Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Selectel Provider
  4. API Docs
  5. IamOidcFederationV1
Viewing docs for selectel 8.0.1
published on Thursday, May 28, 2026 by selectel
Schema (JSON)
selectel/terraform-provider-selectel

selectel.IamOidcFederationV1

Viewing docs for selectel 8.0.1
published on Thursday, May 28, 2026 by selectel
Schema (JSON)
selectel/terraform-provider-selectel

    Manages OIDC Federation for Selectel products using public API v1. Selectel products support Identity and Access Management (IAM). For more information about federations, see the official Selectel documentation.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as selectel from "@pulumi/selectel";

const federation1 = new selectel.IamOidcFederationV1("federation_1", {
    name: "Federation name",
    alias: "federation-alias",
    description: "Federation description",
    issuer: "https://idp.example.com/realms/master",
    clientId: "my-client-id",
    clientSecret: "my-client-secret",
    authUrl: "https://idp.example.com/realms/master/protocol/openid-connect/auth",
    tokenUrl: "https://idp.example.com/realms/master/protocol/openid-connect/token",
    jwksUrl: "https://idp.example.com/realms/master/protocol/openid-connect/certs",
    autoUsersCreation: true,
    enableGroupMappings: true,
    sessionMaxAgeHours: 24,
});

    import pulumi
import pulumi_selectel as selectel

federation1 = selectel.IamOidcFederationV1("federation_1",
    name="Federation name",
    alias="federation-alias",
    description="Federation description",
    issuer="https://idp.example.com/realms/master",
    client_id="my-client-id",
    client_secret="my-client-secret",
    auth_url="https://idp.example.com/realms/master/protocol/openid-connect/auth",
    token_url="https://idp.example.com/realms/master/protocol/openid-connect/token",
    jwks_url="https://idp.example.com/realms/master/protocol/openid-connect/certs",
    auto_users_creation=True,
    enable_group_mappings=True,
    session_max_age_hours=24)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/selectel/v8/selectel"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := selectel.NewIamOidcFederationV1(ctx, "federation_1", &selectel.IamOidcFederationV1Args{
			Name:                pulumi.String("Federation name"),
			Alias:               pulumi.String("federation-alias"),
			Description:         pulumi.String("Federation description"),
			Issuer:              pulumi.String("https://idp.example.com/realms/master"),
			ClientId:            pulumi.String("my-client-id"),
			ClientSecret:        pulumi.String("my-client-secret"),
			AuthUrl:             pulumi.String("https://idp.example.com/realms/master/protocol/openid-connect/auth"),
			TokenUrl:            pulumi.String("https://idp.example.com/realms/master/protocol/openid-connect/token"),
			JwksUrl:             pulumi.String("https://idp.example.com/realms/master/protocol/openid-connect/certs"),
			AutoUsersCreation:   pulumi.Bool(true),
			EnableGroupMappings: pulumi.Bool(true),
			SessionMaxAgeHours:  pulumi.Float64(24),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Selectel = Pulumi.Selectel;

return await Deployment.RunAsync(() => 
{
    var federation1 = new Selectel.IamOidcFederationV1("federation_1", new()
    {
        Name = "Federation name",
        Alias = "federation-alias",
        Description = "Federation description",
        Issuer = "https://idp.example.com/realms/master",
        ClientId = "my-client-id",
        ClientSecret = "my-client-secret",
        AuthUrl = "https://idp.example.com/realms/master/protocol/openid-connect/auth",
        TokenUrl = "https://idp.example.com/realms/master/protocol/openid-connect/token",
        JwksUrl = "https://idp.example.com/realms/master/protocol/openid-connect/certs",
        AutoUsersCreation = true,
        EnableGroupMappings = true,
        SessionMaxAgeHours = 24,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.selectel.IamOidcFederationV1;
import com.pulumi.selectel.IamOidcFederationV1Args;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var federation1 = new IamOidcFederationV1("federation1", IamOidcFederationV1Args.builder()
            .name("Federation name")
            .alias("federation-alias")
            .description("Federation description")
            .issuer("https://idp.example.com/realms/master")
            .clientId("my-client-id")
            .clientSecret("my-client-secret")
            .authUrl("https://idp.example.com/realms/master/protocol/openid-connect/auth")
            .tokenUrl("https://idp.example.com/realms/master/protocol/openid-connect/token")
            .jwksUrl("https://idp.example.com/realms/master/protocol/openid-connect/certs")
            .autoUsersCreation(true)
            .enableGroupMappings(true)
            .sessionMaxAgeHours(24.0)
            .build());

