Oracle Cloud Infrastructure v2.33.0, May 1 25

Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi

oci.Identity.getDomainsIdentityPropagationTrust

Explore with Pulumi AI

Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testIdentityPropagationTrust = oci.Identity.getDomainsIdentityPropagationTrust({
    idcsEndpoint: testDomain.url,
    identityPropagationTrustId: testIdentityPropagationTrustOciIdentityDomainsIdentityPropagationTrust.id,
    attributeSets: ["all"],
    attributes: "",
    authorization: identityPropagationTrustAuthorization,
    resourceTypeSchemaVersion: identityPropagationTrustResourceTypeSchemaVersion,
});

import pulumi
import pulumi_oci as oci

test_identity_propagation_trust = oci.Identity.get_domains_identity_propagation_trust(idcs_endpoint=test_domain["url"],
    identity_propagation_trust_id=test_identity_propagation_trust_oci_identity_domains_identity_propagation_trust["id"],
    attribute_sets=["all"],
    attributes="",
    authorization=identity_propagation_trust_authorization,
    resource_type_schema_version=identity_propagation_trust_resource_type_schema_version)

package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/identity"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := identity.GetDomainsIdentityPropagationTrust(ctx, &identity.GetDomainsIdentityPropagationTrustArgs{
			IdcsEndpoint:               testDomain.Url,
			IdentityPropagationTrustId: testIdentityPropagationTrustOciIdentityDomainsIdentityPropagationTrust.Id,
			AttributeSets: []string{
				"all",
			},
			Attributes:                pulumi.StringRef(""),
			Authorization:             pulumi.StringRef(identityPropagationTrustAuthorization),
			ResourceTypeSchemaVersion: pulumi.StringRef(identityPropagationTrustResourceTypeSchemaVersion),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testIdentityPropagationTrust = Oci.Identity.GetDomainsIdentityPropagationTrust.Invoke(new()
    {
        IdcsEndpoint = testDomain.Url,
        IdentityPropagationTrustId = testIdentityPropagationTrustOciIdentityDomainsIdentityPropagationTrust.Id,
        AttributeSets = new[]
        {
            "all",
        },
        Attributes = "",
        Authorization = identityPropagationTrustAuthorization,
        ResourceTypeSchemaVersion = identityPropagationTrustResourceTypeSchemaVersion,
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Identity.IdentityFunctions;
import com.pulumi.oci.Identity.inputs.GetDomainsIdentityPropagationTrustArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testIdentityPropagationTrust = IdentityFunctions.getDomainsIdentityPropagationTrust(GetDomainsIdentityPropagationTrustArgs.builder()
            .idcsEndpoint(testDomain.url())
            .identityPropagationTrustId(testIdentityPropagationTrustOciIdentityDomainsIdentityPropagationTrust.id())
            .attributeSets("all")
            .attributes("")
            .authorization(identityPropagationTrustAuthorization)
            .resourceTypeSchemaVersion(identityPropagationTrustResourceTypeSchemaVersion)
            .build());

    }
}

variables:
  testIdentityPropagationTrust:
    fn::invoke:
      function: oci:Identity:getDomainsIdentityPropagationTrust
      arguments:
        idcsEndpoint: ${testDomain.url}
        identityPropagationTrustId: ${testIdentityPropagationTrustOciIdentityDomainsIdentityPropagationTrust.id}
        attributeSets:
          - all
        attributes: ""
        authorization: ${identityPropagationTrustAuthorization}
        resourceTypeSchemaVersion: ${identityPropagationTrustResourceTypeSchemaVersion}

Using getDomainsIdentityPropagationTrust

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getDomainsIdentityPropagationTrust(args: GetDomainsIdentityPropagationTrustArgs, opts?: InvokeOptions): Promise<GetDomainsIdentityPropagationTrustResult>
function getDomainsIdentityPropagationTrustOutput(args: GetDomainsIdentityPropagationTrustOutputArgs, opts?: InvokeOptions): Output<GetDomainsIdentityPropagationTrustResult>

def get_domains_identity_propagation_trust(attribute_sets: Optional[Sequence[str]] = None,
                                           attributes: Optional[str] = None,
                                           authorization: Optional[str] = None,
                                           idcs_endpoint: Optional[str] = None,
                                           identity_propagation_trust_id: Optional[str] = None,
                                           resource_type_schema_version: Optional[str] = None,
                                           opts: Optional[InvokeOptions] = None) -> GetDomainsIdentityPropagationTrustResult
def get_domains_identity_propagation_trust_output(attribute_sets: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                                           attributes: Optional[pulumi.Input[str]] = None,
                                           authorization: Optional[pulumi.Input[str]] = None,
                                           idcs_endpoint: Optional[pulumi.Input[str]] = None,
                                           identity_propagation_trust_id: Optional[pulumi.Input[str]] = None,
                                           resource_type_schema_version: Optional[pulumi.Input[str]] = None,
                                           opts: Optional[InvokeOptions] = None) -> Output[GetDomainsIdentityPropagationTrustResult]

