Skip to main content

Deprecated: Add JWT Identity Provider (IDP)

POST 
https://$CUSTOM-DOMAIN/management/v1/idps/jwt
deprecated

Create a new identity provider configuration on the organization to enable your users to log in with social/enterprise login. JSON Web Token Identity Provider (JWT IDP) gives you the possibility to use an (existing) JWT as a federated identity. You have to provide an endpoint where ZITADEL can get the existing JWT token.

Request​

Header Parameters

    x-zitadel-orgid string

    The default is always the organization of the requesting user. If you like to get/set a result of another organization include the header. Make sure the user has permission to access the requested data.

Body

required

    name stringrequired

    Possible values: non-empty and <= 200 characters

    stylingType string

    Possible values: [STYLING_TYPE_UNSPECIFIED, STYLING_TYPE_GOOGLE]

    Default value: STYLING_TYPE_UNSPECIFIED

    some identity providers specify the styling of the button to their login

    jwtEndpoint stringrequired

    Possible values: non-empty and <= 200 characters

    the endpoint where the JWT can be extracted

    issuer stringrequired

    Possible values: non-empty and <= 200 characters

    the issuer of the JWT (for validation)

    keysEndpoint stringrequired

    Possible values: non-empty and <= 200 characters

    the endpoint to the key (JWK) which is used to sign the JWT with

    headerName stringrequired

    Possible values: non-empty and <= 200 characters

    the name of the header where the JWT is sent in, default is authorization

    autoRegister boolean

Responses​

A successful response.

Schema

    details

    object

    sequence uint64

    on read: the sequence of the last event reduced by the projection

    on manipulation: the timestamp of the event(s) added by the manipulation

    creationDate date-time

    on read: the timestamp of the first event of the object

    on create: the timestamp of the event(s) added by the manipulation

    changeDate date-time

    on read: the timestamp of the last event reduced by the projection

    on manipulation: the

    resourceOwner resource_owner is the organization an object belongs to (string)
    idpId string
curl -L 'https://$CUSTOM-DOMAIN/management/v1/idps/jwt' \
-H 'Content-Type: application/json' \
-H 'Accept: application/json' \
-H 'Authorization: Bearer <TOKEN>' \
-d '{
  "name": "google",
  "stylingType": "STYLING_TYPE_UNSPECIFIED",
  "jwtEndpoint": "https://accounts.google.com",
  "issuer": "https://accounts.google.com",
  "keysEndpoint": "https://accounts.google.com/keys",
  "headerName": "x-auth-token",
  "autoRegister": true
}'
Request Collapse all
Base URL
https://$CUSTOM-DOMAIN/management/v1
Auth
Parameters
— header
Body required
{
  "name": "google",
  "stylingType": "STYLING_TYPE_UNSPECIFIED",
  "jwtEndpoint": "https://accounts.google.com",
  "issuer": "https://accounts.google.com",
  "keysEndpoint": "https://accounts.google.com/keys",
  "headerName": "x-auth-token",
  "autoRegister": true
}
ResponseClear

Click the Send API Request button above and see the response here!