inbound_sso_assignments

Creates, updates, deletes, gets or lists a inbound_sso_assignments resource.

Overview

Name	inbound_sso_assignments
Type	Resource
Id	google.cloudidentity.inbound_sso_assignments

Fields

Name	Datatype	Description
name	string	Output only. Resource name of the Inbound SSO Assignment.
customer	string	Immutable. The customer. For example: customers/C0123abc.
rank	integer	Must be zero (which is the default value so it can be omitted) for assignments with target_org_unit set and must be greater-than-or-equal-to one for assignments with target_group set.
samlSsoInfo	object	Details that are applicable when sso_mode == SAML_SSO.
signInBehavior	object	Controls sign-in behavior.
ssoMode	string	Inbound SSO behavior.
targetGroup	string	Immutable. Must be of the form groups/{group}.
targetOrgUnit	string	Immutable. Must be of the form orgUnits/{org_unit}.

Methods

Name	Accessible by	Required Params	Description
get	SELECT	inboundSsoAssignmentsId	Gets an InboundSsoAssignment.
list	SELECT		Lists the InboundSsoAssignments for a Customer.
create	INSERT		Creates an InboundSsoAssignment for users and devices in a Customer under a given Group or OrgUnit.
delete	DELETE	inboundSsoAssignmentsId	Deletes an InboundSsoAssignment. To disable SSO, Create (or Update) an assignment that has sso_mode == SSO_OFF.
patch	UPDATE	inboundSsoAssignmentsId	Updates an InboundSsoAssignment. The body of this request is the inbound_sso_assignment field and the update_mask is relative to that. For example: a PATCH to /v1/inboundSsoAssignments/0abcdefg1234567&update_mask=rank with a body of { "rank": 1 } moves that (presumably group-targeted) SSO assignment to the highest priority and shifts any other group-targeted assignments down in priority.

SELECT examples

Lists the InboundSsoAssignments for a Customer.

SELECT
name,
customer,
rank,
samlSsoInfo,
signInBehavior,
ssoMode,
targetGroup,
targetOrgUnit
FROM google.cloudidentity.inbound_sso_assignments
;

INSERT example

Use the following StackQL query and manifest file to create a new inbound_sso_assignments resource.

All Properties

/*+ create */
INSERT INTO google.cloudidentity.inbound_sso_assignments (
targetGroup,
targetOrgUnit,
customer,
rank,
ssoMode,
samlSsoInfo,
signInBehavior
)
SELECT 
'{{ targetGroup }}',
'{{ targetOrgUnit }}',
'{{ customer }}',
'{{ rank }}',
'{{ ssoMode }}',
'{{ samlSsoInfo }}',
'{{ signInBehavior }}'
;

Manifest

- name: your_resource_model_name
  props:
    - name: targetGroup
      value: string
    - name: targetOrgUnit
      value: string
    - name: name
      value: string
    - name: customer
      value: string
    - name: rank
      value: integer
    - name: ssoMode
      value: string
    - name: samlSsoInfo
      value:
        - name: inboundSamlSsoProfile
          value: string
    - name: signInBehavior
      value:
        - name: redirectCondition
          value: string

UPDATE example

Updates a inbound_sso_assignments resource.

/*+ update */
UPDATE google.cloudidentity.inbound_sso_assignments
SET 
targetGroup = '{{ targetGroup }}',
targetOrgUnit = '{{ targetOrgUnit }}',
customer = '{{ customer }}',
rank = '{{ rank }}',
ssoMode = '{{ ssoMode }}',
samlSsoInfo = '{{ samlSsoInfo }}',
signInBehavior = '{{ signInBehavior }}'
WHERE 
inboundSsoAssignmentsId = '{{ inboundSsoAssignmentsId }}';

DELETE example

Deletes the specified inbound_sso_assignments resource.

/*+ delete */
DELETE FROM google.cloudidentity.inbound_sso_assignments
WHERE inboundSsoAssignmentsId = '{{ inboundSsoAssignmentsId }}';