func LookupDomainsIdentityPropagationTrust(ctx *Context, args *LookupDomainsIdentityPropagationTrustArgs, opts ...InvokeOption) (*LookupDomainsIdentityPropagationTrustResult, error)
func LookupDomainsIdentityPropagationTrustOutput(ctx *Context, args *LookupDomainsIdentityPropagationTrustOutputArgs, opts ...InvokeOption) LookupDomainsIdentityPropagationTrustResultOutput

> Note: This function is named LookupDomainsIdentityPropagationTrust in the Go SDK.

public static class GetDomainsIdentityPropagationTrust 
{
    public static Task<GetDomainsIdentityPropagationTrustResult> InvokeAsync(GetDomainsIdentityPropagationTrustArgs args, InvokeOptions? opts = null)
    public static Output<GetDomainsIdentityPropagationTrustResult> Invoke(GetDomainsIdentityPropagationTrustInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetDomainsIdentityPropagationTrustResult> getDomainsIdentityPropagationTrust(GetDomainsIdentityPropagationTrustArgs args, InvokeOptions options)
public static Output<GetDomainsIdentityPropagationTrustResult> getDomainsIdentityPropagationTrust(GetDomainsIdentityPropagationTrustArgs args, InvokeOptions options)

fn::invoke:
  function: oci:Identity/getDomainsIdentityPropagationTrust:getDomainsIdentityPropagationTrust
  arguments:
    # arguments dictionary

The following arguments are supported:

IdcsEndpoint string: The basic endpoint for the identity domain
IdentityPropagationTrustId string: ID of the resource
AttributeSets List<string>: A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If 'attributes' query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive.
Attributes string: A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always.
Authorization string: The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested.
ResourceTypeSchemaVersion string: An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned.

IdcsEndpoint string: The basic endpoint for the identity domain
IdentityPropagationTrustId string: ID of the resource
AttributeSets []string: A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If 'attributes' query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive.
Attributes string: A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always.
Authorization string: The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested.
ResourceTypeSchemaVersion string: An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned.

idcsEndpoint String: The basic endpoint for the identity domain
identityPropagationTrustId String: ID of the resource
attributeSets List<String>: A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If 'attributes' query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive.
attributes String: A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always.
authorization String: The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested.
resourceTypeSchemaVersion String: An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned.

idcsEndpoint string: The basic endpoint for the identity domain
identityPropagationTrustId string: ID of the resource
attributeSets string[]: A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If 'attributes' query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive.
attributes string: A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always.
authorization string: The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested.
resourceTypeSchemaVersion string: An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned.

idcs_endpoint str: The basic endpoint for the identity domain
identity_propagation_trust_id str: ID of the resource
attribute_sets Sequence[str]: A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If 'attributes' query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive.
attributes str: A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always.
authorization str: The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested.
resource_type_schema_version str: An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned.

idcsEndpoint String: The basic endpoint for the identity domain
identityPropagationTrustId String: ID of the resource
attributeSets List<String>: A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If 'attributes' query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive.
attributes String: A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always.
authorization String: The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested.
resourceTypeSchemaVersion String: An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned.

getDomainsIdentityPropagationTrust Result

The following output properties are available:

AccountId string: The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS Account ID, or GCP Project ID.
Active bool: If true, specifies that this Identity Propagation Trust is in an enabled state. The default value is false.
AllowImpersonation bool: Allow customers to define whether the resulting token should contain the authenticated user as the subject or whether the token should impersonate another Application Principal in IAM.
ClientClaimName string: The claim name that identifies to whom the JWT/SAML token is issued. If AWS, then "aud" or "client_id". If Azure, then "appid". If GCP, then "aud".
ClientClaimValues List<string>: The value that corresponds to the client claim name used to identify to whom the token is issued.
ClockSkewSeconds int: The clock skew (in secs) that's allowed for the token issue and expiry time.
CompartmentOcid string: Oracle Cloud Infrastructure Compartment Id (ocid) in which the resource lives.
DeleteInProgress bool: A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long.
Description string: The description of the Identity Propagation Trust.
DomainOcid string: Oracle Cloud Infrastructure Domain Id (ocid) in which the resource lives.
Id string: Unique identifier for the SCIM Resource as defined by the Service Provider. Each representation of the Resource MUST include a non-empty id value. This identifier MUST be unique across the Service Provider's entire set of Resources. It MUST be a stable, non-reassignable identifier that does not change when the same Resource is returned in subsequent requests. The value of the id attribute is always issued by the Service Provider and MUST never be specified by the Service Consumer. bulkId: is a reserved keyword and MUST NOT be used in the unique identifier.
IdcsCreatedBies List<GetDomainsIdentityPropagationTrustIdcsCreatedBy>: The User or App who created the Resource
IdcsEndpoint string
IdcsLastModifiedBies List<GetDomainsIdentityPropagationTrustIdcsLastModifiedBy>: The User or App who modified the Resource
IdcsLastUpgradedInRelease string: The release number when the resource was upgraded.
IdcsPreventedOperations List<string>: Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.
IdentityPropagationTrustId string
ImpersonationServiceUsers List<GetDomainsIdentityPropagationTrustImpersonationServiceUser>: The Impersonating Principal.
Issuer string: The issuer claim of the Identity provider.
Keytabs List<GetDomainsIdentityPropagationTrustKeytab>: The keytab stored in the tenancy's Vault. This is required if the identity propagation type is 'SPNEGO'.
Metas List<GetDomainsIdentityPropagationTrustMeta>: A complex attribute that contains resource metadata. All sub-attributes are OPTIONAL.
Name string: The name of the the Identity Propagation Trust.
OauthClients List<string>: The value of all the authorized OAuth Clients.
Ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
PublicCertificate string: Store the public key if public key cert.
PublicKeyEndpoint string: The cloud provider's public key API of SAML and OIDC providers for signature validation.
Schemas List<string>: REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard "enterprise" extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior.
SubjectClaimName string: Used for locating the subject claim from the incoming token.
SubjectMappingAttribute string: Subject Mapping Attribute to which the value from subject claim name value would be used for identity lookup.
SubjectType string: The type of the resource against which lookup will be made in the identity domain in IAM for the incoming subject claim value.
Tags List<GetDomainsIdentityPropagationTrustTag>: A list of tags on this resource.
TenancyOcid string: Oracle Cloud Infrastructure Tenant Id (ocid) in which the resource lives.
Type string: The type of the inbound token from the Identity cloud provider.
AttributeSets List<string>
Attributes string
Authorization string
ResourceTypeSchemaVersion string

AccountId string: The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS Account ID, or GCP Project ID.
Active bool: If true, specifies that this Identity Propagation Trust is in an enabled state. The default value is false.
AllowImpersonation bool: Allow customers to define whether the resulting token should contain the authenticated user as the subject or whether the token should impersonate another Application Principal in IAM.
ClientClaimName string: The claim name that identifies to whom the JWT/SAML token is issued. If AWS, then "aud" or "client_id". If Azure, then "appid". If GCP, then "aud".
ClientClaimValues []string: The value that corresponds to the client claim name used to identify to whom the token is issued.
ClockSkewSeconds int: The clock skew (in secs) that's allowed for the token issue and expiry time.
CompartmentOcid string: Oracle Cloud Infrastructure Compartment Id (ocid) in which the resource lives.
DeleteInProgress bool: A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long.
Description string: The description of the Identity Propagation Trust.
DomainOcid string: Oracle Cloud Infrastructure Domain Id (ocid) in which the resource lives.
Id string: Unique identifier for the SCIM Resource as defined by the Service Provider. Each representation of the Resource MUST include a non-empty id value. This identifier MUST be unique across the Service Provider's entire set of Resources. It MUST be a stable, non-reassignable identifier that does not change when the same Resource is returned in subsequent requests. The value of the id attribute is always issued by the Service Provider and MUST never be specified by the Service Consumer. bulkId: is a reserved keyword and MUST NOT be used in the unique identifier.
IdcsCreatedBies []GetDomainsIdentityPropagationTrustIdcsCreatedBy: The User or App who created the Resource
IdcsEndpoint string
IdcsLastModifiedBies []GetDomainsIdentityPropagationTrustIdcsLastModifiedBy: The User or App who modified the Resource
IdcsLastUpgradedInRelease string: The release number when the resource was upgraded.
IdcsPreventedOperations []string: Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.
IdentityPropagationTrustId string
ImpersonationServiceUsers []GetDomainsIdentityPropagationTrustImpersonationServiceUser: The Impersonating Principal.
Issuer string: The issuer claim of the Identity provider.
Keytabs []GetDomainsIdentityPropagationTrustKeytab: The keytab stored in the tenancy's Vault. This is required if the identity propagation type is 'SPNEGO'.
Metas []GetDomainsIdentityPropagationTrustMeta: A complex attribute that contains resource metadata. All sub-attributes are OPTIONAL.
Name string: The name of the the Identity Propagation Trust.
OauthClients []string: The value of all the authorized OAuth Clients.
Ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
PublicCertificate string: Store the public key if public key cert.
PublicKeyEndpoint string: The cloud provider's public key API of SAML and OIDC providers for signature validation.
Schemas []string: REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard "enterprise" extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior.
SubjectClaimName string: Used for locating the subject claim from the incoming token.
SubjectMappingAttribute string: Subject Mapping Attribute to which the value from subject claim name value would be used for identity lookup.
SubjectType string: The type of the resource against which lookup will be made in the identity domain in IAM for the incoming subject claim value.
Tags []GetDomainsIdentityPropagationTrustTag: A list of tags on this resource.
TenancyOcid string: Oracle Cloud Infrastructure Tenant Id (ocid) in which the resource lives.
Type string: The type of the inbound token from the Identity cloud provider.
AttributeSets []string
Attributes string
Authorization string
ResourceTypeSchemaVersion string