    }
}

    resources:
  federation1:
    type: selectel:IamOidcFederationV1
    name: federation_1
    properties:
      name: Federation name
      alias: federation-alias
      description: Federation description
      issuer: https://idp.example.com/realms/master
      clientId: my-client-id
      clientSecret: my-client-secret
      authUrl: https://idp.example.com/realms/master/protocol/openid-connect/auth
      tokenUrl: https://idp.example.com/realms/master/protocol/openid-connect/token
      jwksUrl: https://idp.example.com/realms/master/protocol/openid-connect/certs
      autoUsersCreation: true
      enableGroupMappings: true
      sessionMaxAgeHours: 24

    Example coming soon!

    Create IamOidcFederationV1 Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IamOidcFederationV1(name: string, args: IamOidcFederationV1Args, opts?: CustomResourceOptions);
    @overload
def IamOidcFederationV1(resource_name: str,
                        args: IamOidcFederationV1Args,
                        opts: Optional[ResourceOptions] = None)

@overload
def IamOidcFederationV1(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        jwks_url: Optional[str] = None,
                        auth_url: Optional[str] = None,
                        client_id: Optional[str] = None,
                        client_secret: Optional[str] = None,
                        issuer: Optional[str] = None,
                        session_max_age_hours: Optional[float] = None,
                        token_url: Optional[str] = None,
                        auto_users_creation: Optional[bool] = None,
                        description: Optional[str] = None,
                        enable_group_mappings: Optional[bool] = None,
                        iam_oidc_federation_v1_id: Optional[str] = None,
                        alias: Optional[str] = None,
                        name: Optional[str] = None)
    func NewIamOidcFederationV1(ctx *Context, name string, args IamOidcFederationV1Args, opts ...ResourceOption) (*IamOidcFederationV1, error)
    public IamOidcFederationV1(string name, IamOidcFederationV1Args args, CustomResourceOptions? opts = null)
    public IamOidcFederationV1(String name, IamOidcFederationV1Args args)
public IamOidcFederationV1(String name, IamOidcFederationV1Args args, CustomResourceOptions options)

    type: selectel:IamOidcFederationV1
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "selectel_iamoidcfederationv1" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args IamOidcFederationV1Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IamOidcFederationV1Args
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IamOidcFederationV1Args
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IamOidcFederationV1Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IamOidcFederationV1Args
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var iamOidcFederationV1Resource = new Selectel.IamOidcFederationV1("iamOidcFederationV1Resource", new()
{
    JwksUrl = "string",
    AuthUrl = "string",
    ClientId = "string",
    ClientSecret = "string",
    Issuer = "string",
    SessionMaxAgeHours = 0,
    TokenUrl = "string",
    AutoUsersCreation = false,
    Description = "string",
    EnableGroupMappings = false,
    IamOidcFederationV1Id = "string",
    Alias = "string",
    Name = "string",
});

    example, err := selectel.NewIamOidcFederationV1(ctx, "iamOidcFederationV1Resource", &selectel.IamOidcFederationV1Args{
	JwksUrl:               pulumi.String("string"),
	AuthUrl:               pulumi.String("string"),
	ClientId:              pulumi.String("string"),
	ClientSecret:          pulumi.String("string"),
	Issuer:                pulumi.String("string"),
	SessionMaxAgeHours:    pulumi.Float64(0),
	TokenUrl:              pulumi.String("string"),
	AutoUsersCreation:     pulumi.Bool(false),
	Description:           pulumi.String("string"),
	EnableGroupMappings:   pulumi.Bool(false),
	IamOidcFederationV1Id: pulumi.String("string"),
	Alias:                 pulumi.String("string"),
	Name:                  pulumi.String("string"),
})

    resource "selectel_iamoidcfederationv1" "iamOidcFederationV1Resource" {
  jwks_url                  = "string"
  auth_url                  = "string"
  client_id                 = "string"
  client_secret             = "string"
  issuer                    = "string"
  session_max_age_hours     = 0
  token_url                 = "string"
  auto_users_creation       = false
  description               = "string"
  enable_group_mappings     = false
  iam_oidc_federation_v1_id = "string"
  alias                     = "string"
  name                      = "string"
}

    var iamOidcFederationV1Resource = new IamOidcFederationV1("iamOidcFederationV1Resource", IamOidcFederationV1Args.builder()
    .jwksUrl("string")
    .authUrl("string")
    .clientId("string")
    .clientSecret("string")
    .issuer("string")
    .sessionMaxAgeHours(0.0)
    .tokenUrl("string")
    .autoUsersCreation(false)
    .description("string")
    .enableGroupMappings(false)
    .iamOidcFederationV1Id("string")
    .alias("string")
    .name("string")
    .build());

