Cria um provedor de identidade (IdP) OpenID Connect (OIDC).
Sintaxe
{
"Type": "ALIYUN::RAM::OIDCProvider",
"Properties": {
"Fingerprints": List,
"IssuerUrl": String,
"OIDCProviderName": String,
"ClientIds": List,
"Description": String,
"IssuanceLimitTime": Integer
}
}Propriedades
|
Propriedade |
Tipo |
Obrigatória |
Editável |
Descrição |
Restrição |
|
Fingerprints |
List |
Sim |
Não |
Impressões digitais do certificado da autoridade de certificação (CA) HTTPS. |
Um IdP externo fornece as impressões digitais. Especifique até cinco impressões digitais. |
|
IssuerUrl |
String |
Sim |
Não |
URL do emissor. |
Nenhuma. |
|
OIDCProviderName |
String |
Sim |
Não |
Nome do IdP OIDC. |
Nenhuma. |
|
ClientIds |
List |
Não |
Sim |
IDs dos clientes. |
Nenhuma. |
|
Description |
String |
Não |
Sim |
Descrição do IdP OIDC. |
Nenhuma. |
|
IssuanceLimitTime |
Integer |
Não |
Sim |
Janela de tempo inicial em que um IdP externo pode emitir um token de ID. |
O sistema rejeita a solicitação se o tempo decorrido entre o momento especificado pelo campo iat no token de ID e o horário atual exceder este valor. Unidade: hora. Valores válidos: 1 a 168. |
Valores de retorno
Fn::GetAtt
OIDCProviderName: o nome do IdP OIDC.
Exemplos
ROSTemplateFormatVersion: '2015-09-01'
Parameters:
OIDCProviderName:
Type: String
Description:
en: |-
The name of the OIDC IdP.
The name can contain letters, digits, and special characters and cannot start or end with the special characters. The special characters are periods, (.), hyphens (-), and underscores (_).``
The name can be up to 128 characters in length.
AllowedPattern: ^[a-zA-Z0-9][a-zA-Z0-9._-]{0,126}[a-zA-Z0-9]$
Required: true
MaxLength: 128
Fingerprints:
AssociationPropertyMetadata:
Parameter:
Type: String
Description:
en: |-
The fingerprint of the HTTPS certificate, which is provided by the external IdP Okta. If you want to specify multiple fingerprints, separate the fingerprints with commas (,).
The fingerprint can contain letters and digits.
The fingerprint can be up to 40 characters in length.
Required: false
AllowedPattern: ^[a-zA-Z0-9]{0,40}$
MaxLength: 40
AssociationProperty: List[Parameter]
Type: Json
Description:
en: The list of the fingerprints, max length is 5
Required: true
MinLength: 1
MaxLength: 5
IssuerUrl:
Type: String
Description:
en: |-
The URL of the issuer, which is provided by the external IdP. The URL of the issuer must be unique within an Alibaba Cloud account.
The URL of the issuer must start with https and be in the valid URL format. The URL cannot contain query parameters that follow a question mark (?) or logon information that is identified by at signs (@). The URL cannot be a fragment URL that contains number signs (#).
The URL can be up to 255 characters in length.
Required: true
MaxLength: 255
Resources:
OIDCProvider:
Type: ALIYUN::RAM::OIDCProvider
Properties:
OIDCProviderName:
Ref: OIDCProviderName
Fingerprints:
Ref: Fingerprints
IssuerUrl:
Ref: IssuerUrl
Outputs:
OIDCProviderName:
Description: |-
The name of the OIDC IdP.
The name can contain letters, digits, and special characters and cannot start or end with the special characters. The special characters are periods, (.), hyphens (-), and underscores (_).``
The name can be up to 128 characters in length.
Value:
Fn::GetAtt:
- OIDCProvider
- OIDCProviderName
{
"ROSTemplateFormatVersion": "2015-09-01",
"Parameters": {
"OIDCProviderName": {
"Type": "String",
"Description": {
"en": "The name of the OIDC IdP.\nThe name can contain letters, digits, and special characters and cannot start or end with the special characters. The special characters are periods, (.), hyphens (-), and underscores (_).``\nThe name can be up to 128 characters in length."
},
"AllowedPattern": "^[a-zA-Z0-9][a-zA-Z0-9._-]{0,126}[a-zA-Z0-9]$",
"Required": true,
"MaxLength": 128
},
"Fingerprints": {
"AssociationPropertyMetadata": {
"Parameter": {
"Type": "String",
"Description": {
"en": "The fingerprint of the HTTPS certificate, which is provided by the external IdP Okta. If you want to specify multiple fingerprints, separate the fingerprints with commas (,).\nThe fingerprint can contain letters and digits.\nThe fingerprint can be up to 40 characters in length."
},
"Required": false,
"AllowedPattern": "^[a-zA-Z0-9]{0,40}$",
"MaxLength": 40
}
},
"AssociationProperty": "List[Parameter]",
"Type": "Json",
"Description": {
"en": "The list of the fingerprints, max length is 5"
},
"Required": true,
"MinLength": 1,
"MaxLength": 5
},
"IssuerUrl": {
"Type": "String",
"Description": {
"en": "The URL of the issuer, which is provided by the external IdP. The URL of the issuer must be unique within an Alibaba Cloud account.\nThe URL of the issuer must start with https and be in the valid URL format. The URL cannot contain query parameters that follow a question mark (?) or logon information that is identified by at signs (@). The URL cannot be a fragment URL that contains number signs (#).\nThe URL can be up to 255 characters in length."
},
"Required": true,
"MaxLength": 255
}
},
"Resources": {
"OIDCProvider": {
"Type": "ALIYUN::RAM::OIDCProvider",
"Properties": {
"OIDCProviderName": {
"Ref": "OIDCProviderName"
},
"Fingerprints": {
"Ref": "Fingerprints"
},
"IssuerUrl": {
"Ref": "IssuerUrl"
}
}
}
},
"Outputs": {
"OIDCProviderName": {
"Description": "The name of the OIDC IdP.\nThe name can contain letters, digits, and special characters and cannot start or end with the special characters. The special characters are periods, (.), hyphens (-), and underscores (_).``\nThe name can be up to 128 characters in length.",
"Value": {
"Fn::GetAtt": [
"OIDCProvider",
"OIDCProviderName"
]
}
}
}
}