@Generated(value="OracleSDKGenerator",
comments="API Version: v1")
public final class IdentityPropagationTrust
extends com.oracle.bmc.http.client.internal.ExplicitlySetBmcModel
Schema used for Identity Propagation Trust.
Note: Objects should always be created or deserialized using the IdentityPropagationTrust.Builder. This model
distinguishes fields that are null because they are unset from fields that are explicitly
set to null. This is done in the setter methods of the IdentityPropagationTrust.Builder, which maintain a
set of all explicitly set fields called IdentityPropagationTrust.Builder.__explicitlySet__. The hashCode() and equals(Object) methods are implemented to take the explicitly set
fields into account. The constructor, on the other hand, does not take the explicitly set fields
into account (since the constructor cannot distinguish explicit null from unset null).
| Modifier and Type | Class and Description |
|---|---|
static class |
IdentityPropagationTrust.Builder |
static class |
IdentityPropagationTrust.SubjectType
The type of the resource against which lookup will be made in the identity domain in IAM for
the incoming subject claim value.
|
static class |
IdentityPropagationTrust.Type
The type of the inbound token from the Identity cloud provider.
|
EXPLICITLY_SET_FILTER_NAME, EXPLICITLY_SET_PROPERTY_NAME| Constructor and Description |
|---|
IdentityPropagationTrust(String id,
String ocid,
List<String> schemas,
Meta meta,
IdcsCreatedBy idcsCreatedBy,
IdcsLastModifiedBy idcsLastModifiedBy,
List<IdcsPreventedOperations> idcsPreventedOperations,
List<Tags> tags,
Boolean deleteInProgress,
String idcsLastUpgradedInRelease,
String domainOcid,
String compartmentOcid,
String tenancyOcid,
String name,
String description,
IdentityPropagationTrust.Type type,
String issuer,
String accountId,
String subjectClaimName,
String subjectMappingAttribute,
IdentityPropagationTrust.SubjectType subjectType,
String clientClaimName,
List<String> clientClaimValues,
Boolean active,
String publicKeyEndpoint,
String publicCertificate,
List<String> oauthClients,
Boolean allowImpersonation,
Integer clockSkewSeconds,
List<IdentityPropagationTrustImpersonationServiceUsers> impersonationServiceUsers,
IdentityPropagationTrustKeytab keytab)
Deprecated.
|
| Modifier and Type | Method and Description |
|---|---|
static IdentityPropagationTrust.Builder |
builder()
Create a new builder.
|
boolean |
equals(Object o) |
String |
getAccountId()
The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS
Account ID, or GCP Project ID.
|
Boolean |
getActive()
If true, specifies that this Identity Propagation Trust is in an enabled state.
|
Boolean |
getAllowImpersonation()
Allow customers to define whether the resulting token should contain the authenticated user
as the subject or whether the token should impersonate another Application Principal in IAM.
|
String |
getClientClaimName()
The claim name that identifies to whom the JWT/SAML token is issued.
|
List<String> |
getClientClaimValues()
The value that corresponds to the client claim name used to identify to whom the token is
issued.
|
Integer |
getClockSkewSeconds()
The clock skew (in secs) that’s allowed for the token issue and expiry time.
|
String |
getCompartmentOcid()
OCI Compartment Id (ocid) in which the resource lives.
|
Boolean |
getDeleteInProgress()
A boolean flag indicating this resource in the process of being deleted.
|
String |
getDescription()
The description of the Identity Propagation Trust.
|
String |
getDomainOcid()
OCI Domain Id (ocid) in which the resource lives.
|
String |
getId()
Unique identifier for the SCIM Resource as defined by the Service Provider.
|
IdcsCreatedBy |
getIdcsCreatedBy() |
IdcsLastModifiedBy |
getIdcsLastModifiedBy() |
String |
getIdcsLastUpgradedInRelease()
The release number when the resource was upgraded.
|
List<IdcsPreventedOperations> |
getIdcsPreventedOperations()
Each value of this attribute specifies an operation that only an internal client may perform
on this particular resource.
|
List<IdentityPropagationTrustImpersonationServiceUsers> |
getImpersonationServiceUsers()
The Impersonating Principal.
|
String |
getIssuer()
The issuer claim of the Identity provider.
|
IdentityPropagationTrustKeytab |
getKeytab() |
Meta |
getMeta() |
String |
getName()
The name of the the Identity Propagation Trust.
|
List<String> |
getOauthClients()
The value of all the authorized OAuth Clients.
|
String |
getOcid()
Unique OCI identifier for the SCIM Resource.
|
String |
getPublicCertificate()
Store the public key if public key cert.
|
String |
getPublicKeyEndpoint()
The cloud provider’s public key API of SAML and OIDC providers for signature validation.
