The random 20 alphanumeric string id of the service identity user.
The existing identity provider to update.
the identifier of the identity provider to assign to the service identity
duration in seconds the identity provider tokens issued for the service identity is valid for after initial token verification.
mapped custom attribute values.
mapped custom attribute value.
Successfully assigned identity provider to service identity.
model of the workload identity provider currently assigned to a service identity
Provider's identity attributes mapped to Britive service identity custom attributes.
Single identity provider attribute mapped to service identity custom attribute
How the service identity's mapped attribute value is compared against the incoming token claim. EXACT compares literally. REGEX treats the stored value as a regular expression, applied fully anchored and case-insensitively by default; a pattern may opt into case-sensitive matching with the inline (?-i) modifier.
Optional, and omitting it means EXACT. Because updating an identity provider replaces its attribute map, a client that omits this field when updating a provider resets any mapping that was REGEX back to EXACT. The stored value is then compared literally, so a pattern such as repo:myorg/myrepo:ref:refs/heads/feature/.* will no longer match any token and the identities relying on it stop authenticating. Clients that update identity providers must read the current match type and send it back, not omit it.
The amount of time in seconds, after the token has been issued/signed, Britive will attempt to validate the unverified token. Outside this window, token validation will fail.
duration in seconds the identity provider tokens issued for the service identity is valid for after initial token verification.
mapped custom attribute values.
mapped custom attribute value.