    iam_oidc_federation_v1_resource = selectel.IamOidcFederationV1("iamOidcFederationV1Resource",
    jwks_url="string",
    auth_url="string",
    client_id="string",
    client_secret="string",
    issuer="string",
    session_max_age_hours=float(0),
    token_url="string",
    auto_users_creation=False,
    description="string",
    enable_group_mappings=False,
    iam_oidc_federation_v1_id="string",
    alias="string",
    name="string")

    const iamOidcFederationV1Resource = new selectel.IamOidcFederationV1("iamOidcFederationV1Resource", {
    jwksUrl: "string",
    authUrl: "string",
    clientId: "string",
    clientSecret: "string",
    issuer: "string",
    sessionMaxAgeHours: 0,
    tokenUrl: "string",
    autoUsersCreation: false,
    description: "string",
    enableGroupMappings: false,
    iamOidcFederationV1Id: "string",
    alias: "string",
    name: "string",
});

    type: selectel:IamOidcFederationV1
properties:
    alias: string
    authUrl: string
    autoUsersCreation: false
    clientId: string
    clientSecret: string
    description: string
    enableGroupMappings: false
    iamOidcFederationV1Id: string
    issuer: string
    jwksUrl: string
    name: string
    sessionMaxAgeHours: 0
    tokenUrl: string

    IamOidcFederationV1 Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IamOidcFederationV1 resource accepts the following input properties:

    AuthUrl string
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    ClientId string
    Unique identifier of the client for OIDC authentication.
    ClientSecret string
    Client secret for OIDC authentication.
    Issuer string
    Unique identifier of the credential provider.
    JwksUrl string
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    SessionMaxAgeHours double
    Session lifetime in hours.
    TokenUrl string
    URL of the token endpoint.
    Alias string
    Federation alias.
    AutoUsersCreation bool
    Enables automatic user creation for this federation.
    Description string
    Federation description.
    EnableGroupMappings bool
    Enables group mappings for this federation.
    IamOidcFederationV1Id string
    Name string
    Federation name.
    AuthUrl string
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    ClientId string
    Unique identifier of the client for OIDC authentication.
    ClientSecret string
    Client secret for OIDC authentication.
    Issuer string
    Unique identifier of the credential provider.
    JwksUrl string
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    SessionMaxAgeHours float64
    Session lifetime in hours.
    TokenUrl string
    URL of the token endpoint.
    Alias string
    Federation alias.
    AutoUsersCreation bool
    Enables automatic user creation for this federation.
    Description string
    Federation description.
    EnableGroupMappings bool
    Enables group mappings for this federation.
    IamOidcFederationV1Id string
    Name string
    Federation name.
    auth_url string
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    client_id string
    Unique identifier of the client for OIDC authentication.
    client_secret string
    Client secret for OIDC authentication.
    issuer string
    Unique identifier of the credential provider.
    jwks_url string
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    session_max_age_hours number
    Session lifetime in hours.
    token_url string
    URL of the token endpoint.
    alias string
    Federation alias.
    auto_users_creation bool
    Enables automatic user creation for this federation.
    description string
    Federation description.
    enable_group_mappings bool
    Enables group mappings for this federation.
    iam_oidc_federation_v1_id string
    name string
    Federation name.
    authUrl String
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    clientId String
    Unique identifier of the client for OIDC authentication.
    clientSecret String
    Client secret for OIDC authentication.
    issuer String
    Unique identifier of the credential provider.
    jwksUrl String
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    sessionMaxAgeHours Double
    Session lifetime in hours.
    tokenUrl String
    URL of the token endpoint.
    alias String
    Federation alias.
    autoUsersCreation Boolean
    Enables automatic user creation for this federation.
    description String
    Federation description.
    enableGroupMappings Boolean
    Enables group mappings for this federation.
    iamOidcFederationV1Id String
    name String
    Federation name.
    authUrl string
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    clientId string
    Unique identifier of the client for OIDC authentication.
    clientSecret string
    Client secret for OIDC authentication.
    issuer string
    Unique identifier of the credential provider.
    jwksUrl string
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    sessionMaxAgeHours number
    Session lifetime in hours.
    tokenUrl string
    URL of the token endpoint.
    alias string
    Federation alias.
    autoUsersCreation boolean
    Enables automatic user creation for this federation.
    description string
    Federation description.
    enableGroupMappings boolean
    Enables group mappings for this federation.
    iamOidcFederationV1Id string
    name string
    Federation name.
    auth_url str
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    client_id str
    Unique identifier of the client for OIDC authentication.
    client_secret str
    Client secret for OIDC authentication.
    issuer str
    Unique identifier of the credential provider.
    jwks_url str
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    session_max_age_hours float
    Session lifetime in hours.
    token_url str
    URL of the token endpoint.
    alias str
    Federation alias.
    auto_users_creation bool
    Enables automatic user creation for this federation.
    description str
    Federation description.
    enable_group_mappings bool
    Enables group mappings for this federation.
    iam_oidc_federation_v1_id str
    name str
    Federation name.
    authUrl String
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    clientId String
    Unique identifier of the client for OIDC authentication.
    clientSecret String
    Client secret for OIDC authentication.
    issuer String
    Unique identifier of the credential provider.
    jwksUrl String
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    sessionMaxAgeHours Number
    Session lifetime in hours.
    tokenUrl String
    URL of the token endpoint.
    alias String
    Federation alias.
    autoUsersCreation Boolean
    Enables automatic user creation for this federation.
    description String
    Federation description.
    enableGroupMappings Boolean
    Enables group mappings for this federation.
    iamOidcFederationV1Id String
    name String
    Federation name.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IamOidcFederationV1 resource produces the following output properties:

    AccountId string
    Selectel account ID.
    Id string
    The provider-assigned unique ID for this managed resource.
    AccountId string
    Selectel account ID.
    Id string
    The provider-assigned unique ID for this managed resource.
    account_id string
    Selectel account ID.
    id string
    The provider-assigned unique ID for this managed resource.
    accountId String
    Selectel account ID.
    id String
    The provider-assigned unique ID for this managed resource.
    accountId string
    Selectel account ID.
    id string
    The provider-assigned unique ID for this managed resource.
    account_id str
    Selectel account ID.
    id str
    The provider-assigned unique ID for this managed resource.
    accountId String
    Selectel account ID.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing IamOidcFederationV1 Resource

    Get an existing IamOidcFederationV1 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IamOidcFederationV1State, opts?: CustomResourceOptions): IamOidcFederationV1
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        alias: Optional[str] = None,
        auth_url: Optional[str] = None,
        auto_users_creation: Optional[bool] = None,
        client_id: Optional[str] = None,
        client_secret: Optional[str] = None,
        description: Optional[str] = None,
        enable_group_mappings: Optional[bool] = None,
        iam_oidc_federation_v1_id: Optional[str] = None,
        issuer: Optional[str] = None,
        jwks_url: Optional[str] = None,
        name: Optional[str] = None,
        session_max_age_hours: Optional[float] = None,
        token_url: Optional[str] = None) -> IamOidcFederationV1
    func GetIamOidcFederationV1(ctx *Context, name string, id IDInput, state *IamOidcFederationV1State, opts ...ResourceOption) (*IamOidcFederationV1, error)
    public static IamOidcFederationV1 Get(string name, Input<string> id, IamOidcFederationV1State? state, CustomResourceOptions? opts = null)
    public static IamOidcFederationV1 get(String name, Output<String> id, IamOidcFederationV1State state, CustomResourceOptions options)
    resources:  _:    type: selectel:IamOidcFederationV1    get:      id: ${id}
    import {
  to = selectel_iamoidcfederationv1.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    Selectel account ID.
    Alias string
    Federation alias.
    AuthUrl string
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    AutoUsersCreation bool
    Enables automatic user creation for this federation.
    ClientId string
    Unique identifier of the client for OIDC authentication.
    ClientSecret string
    Client secret for OIDC authentication.
    Description string
    Federation description.
    EnableGroupMappings bool
    Enables group mappings for this federation.
    IamOidcFederationV1Id string
    Issuer string
    Unique identifier of the credential provider.
    JwksUrl string
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    Name string
    Federation name.
    SessionMaxAgeHours double
    Session lifetime in hours.
    TokenUrl string
    URL of the token endpoint.
    AccountId string
    Selectel account ID.
    Alias string
    Federation alias.
    AuthUrl string
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    AutoUsersCreation bool
    Enables automatic user creation for this federation.
    ClientId string
    Unique identifier of the client for OIDC authentication.
    ClientSecret string
    Client secret for OIDC authentication.
    Description string
    Federation description.
    EnableGroupMappings bool
    Enables group mappings for this federation.
    IamOidcFederationV1Id string
    Issuer string
    Unique identifier of the credential provider.
    JwksUrl string
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    Name string
    Federation name.
    SessionMaxAgeHours float64
    Session lifetime in hours.
    TokenUrl string
    URL of the token endpoint.
    account_id string
    Selectel account ID.
    alias string
    Federation alias.
    auth_url string
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    auto_users_creation bool
    Enables automatic user creation for this federation.
    client_id string
    Unique identifier of the client for OIDC authentication.
    client_secret string
    Client secret for OIDC authentication.
    description string
    Federation description.
    enable_group_mappings bool
    Enables group mappings for this federation.
    iam_oidc_federation_v1_id string
    issuer string
    Unique identifier of the credential provider.
    jwks_url string
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    name string
    Federation name.
