Skip to content

googleIdentityPlatformTenantOauthIdpConfig

OIDC IdP configuration for a Identity Toolkit project within a tenant.

You must enable the Google Identity Platform in the marketplace prior to using this resource.

Open in Cloud Shell

Example Usage - Identity Platform Tenant Oauth Idp Config Basic

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as google from "./.gen/providers/google";
/*The following providers are missing schema information and might need manual adjustments to synthesize correctly: google.
For a more precise conversion please use the --provider flag in convert.*/
const googleIdentityPlatformTenantTenant =
  new google.identityPlatformTenant.IdentityPlatformTenant(this, "tenant", {
    display_name: "tenant",
  });
new google.identityPlatformTenantOauthIdpConfig.IdentityPlatformTenantOauthIdpConfig(
  this,
  "tenant_oauth_idp_config",
  {
    client_id: "client-id",
    client_secret: "secret",
    display_name: "Display Name",
    enabled: true,
    issuer: "issuer",
    name: "oidc.oauth-idp-config",
    tenant: googleIdentityPlatformTenantTenant.name,
  }
);

Argument Reference

The following arguments are supported:

  • name - (Required) The name of the OauthIdpConfig. Must start with oidc.

  • tenant - (Required) The name of the tenant where this OIDC IDP configuration resource exists

  • displayName - (Required) Human friendly display name.

  • issuer - (Required) For OIDC Idps, the issuer identifier.

  • clientId - (Required) The client id of an OAuth client.

  • enabled - (Optional) If this config allows users to sign in with the provider.

  • clientSecret - (Optional) The client secret of the OAuth client, to enable OIDC code flow.

  • project - (Optional) The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

  • id - an identifier for the resource with format projects/{{project}}/tenants/{{tenant}}/oauthIdpConfigs/{{name}}

Timeouts

This resource provides the following Timeouts configuration options:

  • create - Default is 20 minutes.
  • update - Default is 20 minutes.
  • delete - Default is 20 minutes.

Import

TenantOauthIdpConfig can be imported using any of these accepted formats:

$ terraform import google_identity_platform_tenant_oauth_idp_config.default projects/{{project}}/tenants/{{tenant}}/oauthIdpConfigs/{{name}}
$ terraform import google_identity_platform_tenant_oauth_idp_config.default {{project}}/{{tenant}}/{{name}}
$ terraform import google_identity_platform_tenant_oauth_idp_config.default {{tenant}}/{{name}}

User Project Overrides

This resource supports User Project Overrides.