accountId String: The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS Account ID, or GCP Project ID.
active Boolean: If true, specifies that this Identity Propagation Trust is in an enabled state. The default value is false.
allowImpersonation Boolean: Allow customers to define whether the resulting token should contain the authenticated user as the subject or whether the token should impersonate another Application Principal in IAM.
clientClaimName String: The claim name that identifies to whom the JWT/SAML token is issued. If AWS, then "aud" or "client_id". If Azure, then "appid". If GCP, then "aud".
clientClaimValues List<String>: The value that corresponds to the client claim name used to identify to whom the token is issued.
clockSkewSeconds Integer: The clock skew (in secs) that's allowed for the token issue and expiry time.
compartmentOcid String: Oracle Cloud Infrastructure Compartment Id (ocid) in which the resource lives.
deleteInProgress Boolean: A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long.
description String: The description of the Identity Propagation Trust.
domainOcid String: Oracle Cloud Infrastructure Domain Id (ocid) in which the resource lives.
id String: Unique identifier for the SCIM Resource as defined by the Service Provider. Each representation of the Resource MUST include a non-empty id value. This identifier MUST be unique across the Service Provider's entire set of Resources. It MUST be a stable, non-reassignable identifier that does not change when the same Resource is returned in subsequent requests. The value of the id attribute is always issued by the Service Provider and MUST never be specified by the Service Consumer. bulkId: is a reserved keyword and MUST NOT be used in the unique identifier.
idcsCreatedBies List<GetDomainsPropagationTrustIdcsCreatedBy>: The User or App who created the Resource
idcsEndpoint String
idcsLastModifiedBies List<GetDomainsPropagationTrustIdcsLastModifiedBy>: The User or App who modified the Resource
idcsLastUpgradedInRelease String: The release number when the resource was upgraded.
idcsPreventedOperations List<String>: Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.
identityPropagationTrustId String
impersonationServiceUsers List<GetDomainsPropagationTrustImpersonationServiceUser>: The Impersonating Principal.
issuer String: The issuer claim of the Identity provider.
keytabs List<GetDomainsPropagationTrustKeytab>: The keytab stored in the tenancy's Vault. This is required if the identity propagation type is 'SPNEGO'.
metas List<GetDomainsPropagationTrustMeta>: A complex attribute that contains resource metadata. All sub-attributes are OPTIONAL.
name String: The name of the the Identity Propagation Trust.
oauthClients List<String>: The value of all the authorized OAuth Clients.
ocid String: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
publicCertificate String: Store the public key if public key cert.
publicKeyEndpoint String: The cloud provider's public key API of SAML and OIDC providers for signature validation.
schemas List<String>: REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard "enterprise" extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior.
subjectClaimName String: Used for locating the subject claim from the incoming token.
subjectMappingAttribute String: Subject Mapping Attribute to which the value from subject claim name value would be used for identity lookup.
subjectType String: The type of the resource against which lookup will be made in the identity domain in IAM for the incoming subject claim value.
tags List<GetDomainsPropagationTrustTag>: A list of tags on this resource.
tenancyOcid String: Oracle Cloud Infrastructure Tenant Id (ocid) in which the resource lives.
type String: The type of the inbound token from the Identity cloud provider.
attributeSets List<String>
attributes String
authorization String
resourceTypeSchemaVersion String

accountId string: The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS Account ID, or GCP Project ID.
active boolean: If true, specifies that this Identity Propagation Trust is in an enabled state. The default value is false.
allowImpersonation boolean: Allow customers to define whether the resulting token should contain the authenticated user as the subject or whether the token should impersonate another Application Principal in IAM.
clientClaimName string: The claim name that identifies to whom the JWT/SAML token is issued. If AWS, then "aud" or "client_id". If Azure, then "appid". If GCP, then "aud".
clientClaimValues string[]: The value that corresponds to the client claim name used to identify to whom the token is issued.
clockSkewSeconds number: The clock skew (in secs) that's allowed for the token issue and expiry time.
compartmentOcid string: Oracle Cloud Infrastructure Compartment Id (ocid) in which the resource lives.
deleteInProgress boolean: A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long.
description string: The description of the Identity Propagation Trust.
domainOcid string: Oracle Cloud Infrastructure Domain Id (ocid) in which the resource lives.
id string: Unique identifier for the SCIM Resource as defined by the Service Provider. Each representation of the Resource MUST include a non-empty id value. This identifier MUST be unique across the Service Provider's entire set of Resources. It MUST be a stable, non-reassignable identifier that does not change when the same Resource is returned in subsequent requests. The value of the id attribute is always issued by the Service Provider and MUST never be specified by the Service Consumer. bulkId: is a reserved keyword and MUST NOT be used in the unique identifier.
idcsCreatedBies GetDomainsIdentityPropagationTrustIdcsCreatedBy[]: The User or App who created the Resource
idcsEndpoint string
idcsLastModifiedBies GetDomainsIdentityPropagationTrustIdcsLastModifiedBy[]: The User or App who modified the Resource
idcsLastUpgradedInRelease string: The release number when the resource was upgraded.
idcsPreventedOperations string[]: Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.
identityPropagationTrustId string
impersonationServiceUsers GetDomainsIdentityPropagationTrustImpersonationServiceUser[]: The Impersonating Principal.
issuer string: The issuer claim of the Identity provider.
keytabs GetDomainsIdentityPropagationTrustKeytab[]: The keytab stored in the tenancy's Vault. This is required if the identity propagation type is 'SPNEGO'.
metas GetDomainsIdentityPropagationTrustMeta[]: A complex attribute that contains resource metadata. All sub-attributes are OPTIONAL.
name string: The name of the the Identity Propagation Trust.
oauthClients string[]: The value of all the authorized OAuth Clients.
ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
publicCertificate string: Store the public key if public key cert.
publicKeyEndpoint string: The cloud provider's public key API of SAML and OIDC providers for signature validation.
schemas string[]: REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard "enterprise" extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior.
subjectClaimName string: Used for locating the subject claim from the incoming token.
subjectMappingAttribute string: Subject Mapping Attribute to which the value from subject claim name value would be used for identity lookup.
subjectType string: The type of the resource against which lookup will be made in the identity domain in IAM for the incoming subject claim value.
tags GetDomainsIdentityPropagationTrustTag[]: A list of tags on this resource.
tenancyOcid string: Oracle Cloud Infrastructure Tenant Id (ocid) in which the resource lives.
type string: The type of the inbound token from the Identity cloud provider.
attributeSets string[]
attributes string
authorization string
resourceTypeSchemaVersion string

