

*SCIM++ Properties:** - idcsSearchable: false - multiValued: true - mutability: readOnly - required: false - returned: request - type: string - uniqueness: none

Parameters:

idcsPreventedOperations - the value to set

Returns:

this builder

tags

public IdentityPropagationTrust.Builder tags(List<Tags> tags)

A list of tags on this resource.

*SCIM++ Properties:** - idcsCompositeKey: [key, value] - idcsSearchable: true - multiValued: true - mutability: readWrite - required: false - returned: request - type: complex - uniqueness: none

Parameters:

tags - the value to set

Returns:

this builder

deleteInProgress

public IdentityPropagationTrust.Builder deleteInProgress(Boolean deleteInProgress)

A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long.

*SCIM++ Properties:** - caseExact: false - idcsSearchable: true - multiValued: false - mutability: readOnly - required: false - returned: default - type: boolean - uniqueness: none

Parameters:

deleteInProgress - the value to set

Returns:

this builder

idcsLastUpgradedInRelease

public IdentityPropagationTrust.Builder idcsLastUpgradedInRelease(String idcsLastUpgradedInRelease)

The release number when the resource was upgraded.

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readOnly - required: false - returned: request - type: string - uniqueness: none

Parameters:

idcsLastUpgradedInRelease - the value to set

Returns:

this builder

domainOcid

public IdentityPropagationTrust.Builder domainOcid(String domainOcid)

OCI Domain Id (ocid) in which the resource lives.

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readOnly - required: false - returned: default - type: string - uniqueness: none

Parameters:

domainOcid - the value to set

Returns:

this builder

compartmentOcid

public IdentityPropagationTrust.Builder compartmentOcid(String compartmentOcid)

OCI Compartment Id (ocid) in which the resource lives.

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readOnly - required: false - returned: default - type: string - uniqueness: none

Parameters:

compartmentOcid - the value to set

Returns:

this builder

tenancyOcid

public IdentityPropagationTrust.Builder tenancyOcid(String tenancyOcid)

OCI Tenant Id (ocid) in which the resource lives.

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readOnly - required: false - returned: default - type: string - uniqueness: none

Parameters:

tenancyOcid - the value to set

Returns:

this builder

name

public IdentityPropagationTrust.Builder name(String name)

The name of the the Identity Propagation Trust.

*SCIM++ Properties:** - type: string - caseExact: false - idcsSearchable: true - multiValued: false - required: true - mutability: immutable - returned: default - uniqueness: none

Parameters:

name - the value to set

Returns:

this builder

description

public IdentityPropagationTrust.Builder description(String description)

The description of the Identity Propagation Trust.

*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - caseExact: false - idcsSearchable: false

Parameters:

description - the value to set

Returns:

this builder

type

public IdentityPropagationTrust.Builder type(IdentityPropagationTrust.Type type)

The type of the inbound token from the Identity cloud provider.

*SCIM++ Properties:** - caseExact: true - idcsSearchable: false - required: true - mutability: readWrite - returned: default - type: string - multiValued: false - uniqueness: none

Parameters:

type - the value to set

Returns:

this builder

issuer

public IdentityPropagationTrust.Builder issuer(String issuer)

The issuer claim of the Identity provider.

*SCIM++ Properties:** - type: string - multiValued: false - required: true - mutability: readWrite - returned: always - caseExact: true - idcsSearchable: true - uniqueness: server

Parameters:

issuer - the value to set

Returns:

this builder

accountId

public IdentityPropagationTrust.Builder accountId(String accountId)

The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS Account ID, or GCP Project ID.

*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - caseExact: true - idcsSearchable: true - uniqueness: none

Parameters:

accountId - the value to set

Returns:

this builder

subjectClaimName

public IdentityPropagationTrust.Builder subjectClaimName(String subjectClaimName)

Used for locating the subject claim from the incoming token.

*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - caseExact: true - idcsSearchable: false

Parameters:

subjectClaimName - the value to set

Returns:

this builder

subjectMappingAttribute

public IdentityPropagationTrust.Builder subjectMappingAttribute(String subjectMappingAttribute)

Subject Mapping Attribute to which the value from subject claim name value would be used for identity lookup.

