Elim Tsiagbey
9e30a68a61
* feat(oidc): OIDC Prompt Support Boundary OIDC method does not currently support passing in prompts during authentication. This change adds the capability of passing OIDC prompts. Prompts are optional OIDC parameters that determine the behaviour of the authentication server: https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest Add new optional `prompts` option to `boundary_auth_method_oidc` resource. `prompts` option are optional OIDC parameters that determine the behavior of the authentication server.
43 lines
1.7 KiB
Terraform
43 lines
1.7 KiB
Terraform
resource "boundary_scope" "org" {
|
|
name = "organization_one"
|
|
description = "My first scope!"
|
|
scope_id = "global"
|
|
auto_create_admin_role = true
|
|
auto_create_default_role = true
|
|
}
|
|
|
|
resource "boundary_auth_method_oidc" "vault" {
|
|
api_url_prefix = "https://XO-XO-XO-XO-XOXOXO.boundary.hashicorp.cloud:9200"
|
|
client_id = "eieio"
|
|
client_secret = "hvo_secret_XO"
|
|
description = "My Boundary OIDC Auth Method for Vault"
|
|
issuer = "https://XO-XO-XO-XO-XOXOXO.vault.hashicorp.cloud:8200/v1/identity/oidc/provider/my-provider"
|
|
scope_id = "global"
|
|
signing_algorithms = ["RS256"]
|
|
type = "oidc"
|
|
}
|
|
|
|
resource "boundary_auth_method_oidc" "oidc_with_one_prompt" {
|
|
api_url_prefix = "https://XO-XO-XO-XO-XOXOXO.boundary.hashicorp.cloud:9200"
|
|
client_id = "eieio"
|
|
client_secret = "hvo_secret_XO"
|
|
description = "My Boundary OIDC Auth Method With Prompt"
|
|
issuer = "https://sts.windows.net/TENANT_ID/"
|
|
scope_id = "global"
|
|
signing_algorithms = ["RS256"]
|
|
prompts = ["select_account"]
|
|
type = "oidc"
|
|
}
|
|
|
|
resource "boundary_auth_method_oidc" "oidc_with_multiple_prompts" {
|
|
api_url_prefix = "https://XO-XO-XO-XO-XOXOXO.boundary.hashicorp.cloud:9200"
|
|
client_id = "eieio"
|
|
client_secret = "hvo_secret_XO"
|
|
description = "My Boundary OIDC Auth Method With Multiple Prompts"
|
|
issuer = "https://sts.windows.net/TENANT_ID/"
|
|
scope_id = "global"
|
|
signing_algorithms = ["RS256"]
|
|
prompts = ["consent", "select_account"]
|
|
type = "oidc"
|
|
}
|