身份提供者实例创建有效载荷

以下示例是用于创建少数提供者类型实例的样本有效内容。

注意：

如果未指定属性 show_end_user 和 show_admin_user，那么会自动添加这两个属性并设置 value: true。
只有 SAML 企业类型的身份源支持创建多个实例。
除 SAML 企业和 LDAP 传递类型外，所有身份源类型都具有与之关联的预定和保留域值。 SAML 企业和 LDAP 传递的每个实例都必须具有指定的唯一域。否则，会返回错误。请参阅 “管理身份提供商 ”以及该身份源类型的相关主题，以查找该身份源的预留域值。

Facebook

{
    "sourceTypeId": 1,
    "instanceName": "Facebook",
    "enabled": true,
    "predefined": true,
    "status": "configured",
    "properties": [
        {
            "sensitive": true,
            "value": "abcdefg",
            "key": "client_id"
        },
        {
            "sensitive": true,
            "value": "pqrst",
            "key": "client_secret"
        },
        {
            "sensitive": false,
            "value": "true",
            "key": "show_end_user"
        },
        {
            "sensitive": false,
            "value": "true",
            "key": "show_admin_user"
        },
        {
            "sensitive": false,
            "value": "www.facebook.com",
            "key": "realm"
        }
    ]
}

注意：

对于其他社交平台，如 LinkedIn,、 Google、 GitHub,、Yahoo、 X 等，其有效载荷类似，但会使用各平台的对应值。

云目录

{
    "sourceTypeId": 5
    "instanceName": "Cloud Directory",
    "enabled": true,
    "properties": [
        {
            "sensitive": false,
            "value": "true",
            "key": "show_end_user"
        },
        {
            "sensitive": false,
            "value": "true",
            "key": "show_admin_user"
        }
        {
            "sensitive": false,
            "value": "cloudIdentityRealm",
            "key": "realm"
        }
    ]
}

注意：

Cloud Directory 提供者实例已准备好用于所有租户。

SAML 企业

{
    "sourceTypeId"      : 4,
    "instanceName"      : "SAML Enterprise - IAM Connect",  
    "enabled"           : true,
    "predefined"        : false,
    "autoConsentEnabled": true,
    "status"            : "configured",
    "properties"        : [
        {
            "sensitive" : false,
            "key"       : "initiator",
            "value"     : "identityProvider"
        },
        {
            "sensitive" : false,
            "key"       : "trigger_url",
            "value"     : "https://ip-wga/isam/sps/saml20ip/saml20/logininitial?RequestBinding=HTTPPost&ResponseBinding=HTTPPost&PartnerId=https://tenant name.ice.ibmcloudsecurity.com/saml/sps/saml20sp/saml20&NameIdFormat=email"
        },
        
        {
            "sensitive" : false,
            "key"       : "metadata",
            "value"     : "XML metadata providing IdP entity description - <md:EntityDescriptor> <md:IDPSSODescriptor> </md:IDPSSODescriptor> </md:EntityDescriptor>"
        },
        {
            "sensitive": false,
            "value": "saml.abc.com",
            "key": "realm"
        }
        
    ]
}

注意：如果设置了该属性 initiator = serviceProvider ，则该 sp_trigger_url 属性将自动填充，且该 metadata 属性的值必须提供一个 SP 实体的描述。如果在 sp_trigger_url 创建有效负载中提供了该参数，则将使用提供的值，而非自动生成的值。

LDAP 传递

{
    "sourceTypeId" : 8, 
    "instanceName" : "LDAP Passthrough", 
    "enabled" : true, 
    "properties" : [
        {
            "sensitive": false,
            "value": "true",
            "key": "show_end_user"
        },
        {
            "sensitive": false,
            "value": "false",
            "key": "show_admin_user"
        },
        {
            "sensitive": false,
            "value": "passthrough.abc.com",
            "key": "realm"
        }
    ]
}

Onprem LDAP

{
    "sourceTypeId" : 16, 
    "instanceName" : "Acme LDAP Onprem", 
    "enabled" : true, 
    "properties" : [
        {
            "sensitive": false,
            "value": "<agent_cfg_uuid>",
            "key": "agent"
        },
        {
            "sensitive": false,
            "value": "false",
            "key": "isAdminCloudEnabled"
        },
        {
            "sensitive": false,
            "value": "cloudIdentityRealm",
            "key": "realm"
        },
        {
            "sensitive": false,
            "value": "true",
            "key": "show_admin_user"
        },
        {
            "sensitive": false,
            "value": "true",
            "key": "show_admin_user_fido"
        },
        {
            "sensitive": false,
            "value": "true",
            "key": "show_admin_user_qr"
        },
        {
            "sensitive": false,
            "value": "true",
            "key": "show_end_user"
        },
        {
            "sensitive": false,
            "value": "true",
            "key": "show_end_user_fido"
        },
        {
            "sensitive": false,
            "value": "true",
            "key": "show_end_user_qr"
        }
    ]
}

使用 Apple 登录

{
     "instanceName": "Apple",
     "sourceTypeId": 15,
     "enabled": true,
     "properties": [
     {
         "sensitive": false,
         "value": "www.apple.com",
         "key": "realm"
     },
     {
         "sensitive": false,
         "value": "true",
         "key": "identityLinkingEnabled"
     },
     {
         "sensitive": false,
         "value": "true",
         "key": "JitEnabled"
     },
     {
         "sensitive": false,
         "value": "email",
         "key": "principalAttribute"
     },
     {
         "sensitive": false,
         "value": "com.test.app",
         "key": "client_id"
     },
     {
         "sensitive": false,
         "value": "ABCD98ABC",
         "key": "key_id"
     },
     {
         "sensitive": false,
         "value": "ABCD7SK3JE",
         "key": "team_id"
     },
     {
         "sensitive": false,
         "value": "MIGWAgABCD................",
         "key": "signing_key"
     },
     {
         "sensitive": false,
         "value": "apple_key_label",
         "key": "signing_key_label"
     }
     ]
 }