*SCIM++ Properties:** - type: string - multiValued: false - idcsSearchable: false - required: false - mutability: readWrite - returned: default - uniqueness: none

Parameters:

subjectMappingAttribute - the value to set

Returns:

this builder

subjectType

public IdentityPropagationTrust.Builder subjectType(IdentityPropagationTrust.SubjectType subjectType)

The type of the resource against which lookup will be made in the identity domain in IAM for the incoming subject claim value.

*SCIM++ Properties:** - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none

Parameters:

subjectType - the value to set

Returns:

this builder

clientClaimName

public IdentityPropagationTrust.Builder clientClaimName(String clientClaimName)

The claim name that identifies to whom the JWT/SAML token is issued. If AWS, then \“aud\” or \“client_id\”. If Azure, then \“appid\”. If GCP, then \“aud\”.

*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - idcsSearchable: false

Parameters:

clientClaimName - the value to set

Returns:

this builder

clientClaimValues

public IdentityPropagationTrust.Builder clientClaimValues(List<String> clientClaimValues)

The value that corresponds to the client claim name used to identify to whom the token is issued.

*SCIM++ Properties:** - type: string - multiValued: true - required: false - mutability: readWrite - returned: default - uniqueness: none - caseExact: true - idcsSearchable: false

Parameters:

clientClaimValues - the value to set

Returns:

this builder

active

public IdentityPropagationTrust.Builder active(Boolean active)

If true, specifies that this Identity Propagation Trust is in an enabled state. The default value is false.

*SCIM++ Properties:** - type: boolean - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - idcsSearchable: true

Parameters:

active - the value to set

Returns:

this builder

publicKeyEndpoint

public IdentityPropagationTrust.Builder publicKeyEndpoint(String publicKeyEndpoint)

The cloud provider’s public key API of SAML and OIDC providers for signature validation.

*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - caseExact: false - idcsSearchable: false

Parameters:

publicKeyEndpoint - the value to set

Returns:

this builder

publicCertificate

public IdentityPropagationTrust.Builder publicCertificate(String publicCertificate)

Store the public key if public key cert.

*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - idcsSearchable: false

Parameters:

publicCertificate - the value to set

Returns:

this builder

oauthClients

public IdentityPropagationTrust.Builder oauthClients(List<String> oauthClients)

The value of all the authorized OAuth Clients.

*SCIM++ Properties:** - idcsSearchable: false - multiValued: true - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none

Parameters:

oauthClients - the value to set

Returns:

this builder

allowImpersonation

public IdentityPropagationTrust.Builder allowImpersonation(Boolean allowImpersonation)

Allow customers to define whether the resulting token should contain the authenticated user as the subject or whether the token should impersonate another Application Principal in IAM.

*SCIM++ Properties:** - type: boolean - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - idcsSearchable: false

Parameters:

allowImpersonation - the value to set

Returns:

this builder

clockSkewSeconds

public IdentityPropagationTrust.Builder clockSkewSeconds(Integer clockSkewSeconds)

The clock skew (in secs) that’s allowed for the token issue and expiry time.

*Added In:** 2308181911

*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: integer - uniqueness: none

Parameters:

clockSkewSeconds - the value to set

Returns:

this builder

impersonationServiceUsers

public IdentityPropagationTrust.Builder impersonationServiceUsers(List<IdentityPropagationTrustImpersonationServiceUsers> impersonationServiceUsers)

The Impersonating Principal.

*SCIM++ Properties:** - idcsCompositeKey: [rule, value] - idcsSearchable: false - multiValued: true - mutability: readWrite - required: false - returned: request - type: complex - uniqueness: none

Parameters:

impersonationServiceUsers - the value to set

Returns:

this builder

keytab

public IdentityPropagationTrust.Builder keytab(IdentityPropagationTrustKeytab keytab)

build

public IdentityPropagationTrust build()

copy

public IdentityPropagationTrust.Builder copy(IdentityPropagationTrust model)