Identity provider

securityidentity-provider

Authenticates principals and decides authorization.

Category: Security
Properties: 5
Components: 48
Rules: 0

Properties · 5 defined by this kind

A node of this kind resolves each property from its own props, then the component's defaults, then the default below.

property	type	values	required	default
authorizationModel	enum	none \| rbac \| abac \| rebac	no	rbac
centralised · advanced	boolean	—	no	true
managed	boolean	—	no	true
mfa	boolean	—	no	false
protocol	enum	oidc \| saml \| oauth2 \| iam \| custom	no	oidc

Rules for this kind · 0

No rule selects this kind or its category. Governance calls that a recorded gap.

Components · 48

vendor-neutral

Generic identity provideridentity-providergenericthe kind itself

alibabacloud

Resource Access Managementalibaba-ram4 defaults

aws

Amazon Cognitoaws-cognito4 defaults Amazon Cognito identity poolaws-cognito-identity-pool4 defaults AWS Directory Serviceaws-directory-service5 defaults AWS IAMaws-iam4 defaults AWS IAM Identity Centeraws-iam-identity-center5 defaults AWS IAM Roles Anywhereaws-iam-roles-anywhere5 defaults AWS Directory Service Simple ADaws-simple-ad5 defaults

azure

Microsoft Azure Attestationazure-attestation4 defaults Microsoft Entra Domain Servicesazure-entra-domain-services5 defaults Microsoft Entra External IDazure-entra-external-id5 defaults Microsoft Entra IDazure-entra-id4 defaults Microsoft Entra Verified IDazure-entra-verified-id5 defaults Azure IoT Hub Device Provisioning Serviceazure-iot-dps4 defaults Managed identities for Azure resourcesazure-managed-identity5 defaults

cloudflare

Cloudflare One identity providercloudflare-one-identity-provider3 defaults

gcp

Cloud Identitygoogle-cloud-identity5 defaults Firebase Authenticationgoogle-firebase-auth5 defaults Google Identity Platformgoogle-identity-platform4 defaults Managed Service for Microsoft Active Directorygoogle-managed-microsoft-ad4 defaults

ibm

IBM Cloud App IDibm-app-id4 defaults IBM Cloud Identity and Access Managementibm-iam4 defaults IBM Security Verifyibm-security-verify3 defaults

oci

OCI Dynamic Groupoci-dynamic-group5 defaults OCI IAM with Identity Domainsoci-identity-domain5 defaults

openstack

OpenStack Keystoneopenstack-keystone5 defaults

outscale

Elastic Identity Management (EIM)outscale-eim5 defaults

Source

1# yaml-language-server: $schema=../schema/kind.schema.json
2# Abstract kind: Authenticates principals and decides authorization (IAM, OIDC providers, Zanzibar-style authorization services).
3schemaVersion: "1"
4type: "kind"
5id: "identity-provider"
6category: "security"
7properties:
8  protocol:
9    type: "enum"
10    values: ["oidc", "saml", "oauth2", "iam", "custom"]
11    default: "oidc"
12  authorizationModel:
13    type: "enum"
14    values: ["none", "rbac", "abac", "rebac"]
15    default: "rbac"
16  centralised:
17    type: "boolean"
18    default: true
19    advanced: true
20  mfa:
21    type: "boolean"
22    default: false
23  managed:
24    type: "boolean"
25    default: true

The same page as markdown, for an agent: /catalogue/kinds/identity-provider.md