account_id str: The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS Account ID, or GCP Project ID.
active bool: If true, specifies that this Identity Propagation Trust is in an enabled state. The default value is false.
allow_impersonation bool: Allow customers to define whether the resulting token should contain the authenticated user as the subject or whether the token should impersonate another Application Principal in IAM.
client_claim_name str: The claim name that identifies to whom the JWT/SAML token is issued. If AWS, then "aud" or "client_id". If Azure, then "appid". If GCP, then "aud".
client_claim_values Sequence[str]: The value that corresponds to the client claim name used to identify to whom the token is issued.
clock_skew_seconds int: The clock skew (in secs) that's allowed for the token issue and expiry time.
compartment_ocid str: Oracle Cloud Infrastructure Compartment Id (ocid) in which the resource lives.
delete_in_progress bool: A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long.
description str: The description of the Identity Propagation Trust.
domain_ocid str: Oracle Cloud Infrastructure Domain Id (ocid) in which the resource lives.
id str: Unique identifier for the SCIM Resource as defined by the Service Provider. Each representation of the Resource MUST include a non-empty id value. This identifier MUST be unique across the Service Provider's entire set of Resources. It MUST be a stable, non-reassignable identifier that does not change when the same Resource is returned in subsequent requests. The value of the id attribute is always issued by the Service Provider and MUST never be specified by the Service Consumer. bulkId: is a reserved keyword and MUST NOT be used in the unique identifier.
idcs_created_bies Sequence[GetDomainsIdentityPropagationTrustIdcsCreatedBy]: The User or App who created the Resource
idcs_endpoint str
idcs_last_modified_bies Sequence[GetDomainsIdentityPropagationTrustIdcsLastModifiedBy]: The User or App who modified the Resource
idcs_last_upgraded_in_release str: The release number when the resource was upgraded.
idcs_prevented_operations Sequence[str]: Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.
identity_propagation_trust_id str
impersonation_service_users Sequence[GetDomainsIdentityPropagationTrustImpersonationServiceUser]: The Impersonating Principal.
issuer str: The issuer claim of the Identity provider.
keytabs Sequence[GetDomainsIdentityPropagationTrustKeytab]: The keytab stored in the tenancy's Vault. This is required if the identity propagation type is 'SPNEGO'.
metas Sequence[GetDomainsIdentityPropagationTrustMeta]: A complex attribute that contains resource metadata. All sub-attributes are OPTIONAL.
name str: The name of the the Identity Propagation Trust.
oauth_clients Sequence[str]: The value of all the authorized OAuth Clients.
ocid str: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
public_certificate str: Store the public key if public key cert.
public_key_endpoint str: The cloud provider's public key API of SAML and OIDC providers for signature validation.
schemas Sequence[str]: REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard "enterprise" extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior.
subject_claim_name str: Used for locating the subject claim from the incoming token.
subject_mapping_attribute str: Subject Mapping Attribute to which the value from subject claim name value would be used for identity lookup.
subject_type str: The type of the resource against which lookup will be made in the identity domain in IAM for the incoming subject claim value.
tags Sequence[GetDomainsIdentityPropagationTrustTag]: A list of tags on this resource.
tenancy_ocid str: Oracle Cloud Infrastructure Tenant Id (ocid) in which the resource lives.
type str: The type of the inbound token from the Identity cloud provider.
attribute_sets Sequence[str]
attributes str
authorization str
resource_type_schema_version str

accountId String: The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS Account ID, or GCP Project ID.
active Boolean: If true, specifies that this Identity Propagation Trust is in an enabled state. The default value is false.
allowImpersonation Boolean: Allow customers to define whether the resulting token should contain the authenticated user as the subject or whether the token should impersonate another Application Principal in IAM.
clientClaimName String: The claim name that identifies to whom the JWT/SAML token is issued. If AWS, then "aud" or "client_id". If Azure, then "appid". If GCP, then "aud".
clientClaimValues List<String>: The value that corresponds to the client claim name used to identify to whom the token is issued.
clockSkewSeconds Number: The clock skew (in secs) that's allowed for the token issue and expiry time.
compartmentOcid String: Oracle Cloud Infrastructure Compartment Id (ocid) in which the resource lives.
deleteInProgress Boolean: A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long.
description String: The description of the Identity Propagation Trust.
domainOcid String: Oracle Cloud Infrastructure Domain Id (ocid) in which the resource lives.
id String: Unique identifier for the SCIM Resource as defined by the Service Provider. Each representation of the Resource MUST include a non-empty id value. This identifier MUST be unique across the Service Provider's entire set of Resources. It MUST be a stable, non-reassignable identifier that does not change when the same Resource is returned in subsequent requests. The value of the id attribute is always issued by the Service Provider and MUST never be specified by the Service Consumer. bulkId: is a reserved keyword and MUST NOT be used in the unique identifier.
idcsCreatedBies List<Property Map>: The User or App who created the Resource
idcsEndpoint String
idcsLastModifiedBies List<Property Map>: The User or App who modified the Resource
idcsLastUpgradedInRelease String: The release number when the resource was upgraded.
idcsPreventedOperations List<String>: Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.
identityPropagationTrustId String
impersonationServiceUsers List<Property Map>: The Impersonating Principal.
issuer String: The issuer claim of the Identity provider.
keytabs List<Property Map>: The keytab stored in the tenancy's Vault. This is required if the identity propagation type is 'SPNEGO'.
metas List<Property Map>: A complex attribute that contains resource metadata. All sub-attributes are OPTIONAL.
name String: The name of the the Identity Propagation Trust.
oauthClients List<String>: The value of all the authorized OAuth Clients.
ocid String: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
publicCertificate String: Store the public key if public key cert.
publicKeyEndpoint String: The cloud provider's public key API of SAML and OIDC providers for signature validation.
schemas List<String>: REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard "enterprise" extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior.
subjectClaimName String: Used for locating the subject claim from the incoming token.
subjectMappingAttribute String: Subject Mapping Attribute to which the value from subject claim name value would be used for identity lookup.
subjectType String: The type of the resource against which lookup will be made in the identity domain in IAM for the incoming subject claim value.
tags List<Property Map>: A list of tags on this resource.
tenancyOcid String: Oracle Cloud Infrastructure Tenant Id (ocid) in which the resource lives.
type String: The type of the inbound token from the Identity cloud provider.
attributeSets List<String>
attributes String
authorization String
resourceTypeSchemaVersion String

