Create

Create registers a new authentication provider configuration for the tenant.

POST /api/v1/auth-configs

Create

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.TenantAuthConfig.Create(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.TenantAuthConfigServiceCreateResponse != nil {
        // handle response
    }
}

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
  security: {
    bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
    oauth: "<YOUR_OAUTH_HERE>",
  },
});

async function run() {
  const result = await conductoroneSDKTypescript.tenantAuthConfig.create();

  console.log(result);
}

run();

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/auth-configs \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "displayName": "<string>",
  "bootstrapDomains": [
    "<string>"
  ],
  "c1Local": {
    "delegatedVerifiers": []
  },
  "deprecationDeadline": "2023-11-07T05:31:56Z",
  "deprecationMessage": "<string>",
  "google": {
    "hostedDomains": [
      "<string>"
    ]
  },
  "isDefaultBootstrap": true,
  "jumpcloud": {
    "oidcClientId": "<string>",
    "oidcClientSecret": "<string>"
  },
  "microsoft": {
    "tenantIds": [
      "<string>"
    ]
  },
  "oidc": {
    "exactMatchClaims": {},
    "issuerId": "<string>",
    "oidcClientId": "<string>",
    "oidcClientSecret": "<string>",
    "scopes": [
      "<string>"
    ]
  },
  "okta": {
    "domain": "<string>",
    "oidcClientId": "<string>",
    "oidcClientSecret": "<string>"
  },
  "onelogin": {
    "domain": "<string>",
    "oidcClientId": "<string>",
    "oidcClientSecret": "<string>"
  },
  "pingone": {
    "environmentId": "<string>",
    "oidcClientId": "<string>",
    "oidcClientSecret": "<string>"
  }
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/auth-configs"

payload = {
    "displayName": "<string>",
    "bootstrapDomains": ["<string>"],
    "c1Local": { "delegatedVerifiers": [] },
    "deprecationDeadline": "2023-11-07T05:31:56Z",
    "deprecationMessage": "<string>",
    "google": { "hostedDomains": ["<string>"] },
    "isDefaultBootstrap": True,
    "jumpcloud": {
        "oidcClientId": "<string>",
        "oidcClientSecret": "<string>"
    },
    "microsoft": { "tenantIds": ["<string>"] },
    "oidc": {
        "exactMatchClaims": {},
        "issuerId": "<string>",
        "oidcClientId": "<string>",
        "oidcClientSecret": "<string>",
        "scopes": ["<string>"]
    },
    "okta": {
        "domain": "<string>",
        "oidcClientId": "<string>",
        "oidcClientSecret": "<string>"
    },
    "onelogin": {
        "domain": "<string>",
        "oidcClientId": "<string>",
        "oidcClientSecret": "<string>"
    },
    "pingone": {
        "environmentId": "<string>",
        "oidcClientId": "<string>",
        "oidcClientSecret": "<string>"
    }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    displayName: '<string>',
    bootstrapDomains: ['<string>'],
    c1Local: {delegatedVerifiers: []},
    deprecationDeadline: '2023-11-07T05:31:56Z',
    deprecationMessage: '<string>',
    google: {hostedDomains: ['<string>']},
    isDefaultBootstrap: true,
    jumpcloud: {oidcClientId: '<string>', oidcClientSecret: '<string>'},
    microsoft: {tenantIds: ['<string>']},
    oidc: {
      exactMatchClaims: {},
      issuerId: '<string>',
      oidcClientId: '<string>',
      oidcClientSecret: '<string>',
      scopes: ['<string>']
    },
    okta: {domain: '<string>', oidcClientId: '<string>', oidcClientSecret: '<string>'},
    onelogin: {domain: '<string>', oidcClientId: '<string>', oidcClientSecret: '<string>'},
    pingone: {
      environmentId: '<string>',
      oidcClientId: '<string>',
      oidcClientSecret: '<string>'
    }
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/auth-configs', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/auth-configs",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'displayName' => '<string>',
    'bootstrapDomains' => [
        '<string>'
    ],
    'c1Local' => [
        'delegatedVerifiers' => [
                
        ]
    ],
    'deprecationDeadline' => '2023-11-07T05:31:56Z',
    'deprecationMessage' => '<string>',
    'google' => [
        'hostedDomains' => [
                '<string>'
        ]
    ],
    'isDefaultBootstrap' => true,
    'jumpcloud' => [
        'oidcClientId' => '<string>',
        'oidcClientSecret' => '<string>'
    ],
    'microsoft' => [
        'tenantIds' => [
                '<string>'
        ]
    ],
    'oidc' => [
        'exactMatchClaims' => [
                
