Report a Documentation Bug

OpenID Connect Provider in RGW

An entity describing the OpenID Connect Provider needs to be created in RGW, in order to establish trust between the two.

REST APIs for Manipulating an OpenID Connect Provider

The following REST APIs can be used for creating and managing an OpenID Connect Provider entity in RGW.

In order to invoke the REST admin APIs, a user with admin caps needs to be created.

radosgw-admin --uid TESTER --display-name "TestUser" --access_key TESTER --secret test123 user create
radosgw-admin caps add --uid="TESTER" --caps="oidc-provider=*"

CreateOpenIDConnectProvider

Create an OpenID Connect Provider entity in RGW

Request Parameters

ClientIDList.member.N

Description: List of Client Ids that needs access to S3 resources.
Type: Array of Strings

ThumbprintList.member.N

Description: List of OpenID Connect IDP’s server certificates’ thumbprints. A maximum of 5 thumbprints are allowed.
Type: Array of Strings

Url

Description: URL of the IDP.
Type: String

Example::

POST “<hostname>?Action=Action=CreateOpenIDConnectProvider: &ThumbprintList.list.1=F7D7B3515DD0D319DD219A43A9EA727AD6065287 &ClientIDList.list.1=app-profile-jsp &Url=http://localhost:8080/auth/realms/quickstart

DeleteOpenIDConnectProvider

Deletes an OpenID Connect Provider entity in RGW

Request Parameters

OpenIDConnectProviderArn

Description: ARN of the IDP which is returned by the Create API.
Type: String

Example::

POST “<hostname>?Action=Action=DeleteOpenIDConnectProvider: &OpenIDConnectProviderArn=arn:aws:iam:::oidc-provider/localhost:8080/auth/realms/quickstart

GetOpenIDConnectProvider

Gets information about an IDP.

Request Parameters

OpenIDConnectProviderArn

Description: ARN of the IDP which is returned by the Create API.
Type: String

Example::

POST “<hostname>?Action=Action=GetOpenIDConnectProvider: &OpenIDConnectProviderArn=arn:aws:iam:::oidc-provider/localhost:8080/auth/realms/quickstart

ListOpenIDConnectProviders

Lists information about all IDPs

Request Parameters

None

Example::: POST “<hostname>?Action=Action=ListOpenIDConnectProviders