lbcli create idp-configuration

AI Tools

Creates a new idp-configuration.

Synopsis

This is step one of a three-step operation, mapping an identity provider (IdP) to a Lightbits authorization engine scope and role.

The required steps for using IdP are:

  1. Step 1: Create an idp-configuration, configuring an IdP cluster to work with.

  2. Step 2: Create an idp-client-configuration, specifying the app/user mode of operation for a specific client.

  3. Step 3: Create an auth-map-entry, mapping the identifier (client ID or group information) to a Lightbits scope/role.

lbcli create idp-configuration [flags]

Examples:

# Create a new Identity Provider (IdP) configuration resource: idp-configuration. lbcli -J $JWT create idp-configuration --name idp1 --idp-issuer-url https://idp1.com --type adfs lbcli -J $JWT create idp-configuration --name idp2 --idp-issuer-url https://my-org.okta.com/oauth2/default --type okta

Flag

Short

Type

Default

Description

--help

-h

bool


Help for idp-configuration.

--idp-issuer-url


string


IdP Issuer URL (required).

--name


string


IdP name (required).

--type


string


IdP type (ADFS or Okta) (required).

--proxy-password


string


Password for the proxy server (relevant and optional only if proxy is provided).

--proxy-url


string


URL of the proxy server (optional). Pattern: http://<server-ip>:<port>.

--proxy-username


string


Username for the proxy server (relevant and optional only if proxy is provided).