        ],
        'issuerId' => '<string>',
        'oidcClientId' => '<string>',
        'oidcClientSecret' => '<string>',
        'scopes' => [
                '<string>'
        ]
    ],
    'okta' => [
        'domain' => '<string>',
        'oidcClientId' => '<string>',
        'oidcClientSecret' => '<string>'
    ],
    'onelogin' => [
        'domain' => '<string>',
        'oidcClientId' => '<string>',
        'oidcClientSecret' => '<string>'
    ],
    'pingone' => [
        'environmentId' => '<string>',
        'oidcClientId' => '<string>',
        'oidcClientSecret' => '<string>'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/auth-configs")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"displayName\": \"<string>\",\n  \"bootstrapDomains\": [\n    \"<string>\"\n  ],\n  \"c1Local\": {\n    \"delegatedVerifiers\": []\n  },\n  \"deprecationDeadline\": \"2023-11-07T05:31:56Z\",\n  \"deprecationMessage\": \"<string>\",\n  \"google\": {\n    \"hostedDomains\": [\n      \"<string>\"\n    ]\n  },\n  \"isDefaultBootstrap\": true,\n  \"jumpcloud\": {\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\"\n  },\n  \"microsoft\": {\n    \"tenantIds\": [\n      \"<string>\"\n    ]\n  },\n  \"oidc\": {\n    \"exactMatchClaims\": {},\n    \"issuerId\": \"<string>\",\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\",\n    \"scopes\": [\n      \"<string>\"\n    ]\n  },\n  \"okta\": {\n    \"domain\": \"<string>\",\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\"\n  },\n  \"onelogin\": {\n    \"domain\": \"<string>\",\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\"\n  },\n  \"pingone\": {\n    \"environmentId\": \"<string>\",\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\"\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/auth-configs")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"displayName\": \"<string>\",\n  \"bootstrapDomains\": [\n    \"<string>\"\n  ],\n  \"c1Local\": {\n    \"delegatedVerifiers\": []\n  },\n  \"deprecationDeadline\": \"2023-11-07T05:31:56Z\",\n  \"deprecationMessage\": \"<string>\",\n  \"google\": {\n    \"hostedDomains\": [\n      \"<string>\"\n    ]\n  },\n  \"isDefaultBootstrap\": true,\n  \"jumpcloud\": {\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\"\n  },\n  \"microsoft\": {\n    \"tenantIds\": [\n      \"<string>\"\n    ]\n  },\n  \"oidc\": {\n    \"exactMatchClaims\": {},\n    \"issuerId\": \"<string>\",\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\",\n    \"scopes\": [\n      \"<string>\"\n    ]\n  },\n  \"okta\": {\n    \"domain\": \"<string>\",\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\"\n  },\n  \"onelogin\": {\n    \"domain\": \"<string>\",\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\"\n  },\n  \"pingone\": {\n    \"environmentId\": \"<string>\",\n    \"oidcClientId\": \"<string>\",\n    \"oidcClientSecret\": \"<string>\"\n  }\n}"

response = http.request(request)
puts response.read_body

200

{
  "authConfig": {
    "bootstrapDomains": [
      "<string>"
    ],
    "c1Local": {
      "delegatedVerifiers": []
    },
    "createdAt": "2023-11-07T05:31:56Z",
    "deprecationDeadline": "2023-11-07T05:31:56Z",
    "deprecationMessage": "<string>",
    "displayName": "<string>",
    "google": {
      "hostedDomains": [
        "<string>"
      ]
    },
    "id": "<string>",
    "isDefaultBootstrap": true,
    "jumpcloud": {
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>"
    },
    "microsoft": {
      "tenantIds": [
        "<string>"
      ]
    },
    "oidc": {
      "exactMatchClaims": {},
      "issuerId": "<string>",
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>",
      "scopes": [
        "<string>"
      ]
    },
    "okta": {
      "domain": "<string>",
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>"
    },
    "onelogin": {
      "domain": "<string>",
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>"
    },
    "pingone": {
      "environmentId": "<string>",
      "oidcClientId": "<string>",
      "oidcClientSecret": "<string>"
    },
    "updatedAt": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

The TenantAuthConfigServiceCreateRequest message.

This message contains a oneof named provider_config. Only a single field of the following list may be set at a time:

• google
• microsoft
• okta
• onelogin
• jumpcloud
• pingone
• oidc
• c1Local

displayName · string | null · required

The human-readable name for this authentication provider.

bootstrapDomains · string[] | null

Email domains that route unknown users to this authentication provider during login.

c1Local · Auth Config C 1 Local · object | null

The AuthConfigC1Local message.

Show child attributes

deprecationDeadline · string<date-time> | null

deprecationMessage · string | null

A user-visible message explaining why the provider is deprecated.

google · Auth Config Google · object | null

The AuthConfigGoogle message.

Show child attributes

isDefaultBootstrap · boolean | null

Whether this provider is the default for users whose email domain has no explicit mapping.

jumpcloud · Auth Config Jump Cloud · object | null

The AuthConfigJumpCloud message.

Show child attributes

microsoft · Auth Config Microsoft · object | null

The AuthConfigMicrosoft message.

Show child attributes

oidc · Auth Config Oidc · object | null

The AuthConfigOIDC message.

Show child attributes

okta · Auth Config Okta · object | null

The AuthConfigOkta message.

Show child attributes

onelogin · Auth Config One Login · object | null

The AuthConfigOneLogin message.

Show child attributes

pingone · Auth Config Ping One · object | null

The AuthConfigPingOne message.

Show child attributes

status · enum<string> | null

The initial status of the authentication provider.

Available options: AUTH_CONFIG_STATUS_UNSPECIFIED, AUTH_CONFIG_STATUS_ACTIVE, AUTH_CONFIG_STATUS_DEPRECATED, AUTH_CONFIG_STATUS_DISABLED

Response

200 - application/json

Successful response

The TenantAuthConfigServiceCreateResponse message.

authConfig · Tenant Auth Config · object | null

The TenantAuthConfig message.

This message contains a oneof named provider_config. Only a single field of the following list may be set at a time:

• google
• microsoft
• okta
• onelogin
• jumpcloud
• pingone
• oidc
• c1Local

Show child attributes