    session_max_age_hours number
    Session lifetime in hours.
    token_url string
    URL of the token endpoint.
    accountId String
    Selectel account ID.
    alias String
    Federation alias.
    authUrl String
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    autoUsersCreation Boolean
    Enables automatic user creation for this federation.
    clientId String
    Unique identifier of the client for OIDC authentication.
    clientSecret String
    Client secret for OIDC authentication.
    description String
    Federation description.
    enableGroupMappings Boolean
    Enables group mappings for this federation.
    iamOidcFederationV1Id String
    issuer String
    Unique identifier of the credential provider.
    jwksUrl String
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    name String
    Federation name.
    sessionMaxAgeHours Double
    Session lifetime in hours.
    tokenUrl String
    URL of the token endpoint.
    accountId string
    Selectel account ID.
    alias string
    Federation alias.
    authUrl string
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    autoUsersCreation boolean
    Enables automatic user creation for this federation.
    clientId string
    Unique identifier of the client for OIDC authentication.
    clientSecret string
    Client secret for OIDC authentication.
    description string
    Federation description.
    enableGroupMappings boolean
    Enables group mappings for this federation.
    iamOidcFederationV1Id string
    issuer string
    Unique identifier of the credential provider.
    jwksUrl string
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    name string
    Federation name.
    sessionMaxAgeHours number
    Session lifetime in hours.
    tokenUrl string
    URL of the token endpoint.
    account_id str
    Selectel account ID.
    alias str
    Federation alias.
    auth_url str
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    auto_users_creation bool
    Enables automatic user creation for this federation.
    client_id str
    Unique identifier of the client for OIDC authentication.
    client_secret str
    Client secret for OIDC authentication.
    description str
    Federation description.
    enable_group_mappings bool
    Enables group mappings for this federation.
    iam_oidc_federation_v1_id str
    issuer str
    Unique identifier of the credential provider.
    jwks_url str
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    name str
    Federation name.
    session_max_age_hours float
    Session lifetime in hours.
    token_url str
    URL of the token endpoint.
    accountId String
    Selectel account ID.
    alias String
    Federation alias.
    authUrl String
    URL of the authorization endpoint used to authenticate users via the OIDC provider.
    autoUsersCreation Boolean
    Enables automatic user creation for this federation.
    clientId String
    Unique identifier of the client for OIDC authentication.
    clientSecret String
    Client secret for OIDC authentication.
    description String
    Federation description.
    enableGroupMappings Boolean
    Enables group mappings for this federation.
    iamOidcFederationV1Id String
    issuer String
    Unique identifier of the credential provider.
    jwksUrl String
    URL of the JSON Web Key Set (JWKS) endpoint with certificates used for token verification.
    name String
    Federation name.
    sessionMaxAgeHours Number
    Session lifetime in hours.
    tokenUrl String
    URL of the token endpoint.

    Import

    You can import a federation:

    export OS_DOMAIN_NAME=<account_id>

    export OS_USERNAME=

    export OS_PASSWORD=

    $ pulumi import selectel:index/iamOidcFederationV1:IamOidcFederationV1 federation_1 <federation_id>

    where:

    • <account_id> — Selectel account ID. The account ID is in the top right corner of the Control panel. Learn more about Registration.

    • <username> — Name of the service user. To get the name, in the Control panel, go to Account ⟶ the Service users tab ⟶ copy the name of the required user. Learn more about Service Users.

    • <password> — Password of the service user.

    • <federation_id> — Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to Account → Federations → copy the ID under the federation name.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    selectel selectel/terraform-provider-selectel
    License
    Notes
    This Pulumi package is based on the selectel Terraform Provider.
    Viewing docs for selectel 8.0.1
    published on Thursday, May 28, 2026 by selectel
    Schema (JSON)
    selectel/terraform-provider-selectel

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial