Create

Create registers a new authentication provider configuration for the tenant.

POST /api/v1/auth-configs

Create

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.TenantAuthConfig.Create(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.TenantAuthConfigServiceCreateResponse != nil {
        // handle response
    }
}

200

{
  "authConfig": {
    "bootstrapDomains": [
      "<string>"
    ],
    "c1Local": {
      "delegatedVerifiers": [
        "DELEGATED_VERIFIER_TYPE_UNSPECIFIED"
      ]
    },
    "createdAt": "2023-11-07T05:31:56Z",
    "deprecationDeadline": "2023-11-07T05:31:56Z",
    "deprecationMessage": "<string>",
    "displayName": "<string>",
    "google": {
      "hostedDomains": [
        "<string>"
      ]
    },
    "id": "<string>",
    "isDefaultBootstrap": true,
    "jumpcloud": {
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>"
    },
    "microsoft": {
      "tenantIds": [
        "<string>"
      ]
    },
    "oidc": {
      "exactMatchClaims": {},
      "issuerId": "<string>",
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>",
      "scopes": [
        "<string>"
      ]
    },
    "okta": {
      "domain": "<string>",
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>"
    },
    "onelogin": {
      "domain": "<string>",
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>"
    },
    "pingone": {
      "environmentId": "<string>",
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>"
    },
    "providerType": "AUTH_CONFIG_PROVIDER_TYPE_UNSPECIFIED",
    "status": "AUTH_CONFIG_STATUS_UNSPECIFIED",
    "updatedAt": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

The TenantAuthConfigServiceCreateRequest message.

This message contains a oneof named provider_config. Only a single field of the following list may be set at a time:

• google
• microsoft
• okta
• onelogin
• jumpcloud
• pingone
• oidc
• c1Local

displayName · string · required

The human-readable name for this authentication provider.

bootstrapDomains · string[] | null

Email domains that route unknown users to this authentication provider during login.

c1Local · Auth Config C 1 Local · object

The AuthConfigC1Local message.

Show child attributes

deprecationDeadline · string<date-time>

deprecationMessage · string

A user-visible message explaining why the provider is deprecated.

google · Auth Config Google · object

The AuthConfigGoogle message.

Show child attributes

isDefaultBootstrap · boolean

Whether this provider is the default for users whose email domain has no explicit mapping.

jumpcloud · Auth Config Jump Cloud · object

The AuthConfigJumpCloud message.

Show child attributes

microsoft · Auth Config Microsoft · object

The AuthConfigMicrosoft message.

Show child attributes

oidc · Auth Config Oidc · object

The AuthConfigOIDC message.

Show child attributes

okta · Auth Config Okta · object

The AuthConfigOkta message.

Show child attributes

onelogin · Auth Config One Login · object

The AuthConfigOneLogin message.

Show child attributes

pingone · Auth Config Ping One · object

The AuthConfigPingOne message.

Show child attributes

status · enum<string>

The initial status of the authentication provider.

Available options: AUTH_CONFIG_STATUS_UNSPECIFIED, AUTH_CONFIG_STATUS_ACTIVE, AUTH_CONFIG_STATUS_DEPRECATED, AUTH_CONFIG_STATUS_DISABLED

Response

200 - application/json

Successful response

The TenantAuthConfigServiceCreateResponse message.

authConfig · Tenant Auth Config · object

The TenantAuthConfig message.

This message contains a oneof named provider_config. Only a single field of the following list may be set at a time:

• google
• microsoft
• okta
• onelogin
• jumpcloud
• pingone
• oidc
• c1Local

Show child attributes