OCI IAM with Identity Domains
User population, groups and sign-on policies of an OCI tenancy.
- Provider
- oci
- Category
- Security
- Also known as
- IDCS
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| authorizationModel | enum | none | rbac | abac | rebac | no | rbac | ▸ rbac |
| centralised | boolean | — | no | true | ▸ true |
| domainType | enum | free | oracle-apps | premium | external-user | no | free | inherited |
| federationProtocol | enum | saml | oidc | oauth2 | none | no | none | inherited |
| managed | boolean | — | no | true | ▸ true |
| mfa | boolean | — | no | false | ▸ false |
| protocol | enum | oidc | saml | oauth2 | iam | custom | no | oidc | ▸ iam |
| selfRegistration | boolean | — | no | false | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "identity-domain", component: "oci-identity-domain" }Resource Access Managementalibaba-ramAmazon Cognitoaws-cognitoAmazon Cognito identity poolaws-cognito-identity-poolAWS Directory Serviceaws-directory-serviceAWS IAMaws-iamAWS IAM Identity Centeraws-iam-identity-centerAWS IAM Roles Anywhereaws-iam-roles-anywhereAWS Directory Service Simple ADaws-simple-adMicrosoft Azure Attestationazure-attestationMicrosoft Entra Domain Servicesazure-entra-domain-servicesMicrosoft Entra External IDazure-entra-external-idMicrosoft Entra IDazure-entra-idMicrosoft Entra Verified IDazure-entra-verified-idAzure IoT Hub Device Provisioning Serviceazure-iot-dpsManaged identities for Azure resourcesazure-managed-identityCloudflare One identity providercloudflare-one-identity-providerActive Directory Domain Servicesactive-directoryAthenzathenzAuth0auth0AutheliaautheliaauthentikauthentikClerkclerkDexdexFreeIPAfreeipaGeneric identity provideridentity-providerKeycloakkeycloakOAuth2 Proxyoauth2-proxyOktaoktaOpenFGAopenfgaOpenLDAPopenldapOryoryPing Identity Platformping-identitySpiceDBspicedbSPIREspireStytchstytchWorkOSworkosZitadelzitadelCloud Identitygoogle-cloud-identityFirebase Authenticationgoogle-firebase-authGoogle Identity Platformgoogle-identity-platform
and 7 more → Identity provider page# yaml-language-server: $schema=../../schema/component.schema.json # Oracle Cloud IAM with Identity Domains: the user population, groups and sign-on policies of a tenancy. # Defaults from "Identity Domains Overview" and "Managing Sign-On Policies": every domain ships an active # Default Sign-On Policy whose Default Sign-On Rule lets users in with username and password, so no MFA. schemaVersion: "1" type: "component" id: "oci-identity-domain" kind: "identity-provider" provider: "oci" docs: "https://docs.oracle.com/en-us/iaas/Content/Identity/domains/overview.htm" aliases: ["IDCS"] defaults: managed: true protocol: "iam" authorizationModel: "rbac" centralised: true mfa: false properties: domainType: type: "enum" values: ["free", "oracle-apps", "premium", "external-user"] default: "free" federationProtocol: type: "enum" values: ["saml", "oidc", "oauth2", "none"] default: "none" selfRegistration: type: "boolean" default: false