Skip to main content
POST
Create IdP

Authorizations

Authorization
string
header
required

Bearer scheme name used by typed customer admin operations.

Body

application/json

Request body for POST /v1/admin/identity/providers.

audiences
string[]
required
Example:
display_name
string
required

Customer-facing label for the issuer.

Maximum string length: 200
Example:

"GitHub Actions OIDC"

issuer
string
required

OIDC issuer identifier. Stored canonicalized (trailing slash stripped) so the token iss claim is compared against a single normalized form.

Maximum string length: 512
Example:

"https://token.actions.githubusercontent.com"

allowed_clock_skew_seconds
integer<int64> | null

Permitted clock skew (seconds) when checking exp/nbf/iat.

Example:

60

jwks_document_ref
string | null

Out-of-band JWKS document reference. Required when jwks_source_type is stored-jwks.

Maximum string length: 512
jwks_source_type
string

discovery (default), https, or stored-jwks.

Example:

"discovery"

jwks_uri
string | null

Explicit JWKS URI. Required when jwks_source_type is https.

Maximum string length: 512

Response

IdP registered

Identity provider detail response.

allowed_clock_skew_seconds
integer<int64>
required

Clock skew allowed when validating token time claims.

Example:

60

audiences
string[]
required

Accepted token audiences.

Example:
created_at
string
required

RFC 3339 creation timestamp.

Example:

"2026-05-25T17:20:00Z"

display_name
string
required

Customer-facing IdP label.

Example:

"GitHub Actions OIDC"

id
string
required

Stable IdP UUID.

issuer
string
required

Canonical OIDC issuer URL used to match the token iss claim.

Example:

"https://token.actions.githubusercontent.com"

issuer_type
string
required

IdP category. Currently oidc.

Example:

"oidc"

jwks_source_type
string
required

JWKS resolution mode: discovery, https, or stored-jwks.

Example:

"discovery"

status
string
required

IdP lifecycle state. Disabled IdPs cannot mint sessions.

Example:

"active"

updated_at
string
required

RFC 3339 update timestamp.

Example:

"2026-05-25T17:30:00Z"

customer_id
string
required

Stable UUID for the customer account.

jwks_document_ref
string | null

Stored JWKS reference when jwks_source_type is stored-jwks.

jwks_uri
string | null

Explicit JWKS URI when jwks_source_type is https.