OCI IAM with Identity Domains

ociIdentity provideroci-identity-domain

User population, groups and sign-on policies of an OCI tenancy.

Provider
oci
Category
Security
Also known as
IDCS
Properties · 5 set by this component
propertytypevaluesrequiredkind defaultthis component
authorizationModelenumnone | rbac | abac | rebacnorbac▸ rbac
centralised · advancedboolean—notrue▸ true
domainType · component propertyenumfree | oracle-apps | premium | external-usernofreeinherited
federationProtocol · component propertyenumsaml | oidc | oauth2 | nonenononeinherited
managedboolean—notrue▸ true
mfaboolean—nofalse▸ false
protocolenumoidc | saml | oauth2 | iam | customnooidc▸ iam
selfRegistration · component propertyboolean—nofalseinherited
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "identity-domain", component: "oci-identity-domain" }
Other Identity provider products · 47
Resource Access Managementalibaba-ramalibabacloudidentity-providerAmazon Cognitoaws-cognitoawsidentity-providerAmazon Cognito identity poolaws-cognito-identity-poolawsidentity-providerAWS Directory Serviceaws-directory-serviceawsidentity-providerAWS IAMaws-iamawsidentity-providerAWS IAM Identity Centeraws-iam-identity-centerawsidentity-providerAWS IAM Roles Anywhereaws-iam-roles-anywhereawsidentity-providerAWS Directory Service Simple ADaws-simple-adawsidentity-providerMicrosoft Azure Attestationazure-attestationazureidentity-providerMicrosoft Entra Domain Servicesazure-entra-domain-servicesazureidentity-providerMicrosoft Entra External IDazure-entra-external-idazureidentity-providerMicrosoft Entra IDazure-entra-idazureidentity-providerMicrosoft Entra Verified IDazure-entra-verified-idazureidentity-providerAzure IoT Hub Device Provisioning Serviceazure-iot-dpsazureidentity-providerManaged identities for Azure resourcesazure-managed-identityazureidentity-providerCloudflare One identity providercloudflare-one-identity-providercloudflareidentity-providerActive Directory Domain Servicesactive-directoryidentity-providerAthenzathenzidentity-providerAuth0auth0identity-providerAutheliaautheliaidentity-providerauthentikauthentikidentity-providerClerkclerkidentity-providerDexdexidentity-providerFreeIPAfreeipaidentity-providerGeneric identity provideridentity-provideridentity-providerKeycloakkeycloakidentity-providerOAuth2 Proxyoauth2-proxyidentity-providerOktaoktaidentity-providerOpenFGAopenfgaidentity-providerOpenLDAPopenldapidentity-providerOryoryidentity-providerPing Identity Platformping-identityidentity-providerSpiceDBspicedbidentity-providerSPIREspireidentity-providerStytchstytchidentity-providerWorkOSworkosidentity-providerZitadelzitadelidentity-providerCloud Identitygoogle-cloud-identitygcpidentity-providerFirebase Authenticationgoogle-firebase-authgcpidentity-providerGoogle Identity Platformgoogle-identity-platformgcpidentity-provider
and 7 more → Identity provider page
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Oracle Cloud IAM with Identity Domains: the user population, groups and sign-on policies of a tenancy.
# Defaults from "Identity Domains Overview" and "Managing Sign-On Policies": every domain ships an active
# Default Sign-On Policy whose Default Sign-On Rule lets users in with username and password, so no MFA.
schemaVersion: "1"
type: "component"
id: "oci-identity-domain"
kind: "identity-provider"
provider: "oci"
docs: "https://docs.oracle.com/en-us/iaas/Content/Identity/domains/overview.htm"
aliases: ["IDCS"]
defaults:
  managed: true
  protocol: "iam"
  authorizationModel: "rbac"
  centralised: true
  mfa: false
properties:
  domainType:
    type: "enum"
    values: ["free", "oracle-apps", "premium", "external-user"]
    default: "free"
  federationProtocol:
    type: "enum"
    values: ["saml", "oidc", "oauth2", "none"]
    default: "none"
  selfRegistration:
    type: "boolean"
    default: false

The same page as markdown, for an agent: /catalogue/components/oci-identity-domain.md