Supporting Types

GetDomainsIdentityPropagationTrustIdcsCreatedBy

Display string: The displayName of the User or App who modified this Resource
Ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
Ref string
Type string: The type of the inbound token from the Identity cloud provider.
Value string: Value of the tag.

Display string: The displayName of the User or App who modified this Resource
Ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
Ref string
Type string: The type of the inbound token from the Identity cloud provider.
Value string: Value of the tag.

display String: The displayName of the User or App who modified this Resource
ocid String: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref String
type String: The type of the inbound token from the Identity cloud provider.
value String: Value of the tag.

display string: The displayName of the User or App who modified this Resource
ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref string
type string: The type of the inbound token from the Identity cloud provider.
value string: Value of the tag.

display str: The displayName of the User or App who modified this Resource
ocid str: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref str
type str: The type of the inbound token from the Identity cloud provider.
value str: Value of the tag.

display String: The displayName of the User or App who modified this Resource
ocid String: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref String
type String: The type of the inbound token from the Identity cloud provider.
value String: Value of the tag.

GetDomainsIdentityPropagationTrustIdcsLastModifiedBy

Display string: The displayName of the User or App who modified this Resource
Ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
Ref string
Type string: The type of the inbound token from the Identity cloud provider.
Value string: Value of the tag.

Display string: The displayName of the User or App who modified this Resource
Ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
Ref string
Type string: The type of the inbound token from the Identity cloud provider.
Value string: Value of the tag.

display String: The displayName of the User or App who modified this Resource
ocid String: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref String
type String: The type of the inbound token from the Identity cloud provider.
value String: Value of the tag.

display string: The displayName of the User or App who modified this Resource
ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref string
type string: The type of the inbound token from the Identity cloud provider.
value string: Value of the tag.

display str: The displayName of the User or App who modified this Resource
ocid str: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref str
type str: The type of the inbound token from the Identity cloud provider.
value str: Value of the tag.

display String: The displayName of the User or App who modified this Resource
ocid String: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref String
type String: The type of the inbound token from the Identity cloud provider.
value String: Value of the tag.

GetDomainsIdentityPropagationTrustImpersonationServiceUser

Ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
Ref string
Rule string: The rule expression to be used for matching the inbound token for impersonation.
Value string: Value of the tag.

Ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
Ref string
Rule string: The rule expression to be used for matching the inbound token for impersonation.
Value string: Value of the tag.

ocid String: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref String
rule String: The rule expression to be used for matching the inbound token for impersonation.
value String: Value of the tag.

ocid string: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref string
rule string: The rule expression to be used for matching the inbound token for impersonation.
value string: Value of the tag.

ocid str: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref str
rule str: The rule expression to be used for matching the inbound token for impersonation.
value str: Value of the tag.

ocid String: Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.
ref String
rule String: The rule expression to be used for matching the inbound token for impersonation.
value String: Value of the tag.

GetDomainsIdentityPropagationTrustKeytab

SecretOcid string: The OCID of the secret. The secret content corresponding to the OCID is expected to be in Base64 encoded content type.
SecretVersion int: The version of the secret. When the version is not specified, then the latest secret version is used during runtime.

SecretOcid string: The OCID of the secret. The secret content corresponding to the OCID is expected to be in Base64 encoded content type.
SecretVersion int: The version of the secret. When the version is not specified, then the latest secret version is used during runtime.

secretOcid String: The OCID of the secret. The secret content corresponding to the OCID is expected to be in Base64 encoded content type.
secretVersion Integer: The version of the secret. When the version is not specified, then the latest secret version is used during runtime.

secretOcid string: The OCID of the secret. The secret content corresponding to the OCID is expected to be in Base64 encoded content type.
secretVersion number: The version of the secret. When the version is not specified, then the latest secret version is used during runtime.

secret_ocid str: The OCID of the secret. The secret content corresponding to the OCID is expected to be in Base64 encoded content type.
secret_version int: The version of the secret. When the version is not specified, then the latest secret version is used during runtime.

secretOcid String: The OCID of the secret. The secret content corresponding to the OCID is expected to be in Base64 encoded content type.
secretVersion Number: The version of the secret. When the version is not specified, then the latest secret version is used during runtime.

