gdcloud iam identity-provider-configs create

NAME

gdcloud iam identity-provider-configs create - Create an identity provider configuration.

SYNOPSIS

gdcloud iam identity-provider-configs create IDENTITY_PROVIDER_ID [flags]

DESCRIPTION

Create an identity provider configuration for OIDC or SAML, with individual settings or a YAML file.

EXAMPLES

To create an identity provider with OIDC, run:

    gdcloud iam identity-provider-configs create example-identity-provider-id --input-type=oidc \
        --oidc-issuer-uri "https://issuer.example.com" \
        --oidc-client-id "client-123" \
        --oidc-ca-data "cert-data-example" \
        --oidc-groups-claim "groups" \
        --oidc-groups-prefix "group-1" \
        --oidc-user-claim "userId" \
        --oidc-scopes "openid"

To create an identity provider with SAML, run:

    gdcloud iam identity-provider-configs create example-identity-provider-id --input-type=saml\
        --saml-group-attribute "default group value" \
        --saml-group-prefix "customer1prod" \
        --saml-idp-entity-id "https://sample.com" \
        --saml-idp-sso-uri "https://sso.sample.com" \
        --saml-user-prefix "customer1prod"

To create an identity provider from a YAML configuration file, run:

    gdcloud iam identity-provider-configs create example-identity-provider-id --input-type=file --file=YAML_FILE

REQUIRED FLAGS

      --input-type string   IDP input type (allowed: oidc, saml, file).

OPTIONAL FLAGS

      --file string                       Path to file or directory containing YAML configuration for the IDP config.
      --oidc-attribute-mapping string     OIDC attribute mapping (in json format).
      --oidc-ca-data string               OIDC Certificate Authority (CA) data.
      --oidc-client-id string             OIDC client ID.
      --oidc-client-secret string         OIDC client secret.
      --oidc-console-uri string           OIDC cloud console URI.
      --oidc-group-prefix string          OIDC groups prefix.
      --oidc-groups-claim string          OIDC group claim.
      --oidc-issuer-uri string            OIDC issuer URI.
      --oidc-kubectl-uri string           OIDC kubectl redirect URI.
      --oidc-scopes string                OIDC scopes.
      --oidc-user-claim string            OIDC user Claim.
      --oidc-user-prefix string           OIDC user prefix.
      --saml-attribute-mapping string     SAML attribute mapping (in json format).
      --saml-encrypted-assertion string   SAML encrypted assertion (in json format).
      --saml-group-attribute string       SAML group attribute.
      --saml-group-prefix string          SAML group prefix.
      --saml-idp-cert-data stringArray    SAML IDP certificate data list.
      --saml-idp-entity-id string         SAML identity ID.
      --saml-idp-sso-uri string           SAML IDP single sign on URI.
      --saml-signed-requests string       SAML signed requests (in json format).
      --saml-user-attribute string        SAML user attribute.
      --saml-user-prefix string           SAML user prefix.

GDCLOUD WIDE FLAGS

These flags are available to all commands: --configuration, --format, --help, --project, --quiet.

For more information, see the gdcloud CLI reference overview page.