Creates an identity provider resource that is then associated with a web portal¶

Description¶

Creates an identity provider resource that is then associated with a web portal.

Usage¶

workspacesweb_create_identity_provider(portalArn, identityProviderName,
  identityProviderType, identityProviderDetails, clientToken, tags)

Arguments¶

portalArn

[required] The ARN of the web portal.
identityProviderName

[required] The identity provider name.
identityProviderType

[required] The identity provider type.
identityProviderDetails

[required] The identity provider details. The following list describes the provider detail keys for each identity provider type.
- For Google and Login with Amazon:
  - client_id
  - client_secret
  - authorize_scopes
    - For Facebook:
  - client_id
  - client_secret
  - authorize_scopes
  - api_version
    - For Sign in with Apple:
  - client_id
  - team_id
  - key_id
  - private_key
  - authorize_scopes
    - For OIDC providers:
  - client_id
  - client_secret
  - attributes_request_method
  - oidc_issuer
  - authorize_scopes
  - authorize_url if not available from discovery URL specified by oidc_issuer key
  - token_url if not available from discovery URL specified by oidc_issuer key
  - attributes_url if not available from discovery URL specified by oidc_issuer key
  - jwks_uri if not available from discovery URL specified by oidc_issuer key
    - For SAML providers:
  - MetadataFile OR MetadataURL
  - IDPSignout (boolean) optional
  - IDPInit (boolean) optional
  - RequestSigningAlgorithm (string) optional - Only accepts rsa-sha256
  - EncryptedResponses (boolean) optional
clientToken

A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token returns the result from the original successful request.

If you do not specify a client token, one is automatically generated by the Amazon Web Services SDK.
tags

The tags to add to the identity provider resource. A tag is a key-value pair.

Value¶

A list with the following syntax:

list(
  identityProviderArn = "string"
)

Request syntax¶

svc$create_identity_provider(
  portalArn = "string",
  identityProviderName = "string",
  identityProviderType = "SAML"|"Facebook"|"Google"|"LoginWithAmazon"|"SignInWithApple"|"OIDC",
  identityProviderDetails = list(
    "string"
  ),
  clientToken = "string",
  tags = list(
    list(
      Key = "string",
      Value = "string"
    )
  )
)