GetDomainsIdentityPropagationTrustMeta

Created string: The DateTime the Resource was added to the Service Provider
LastModified string: The most recent DateTime that the details of this Resource were updated at the Service Provider. If this Resource has never been modified since its initial creation, the value MUST be the same as the value of created. The attribute MUST be a DateTime.
Location string: The URI of the Resource being returned. This value MUST be the same as the Location HTTP response header.
ResourceType string: Name of the resource type of the resource--for example, Users or Groups
Version string: The version of the Resource being returned. This value must be the same as the ETag HTTP response header.

Created string: The DateTime the Resource was added to the Service Provider
LastModified string: The most recent DateTime that the details of this Resource were updated at the Service Provider. If this Resource has never been modified since its initial creation, the value MUST be the same as the value of created. The attribute MUST be a DateTime.
Location string: The URI of the Resource being returned. This value MUST be the same as the Location HTTP response header.
ResourceType string: Name of the resource type of the resource--for example, Users or Groups
Version string: The version of the Resource being returned. This value must be the same as the ETag HTTP response header.

created String: The DateTime the Resource was added to the Service Provider
lastModified String: The most recent DateTime that the details of this Resource were updated at the Service Provider. If this Resource has never been modified since its initial creation, the value MUST be the same as the value of created. The attribute MUST be a DateTime.
location String: The URI of the Resource being returned. This value MUST be the same as the Location HTTP response header.
resourceType String: Name of the resource type of the resource--for example, Users or Groups
version String: The version of the Resource being returned. This value must be the same as the ETag HTTP response header.

created string: The DateTime the Resource was added to the Service Provider
lastModified string: The most recent DateTime that the details of this Resource were updated at the Service Provider. If this Resource has never been modified since its initial creation, the value MUST be the same as the value of created. The attribute MUST be a DateTime.
location string: The URI of the Resource being returned. This value MUST be the same as the Location HTTP response header.
resourceType string: Name of the resource type of the resource--for example, Users or Groups
version string: The version of the Resource being returned. This value must be the same as the ETag HTTP response header.

created str: The DateTime the Resource was added to the Service Provider
last_modified str: The most recent DateTime that the details of this Resource were updated at the Service Provider. If this Resource has never been modified since its initial creation, the value MUST be the same as the value of created. The attribute MUST be a DateTime.
location str: The URI of the Resource being returned. This value MUST be the same as the Location HTTP response header.
resource_type str: Name of the resource type of the resource--for example, Users or Groups
version str: The version of the Resource being returned. This value must be the same as the ETag HTTP response header.

created String: The DateTime the Resource was added to the Service Provider
lastModified String: The most recent DateTime that the details of this Resource were updated at the Service Provider. If this Resource has never been modified since its initial creation, the value MUST be the same as the value of created. The attribute MUST be a DateTime.
location String: The URI of the Resource being returned. This value MUST be the same as the Location HTTP response header.
resourceType String: Name of the resource type of the resource--for example, Users or Groups
version String: The version of the Resource being returned. This value must be the same as the ETag HTTP response header.

GetDomainsIdentityPropagationTrustTag

Key string: Key or name of the tag.
Value string: Value of the tag.

Key string: Key or name of the tag.
Value string: Value of the tag.

key String: Key or name of the tag.
value String: Value of the tag.

key string: Key or name of the tag.
value string: Value of the tag.

key str: Key or name of the tag.
value str: Value of the tag.

key String: Key or name of the tag.
value String: Value of the tag.

Package Details

Repository: oci pulumi/pulumi-oci
License: Apache-2.0
Notes: This Pulumi package is based on the oci Terraform Provider.

Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi

pulumi/pulumi-oci

oci.Identity.getDomainsIdentityPropagationTrust

On this page

On this page

Example Usage

Using getDomainsIdentityPropagationTrust

getDomainsIdentityPropagationTrust Result

Supporting Types

GetDomainsIdentityPropagationTrustIdcsCreatedBy

GetDomainsIdentityPropagationTrustIdcsLastModifiedBy

GetDomainsIdentityPropagationTrustImpersonationServiceUser

GetDomainsIdentityPropagationTrustKeytab

GetDomainsIdentityPropagationTrustMeta

GetDomainsIdentityPropagationTrustTag

Package Details

On this page

On this page