oci_identity_domains_identity_propagation_trust

This resource provides the Identity Propagation Trust resource in Oracle Cloud Infrastructure Identity Domains service.

Register a new Identity Propagation Trust configuration.

Example Usage

resource "oci_identity_domains_identity_propagation_trust" "test_identity_propagation_trust" {
	#Required
	idcs_endpoint = data.oci_identity_domain.test_domain.url
	issuer = var.identity_propagation_trust_issuer
	name = var.identity_propagation_trust_name
	schemas = ["urn:ietf:params:scim:schemas:oracle:idcs:IdentityPropagationTrust"]
	type = var.identity_propagation_trust_type

	#Optional
	account_id = "accountId"
	active = var.identity_propagation_trust_active
	allow_impersonation = var.identity_propagation_trust_allow_impersonation
	attribute_sets = ["all"]
	attributes = ""
	authorization = var.identity_propagation_trust_authorization
	client_claim_name = var.identity_propagation_trust_client_claim_name
	client_claim_values = ["clientClaimValues"]
	clock_skew_seconds = var.identity_propagation_trust_clock_skew_seconds
	description = var.identity_propagation_trust_description
	impersonation_service_users {
		#Required
		rule = var.identity_propagation_trust_impersonation_service_users_rule
		value = oci_identity_domains_user.test_identity_propagation_trust_user.id

		#Optional
		ocid = var.identity_propagation_trust_impersonation_service_users_ocid
	}
	keytab {
		#Required
		secret_ocid = var.identity_propagation_trust_keytab_secret_ocid

		#Optional
		secret_version = var.identity_propagation_trust_keytab_secret_version
	}
	oauth_clients = ["oauthClients"]
	ocid = var.identity_propagation_trust_ocid
	public_certificate = var.identity_propagation_trust_public_certificate
	public_key_endpoint = var.identity_propagation_trust_public_key_endpoint
	resource_type_schema_version = var.identity_propagation_trust_resource_type_schema_version
	subject_claim_name = var.identity_propagation_trust_subject_claim_name
	subject_mapping_attribute = var.identity_propagation_trust_subject_mapping_attribute
	subject_type = var.identity_propagation_trust_subject_type
	tags {
		#Required
		key = var.identity_propagation_trust_tags_key
		value = var.identity_propagation_trust_tags_value
	}
}

Argument Reference

The following arguments are supported:

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Attributes Reference

The following attributes are exported:

Timeouts

The timeouts block allows you to specify timeouts for certain operations: * create - (Defaults to 20 minutes), when creating the Identity Propagation Trust * update - (Defaults to 20 minutes), when updating the Identity Propagation Trust * delete - (Defaults to 20 minutes), when destroying the Identity Propagation Trust

Import

IdentityPropagationTrusts can be imported using the id, e.g.

$ terraform import oci_identity_domains_identity_propagation_trust.test_identity_propagation_trust "idcsEndpoint/{idcsEndpoint}/identityPropagationTrusts/{identityPropagationTrustId}"