Resolve which service identities and AI identities the supplied identity provider attribute values would match, using the same lookup performed when a token is validated. Lets an administrator see what a mapping actually does before relying on it — in particular whether more than one identity matches, since a token matching more than one identity authenticates none of them.
The identity provider and the attribute values to resolve.
Identity provider attribute values to resolve against its designated identities.
the identifier of the workload identity provider to resolve against
A value for each identity provider attribute to test. Attributes the provider maps but that are not supplied here are not constrained, so supplying every mapped attribute gives the same answer token validation would.
A value for one of the identity provider's mapped attributes.
the identity provider attribute name, as configured in the attribute map
the value to test, as it would arrive in a token claim
the matching identities, empty when nothing matches
An identity that the supplied attribute values resolve to.
the type of identity matched; only these types can authenticate as a workload