Cloud Authentication
Create a Custom OIDC persona mapping
Map token claims from a registered Custom OIDC provider to a Datadog user or service account. The caller must be authorized to map to the target account.
post/api/v2/wif/oidc/persona_mapping
Request
- Base URLhttps://api.datadoghq.com
- Auth
- API key in header DD-API-KEY and API key in header DD-APPLICATION-KEY
- or OAuth 2Authorization code/oauth2/v1/authorizeToken URL/oauth2/v1/tokenScopesworkload_identity_federation_write
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Request body
Example request
{
"data": {
"attributes": {
"account_uuid": "00000000-0000-0000-0000-000000000003",
"claim_matchers": [
{
"claim": "sub",
"mode": "exact",
"values": [
"system:serviceaccount:controllers:example-controller"
]
}
],
"identity_pattern": "system:serviceaccount:controllers:example-controller",
"provider_id": "00000000-0000-0000-0000-000000000002"
},
"type": "custom_oidc_identity_mapping"
}
}Response
Created
Example response
{
"data": {
"attributes": {
"account_uuid": "00000000-0000-0000-0000-000000000003",
"claim_matchers": [
{
"claim": "sub",
"mode": "exact",
"values": [
"system:serviceaccount:controllers:example-controller"
]
}
],
"identity_pattern": "system:serviceaccount:controllers:example-controller",
"provider_id": "00000000-0000-0000-0000-000000000002"
},
"id": "00000000-0000-0000-0000-000000000004",
"type": "custom_oidc_identity_mapping"
}
}Changes
Changes to this operation have not been checked yet.