Skip to main content

diagrid idp create

Create an IDP federation

Description​

Create an IDP federation.

Run without arguments to create interactively, or pass a name and flags to create non-interactively.

diagrid idp create [name] [flags]

Examples​


  # Create an IDP federation with inline flags
  diagrid idp create acme-auth0 \
      --type auth0 \
      --issuer https://acme.us.auth0.com/ \
      --audience https://catalyst.diagrid.io/

  # Federate Microsoft Entra, forwarding the user's team as a "team" attribute.
  # Entra names the scopes claim "scp", not the default "scope".
  diagrid idp create corp-entra \
      --type entra \
      --issuer https://login.microsoftonline.com/<tenant-id>/v2.0 \
      --audience <api-app-client-id> \
      --claim-tenant tid \
      --claim-scopes scp \
      --attribute team=roles

  # Create an IDP federation interactively
  diagrid idp create

Options​

      --type string                Identity provider type (auth0, entra, google, oidc) (default "auth0")
      --issuer string              OpenID Connect issuer URL (required); matched against the inbound JWT 'iss' claim
      --audience strings           Accepted 'aud' claim value (required); repeatable or comma-separated
      --jwks-uri string            JWKS endpoint override; derived via OIDC discovery when omitted
      --required-scope strings     Scope that must be present on inbound tokens; repeatable or comma-separated
      --accept-algorithm strings   Accepted JWS signing algorithm; repeatable or comma-separated (default RS256)
      --claim-subject string       Inbound claim carrying the subject identifier
      --claim-tenant string        Inbound claim carrying the tenant identifier
      --claim-scopes string        Inbound claim carrying granted scopes
      --scope-format string        Encoding of the scopes claim (space_delimited or array)
      --attribute stringArray      Attribute mapping as name=upstreamClaim, forwarded under the token's https://diagrid.io/attributes claim; repeatable
  -h, --help                       help for create

Options inherited from parent commands​

      --api-key string   Diagrid Cloud API key

SEE ALSO​

Last updated on