Britive platform release 2026.03.01 is now live in production.

Add new workload identity provider

Prev Next
Post
/api/workload/identity-providers
Security
HTTP
Type bearer
Body parameters
Expand All

The new identity provider to add.

OneOf
AwsProvider
object (AwsProvider)
id
integer (int32)
name
string Required
description
string
attributesMap
Array of object (AttributeMap)

Provider's identity attributes mapped to Britive service identity custom attributes.

object

Single identity provider attribute mapped to service identity custom attribute

idpAttr
string Required
userAttr
string Required
validationWindow
integer (int32)

The amount of time in seconds, after the token has been issued/signed, Britive will attempt to validate the unverified token. Outside this window, token validation will fail.

idpType
string Required
maxDuration
integer (int32)

The maximum number of hours the client can request the AWS token be valid.

OpenIdConnectProvider
object (OpenIdConnectProvider)
id
integer (int32)
name
string Required
description
string
attributesMap
Array of object (AttributeMap)

Provider's identity attributes mapped to Britive service identity custom attributes.

object

Single identity provider attribute mapped to service identity custom attribute

idpAttr
string Required
userAttr
string Required
validationWindow
integer (int32)

The amount of time in seconds, after the token has been issued/signed, Britive will attempt to validate the unverified token. Outside this window, token validation will fail.

idpType
string Required
issuerUrl
string
allowedAudiences
Array of string
string
object
object
id
integer (int32)
name
string Required
description
string
attributesMap
Array of object (AttributeMap)

Provider's identity attributes mapped to Britive service identity custom attributes.

object

Single identity provider attribute mapped to service identity custom attribute

idpAttr
string Required
userAttr
string Required
validationWindow
integer (int32)

The amount of time in seconds, after the token has been issued/signed, Britive will attempt to validate the unverified token. Outside this window, token validation will fail.

idpType
string Required
bundleEndpoint
string (uri)
bundleProfile
string

the SPIFFE bundle endpoint profile

Valid values[ "https_web", "https_spiffe" ]
trustDomain
string
Responses
200

Identity provider successfully created.

Expand All
OneOf
AwsProvider
object (AwsProvider)
id
integer (int32)
name
string
description
string
attributesMap
Array of object (AttributeMap)

Provider's identity attributes mapped to Britive service identity custom attributes.

object

Single identity provider attribute mapped to service identity custom attribute

idpAttr
string
userAttr
string
validationWindow
integer (int32)

The amount of time in seconds, after the token has been issued/signed, Britive will attempt to validate the unverified token. Outside this window, token validation will fail.

idpType
string
maxDuration
integer (int32)

The maximum number of hours the client can request the AWS token be valid.

OpenIdConnectProvider
object (OpenIdConnectProvider)
id
integer (int32)
name
string
description
string
attributesMap
Array of object (AttributeMap)

Provider's identity attributes mapped to Britive service identity custom attributes.

object

Single identity provider attribute mapped to service identity custom attribute

idpAttr
string
userAttr
string
validationWindow
integer (int32)

The amount of time in seconds, after the token has been issued/signed, Britive will attempt to validate the unverified token. Outside this window, token validation will fail.

idpType
string
issuerUrl
string
allowedAudiences
Array of string
string
object
object
id
integer (int32)
name
string
description
string
attributesMap
Array of object (AttributeMap)

Provider's identity attributes mapped to Britive service identity custom attributes.

object

Single identity provider attribute mapped to service identity custom attribute

idpAttr
string
userAttr
string
validationWindow
integer (int32)

The amount of time in seconds, after the token has been issued/signed, Britive will attempt to validate the unverified token. Outside this window, token validation will fail.

idpType
string
bundleEndpoint
string (uri)
bundleProfile
string

the SPIFFE bundle endpoint profile

Valid values[ "https_web", "https_spiffe" ]
trustDomain
string