-
Notifications
You must be signed in to change notification settings - Fork 9.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SSO New User & Group Resource #18812
Comments
@ajaychoudhary-bcg This sounds like a good idea. However, can you please provide additional details, such as a possible name for the new resource and what the Terraform configuration would look like? |
@YakDriver |
do we know by when this will be available? |
I don't think this is yet possible since it's not yet supported in AWS SDK , maybe we should also edit the this issue title to be |
Any update on this ? |
I guess the best option for now is to enable an automatic provisioning endpoint on the SSO tenant and use the SCIM API directly. Annoying, but could work. |
The AWS SCIM API only returns a maximum of 50 users when listing users. There is no way to retrieve the rest of the users. The AWS SCIM endpoint also does not return a user's group information, so there's no way to tell which groups the user is part of. Unfortunately, the AWS SCIM API is not a great option for automated user provisioning. |
It appears this is now supported in AWS SDK: https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_CreateUser.html |
#26598 - currently being worked on by TF team |
This functionality has been released in v4.33.0 of the Terraform AWS Provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you! |
@ewbankkit is in your roadmap the implementation of the imports for the following?
While I can create new User/Groups, I would really need to import the resources from the existing infrastructure. Many thanks |
@rainmanh I just imported users and groups, so that just works, but it might not be documented. You can just import using the ID of the user and group unlike the group membership where you need to get the membership ID first. |
I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. |
Community Note
Related #18739
Description
It would be great if we can provide resource to create new group and add members using terraform.
New or Affected Resource(s)
New
Potential Terraform Configuration
References
The text was updated successfully, but these errors were encountered: