Create OIDC Provider

Creates a new OIDC provider for SSO authentication

POST /api/v2/sso-providers/oidc

Create OIDC Provider

cURL

curl --request POST \
  --url https://your-tenant.bloodhoundenterprise.io/api/v2/sso-providers/oidc \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "issuer": "<string>",
  "client_id": "<string>",
  "config": {
    "auto_provision": {
      "enabled": true,
      "default_role_id": 123,
      "role_provision": true
    }
  }
}
'

201

{
  "data": {
    "id": 123,
    "created_at": "2023-11-07T05:31:56Z",
    "updated_at": "2023-11-07T05:31:56Z",
    "deleted_at": {
      "time": "2023-11-07T05:31:56Z",
      "valid": true
    },
    "client_id": "<string>",
    "issuer": "<string>",
    "sso_provider_id": 123
  }
}

Authorizations

JWTBearerTokenSignedRequest & RequestDate & HMACSignature

Authorization · string · header · required

Authorization: Bearer $JWT_TOKEN

Headers

Prefer · string · default: wait=30

Prefer header, used to specify a custom timeout in seconds using the wait parameter as per RFC7240. Passing in wait=-1 bypasses all timeout limits when the feature is enabled.

Pattern: ^wait=(-1|[0-9]+)$

Body

application/json

name · string · required

Name of the OIDC provider

issuer · string<url> · required

URL of the OIDC issuer

client_id · string · required

Client ID for the OIDC provider

config · object · required

Show child attributes

Response

201

application/json

OK

data · object

Show child attributes