Skip to main content

diagrid idp create

Create an IDP federation

Description​

Create an IDP federation.

Run without arguments to create interactively, or pass a name and flags to create non-interactively.

diagrid idp create [name] [flags]

Examples​


  # Create an IDP federation with inline flags
  diagrid idp create acme-auth0 \
      --type auth0 \
      --issuer https://acme.us.auth0.com/ \
      --audience https://catalyst.diagrid.io/

  # Create an IDP federation interactively
  diagrid idp create

Options​

      --type string                Identity provider type (auth0, entra, google, oidc) (default "auth0")
      --issuer string              OpenID Connect issuer URL (required); matched against the inbound JWT 'iss' claim
      --audience strings           Accepted 'aud' claim value (required); repeatable or comma-separated
      --jwks-uri string            JWKS endpoint override; derived via OIDC discovery when omitted
      --required-scope strings     Scope that must be present on inbound tokens; repeatable or comma-separated
      --accept-algorithm strings   Accepted JWS signing algorithm; repeatable or comma-separated (default RS256)
      --claim-subject string       Inbound claim carrying the subject identifier
      --claim-tenant string        Inbound claim carrying the tenant identifier
      --claim-email string         Inbound claim carrying the email address
      --claim-groups string        Inbound claim carrying group memberships
      --claim-scopes string        Inbound claim carrying granted scopes
      --scope-format string        Encoding of the scopes claim (space_delimited or array)
  -h, --help                       help for create

Options inherited from parent commands​

      --api-key string   Diagrid Cloud API key

SEE ALSO​

Last updated on