|
List<String> |
getSchemas()
REQUIRED.
|
String |
getSubjectClaimName()
Used for locating the subject claim from the incoming token.
|
String |
getSubjectMappingAttribute()
Subject Mapping Attribute to which the value from subject claim name value would be used for
identity lookup.
|
IdentityPropagationTrust.SubjectType |
getSubjectType()
The type of the resource against which lookup will be made in the identity domain in IAM for
the incoming subject claim value.
|
List<Tags> |
getTags()
A list of tags on this resource.
|
String |
getTenancyOcid()
OCI Tenant Id (ocid) in which the resource lives.
|
IdentityPropagationTrust.Type |
getType()
The type of the inbound token from the Identity cloud provider.
|
int |
hashCode() |
IdentityPropagationTrust.Builder |
toBuilder() |
String |
toString() |
String |
toString(boolean includeByteArrayContents)
Return a string representation of the object.
|
markPropertyAsExplicitlySet, wasPropertyExplicitlySet@Deprecated @ConstructorProperties(value={"id","ocid","schemas","meta","idcsCreatedBy","idcsLastModifiedBy","idcsPreventedOperations","tags","deleteInProgress","idcsLastUpgradedInRelease","domainOcid","compartmentOcid","tenancyOcid","name","description","type","issuer","accountId","subjectClaimName","subjectMappingAttribute","subjectType","clientClaimName","clientClaimValues","active","publicKeyEndpoint","publicCertificate","oauthClients","allowImpersonation","clockSkewSeconds","impersonationServiceUsers","keytab"}) public IdentityPropagationTrust(String id, String ocid, List<String> schemas, Meta meta, IdcsCreatedBy idcsCreatedBy, IdcsLastModifiedBy idcsLastModifiedBy, List<IdcsPreventedOperations> idcsPreventedOperations, List<Tags> tags, Boolean deleteInProgress, String idcsLastUpgradedInRelease, String domainOcid, String compartmentOcid, String tenancyOcid, String name, String description, IdentityPropagationTrust.Type type, String issuer, String accountId, String subjectClaimName, String subjectMappingAttribute, IdentityPropagationTrust.SubjectType subjectType, String clientClaimName, List<String> clientClaimValues, Boolean active, String publicKeyEndpoint, String publicCertificate, List<String> oauthClients, Boolean allowImpersonation, Integer clockSkewSeconds, List<IdentityPropagationTrustImpersonationServiceUsers> impersonationServiceUsers, IdentityPropagationTrustKeytab keytab)
public static IdentityPropagationTrust.Builder builder()
Create a new builder.
public IdentityPropagationTrust.Builder toBuilder()
public String getId()
Unique identifier for the SCIM Resource as defined by the Service Provider. Each representation of the Resource MUST include a non-empty id value. This identifier MUST be unique across the Service Provider’s entire set of Resources. It MUST be a stable, non-reassignable identifier that does not change when the same Resource is returned in subsequent requests. The value of the id attribute is always issued by the Service Provider and MUST never be specified by the Service Consumer. bulkId: is a reserved keyword and MUST NOT be used in the unique identifier.
*SCIM++ Properties:** - caseExact: false - idcsSearchable: true - multiValued: false - mutability: readOnly - required: false - returned: always - type: string - uniqueness: global
public String getOcid()
Unique OCI identifier for the SCIM Resource.
*SCIM++ Properties:** - caseExact: true - idcsSearchable: true - multiValued: false - mutability: immutable - required: false - returned: default - type: string - uniqueness: global
public List<String> getSchemas()
REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard \“enterprise\” extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior.
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: true - mutability: readWrite - required: true - returned: default - type: string - uniqueness: none
public Meta getMeta()
public IdcsCreatedBy getIdcsCreatedBy()
public IdcsLastModifiedBy getIdcsLastModifiedBy()
public List<IdcsPreventedOperations> getIdcsPreventedOperations()
Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.
*SCIM++ Properties:** - idcsSearchable: false - multiValued: true - mutability: readOnly - required: false - returned: request - type: string - uniqueness: none
public List<Tags> getTags()
A list of tags on this resource.
*SCIM++ Properties:** - idcsCompositeKey: [key, value] - idcsSearchable: true - multiValued: true - mutability: readWrite - required: false - returned: request - type: complex - uniqueness: none
public Boolean getDeleteInProgress()
A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long.
*SCIM++ Properties:** - caseExact: false - idcsSearchable: true - multiValued: false - mutability: readOnly - required: false - returned: default - type: boolean - uniqueness: none
public String getIdcsLastUpgradedInRelease()
The release number when the resource was upgraded.
