Trust an identity provider for the ID-JAG identity-chaining grant
POST /v1/organizations/{orgId}/trusted-issuers
POST
/v1/organizations/{orgId}/trusted-issuers
Security-critical configuration: a trusted issuer may mint access tokens for the users it is allowed to assert, with no user interaction. Deliberately separate from SSO connections, which only authenticate a human in a browser.
Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Path Parameters
Section titled “Path Parameters ” orgId
required
string
Request Body
Section titled “Request Body ”object
issuer
required
Matched against the assertion’s iss exactly. Must be https.
string
name
required
Service-controlled display label.
string
jwks_uri
required
string
allowed_domains
Email domains this issuer may assert. Empty means any.
Array<string>
allowed_scopes
Scopes reachable through this issuer. Empty means the client’s own.
Array<string>
max_auth_age
Reject an assertion whose auth_time is older than this many seconds.
integer
Responses
Section titled “ Responses ”Created trust anchor
object
Invalid issuer or jwks_uri
object
error
required
string
error_description
string
Issuer already trusted
object
error
required
string
error_description
string