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readOnly - required: false - returned: request - type: string - uniqueness: none
public String getDomainOcid()
OCI Domain Id (ocid) in which the resource lives.
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readOnly - required: false - returned: default - type: string - uniqueness: none
public String getCompartmentOcid()
OCI Compartment Id (ocid) in which the resource lives.
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readOnly - required: false - returned: default - type: string - uniqueness: none
public String getTenancyOcid()
OCI Tenant Id (ocid) in which the resource lives.
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readOnly - required: false - returned: default - type: string - uniqueness: none
public String getName()
The name of the the Identity Propagation Trust.
*SCIM++ Properties:** - type: string - caseExact: false - idcsSearchable: true - multiValued: false - required: true - mutability: immutable - returned: default - uniqueness: none
public String getDescription()
The description of the Identity Propagation Trust.
*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - caseExact: false - idcsSearchable: false
public IdentityPropagationTrust.Type getType()
The type of the inbound token from the Identity cloud provider.
*SCIM++ Properties:** - caseExact: true - idcsSearchable: false - required: true - mutability: readWrite - returned: default - type: string - multiValued: false - uniqueness: none
public String getIssuer()
The issuer claim of the Identity provider.
*SCIM++ Properties:** - type: string - multiValued: false - required: true - mutability: readWrite - returned: always - caseExact: true - idcsSearchable: true - uniqueness: server
public String getAccountId()
The Identity cloud provider service identifier, for example, the Azure Tenancy ID, AWS Account ID, or GCP Project ID.
*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - caseExact: true - idcsSearchable: true - uniqueness: none
public String getSubjectClaimName()
Used for locating the subject claim from the incoming token.
*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - caseExact: true - idcsSearchable: false
public String getSubjectMappingAttribute()
Subject Mapping Attribute to which the value from subject claim name value would be used for identity lookup.
*SCIM++ Properties:** - type: string - multiValued: false - idcsSearchable: false - required: false - mutability: readWrite - returned: default - uniqueness: none
public IdentityPropagationTrust.SubjectType getSubjectType()
The type of the resource against which lookup will be made in the identity domain in IAM for the incoming subject claim value.
*SCIM++ Properties:** - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none
public String getClientClaimName()
The claim name that identifies to whom the JWT/SAML token is issued. If AWS, then \“aud\” or \“client_id\”. If Azure, then \“appid\”. If GCP, then \“aud\”.
*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - idcsSearchable: false
public List<String> getClientClaimValues()
The value that corresponds to the client claim name used to identify to whom the token is issued.
*SCIM++ Properties:** - type: string - multiValued: true - required: false - mutability: readWrite - returned: default - uniqueness: none - caseExact: true - idcsSearchable: false
public Boolean getActive()
If true, specifies that this Identity Propagation Trust is in an enabled state. The default value is false.
*SCIM++ Properties:** - type: boolean - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - idcsSearchable: true
public String getPublicKeyEndpoint()
The cloud provider’s public key API of SAML and OIDC providers for signature validation.
*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - caseExact: false - idcsSearchable: false
public String getPublicCertificate()
Store the public key if public key cert.
*SCIM++ Properties:** - type: string - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - idcsSearchable: false
public List<String> getOauthClients()
The value of all the authorized OAuth Clients.
*SCIM++ Properties:** - idcsSearchable: false - multiValued: true - mutability: readWrite - required: false - returned: default - type: string - uniqueness: none
public Boolean getAllowImpersonation()
Allow customers to define whether the resulting token should contain the authenticated user as the subject or whether the token should impersonate another Application Principal in IAM.
*SCIM++ Properties:** - type: boolean - multiValued: false - required: false - mutability: readWrite - returned: default - uniqueness: none - idcsSearchable: false
public Integer getClockSkewSeconds()
The clock skew (in secs) that’s allowed for the token issue and expiry time.
*Added In:** 2308181911
*SCIM++ Properties:** - caseExact: false - idcsSearchable: false - multiValued: false - mutability: readWrite - required: false - returned: default - type: integer - uniqueness: none
public List<IdentityPropagationTrustImpersonationServiceUsers> getImpersonationServiceUsers()
The Impersonating Principal.
*SCIM++ Properties:** - idcsCompositeKey: [rule, value] - idcsSearchable: false - multiValued: true - mutability: readWrite - required: false - returned: request - type: complex - uniqueness: none
public IdentityPropagationTrustKeytab getKeytab()
public String toString()
toString in class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModelpublic String toString(boolean includeByteArrayContents)
Return a string representation of the object.
includeByteArrayContents - true to include the full contents of byte arrayspublic boolean equals(Object o)
equals in class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModelpublic int hashCode()
hashCode in class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModelCopyright © 2016–2024. All rights reserved.