Data Source: oci_identity_domains_apps
This data source provides the list of Apps in Oracle Cloud Infrastructure Identity Domains service.
Search Apps
Example Usage
data "oci_identity_domains_apps" "test_apps" {
#Required
idcs_endpoint = data.oci_identity_domain.test_domain.url
#Optional
app_count = var.app_app_count
app_filter = var.app_app_filter
attribute_sets = ["all"]
attributes = ""
authorization = var.app_authorization
resource_type_schema_version = var.app_resource_type_schema_version
start_index = var.app_start_index
}
Argument Reference
The following arguments are supported:
app_count- (Optional) OPTIONAL. An integer that indicates the desired maximum number of query results per page. 1000 is the largest value that you can use. See the Pagination section of the System for Cross-Domain Identity Management Protocol specification for more information. (Section 3.4.2.4).app_filter- (Optional) OPTIONAL. The filter string that is used to request a subset of resources. The filter string MUST be a valid filter expression. See the Filtering section of the SCIM specification for more information (Section 3.4.2.2). The string should contain at least one condition that each item must match in order to be returned in the search results. Each condition specifies an attribute, an operator, and a value. Conditions within a filter can be connected by logical operators (such as AND and OR). Sets of conditions can be grouped together using parentheses.attribute_sets- (Optional) A multi-valued list of strings indicating the return type of attribute definition. The specified set of attributes can be fetched by the return type of the attribute. One or more values can be given together to fetch more than one group of attributes. If ‘attributes’ query parameter is also available, union of the two is fetched. Valid values - all, always, never, request, default. Values are case-insensitive.attributes- (Optional) A comma-delimited string that specifies the names of resource attributes that should be returned in the response. By default, a response that contains resource attributes contains only attributes that are defined in the schema for that resource type as returned=always or returned=default. An attribute that is defined as returned=request is returned in a response only if the request specifies its name in the value of this query parameter. If a request specifies this query parameter, the response contains the attributes that this query parameter specifies, as well as any attribute that is defined as returned=always.authorization- (Optional) The Authorization field value consists of credentials containing the authentication information of the user agent for the realm of the resource being requested.idcs_endpoint- (Required) The basic endpoint for the identity domainresource_type_schema_version- (Optional) An endpoint-specific schema version number to use in the Request. Allowed version values are Earliest Version or Latest Version as specified in each REST API endpoint description, or any sequential number inbetween. All schema attributes/body parameters are a part of version 1. After version 1, any attributes added or deprecated will be tagged with the version that they were added to or deprecated in. If no version is provided, the latest schema version is returned.start_index- (Optional) OPTIONAL. An integer that indicates the 1-based index of the first query result. See the Pagination section of the SCIM specification for more information. (Section 3.4.2.4). The number of results pages to return. The first page is 1. Specify 2 to access the second page of results, and so on.
Attributes Reference
The following attributes are exported:
apps- The list of apps.
App Reference
The following attributes are exported:
access_token_expiry- Expiry-time in seconds for an Access Token. Any token that allows access to this App will expire after the specified duration.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
accounts- Accounts of AppSCIM++ Properties:
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none
active- Status of the accountAdded In: 17.4.6
SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
name- Name of the accountAdded In: 17.4.6
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
owner_id- Owner identifierSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- AccountMgmtInfo URISCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Account identifierSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: always
- type: string
- uniqueness: none
active- If true, this App is able to participate in runtime services, such as automatic-login, OAuth, and SAML. If false, all runtime services are disabled for this App, and only administrative operations can be performed.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
admin_roles- A list of AppRoles defined by this UnmanagedApp. Membership in each of these AppRoles confers administrative privilege within this App.SCIM++ Properties:
idcsCompositeKey: [value]
idcsSearchable: false
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
description- The description of the AppRole.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
display- Display-name of the AppRole.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- URI of the AppRole.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- ID of the AppRole.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: true
- returned: default
- type: string
- uniqueness: none
alias_apps- Each value of this internal attribute refers to an Oracle Public Cloud infrastructure App on which this App depends.SCIM++ Properties:
caseExact: true
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
description- Description of the alias App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
display- Display name of the alias App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- URI of the alias App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- ID of the alias App.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
all_url_schemes_allowed- If true, indicates that the system should allow all URL-schemes within each value of the ‘redirectUris’ attribute. Also indicates that the system should not attempt to confirm that each value of the ‘redirectUris’ attribute is a valid URI. In particular, the system should not confirm that the domain component of the URI is a top-level domain and the system should not confirm that the hostname portion is a valid system that is reachable over the network.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
allow_access_control- If true, any managed App that is based on this template is checked for access control that is, access to this app is subject to successful authorization at SSO service, viz. app grants to start with.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
allow_offline- If true, indicates that the Refresh Token is allowed when this App acts as an OAuth Resource.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
allowed_grants- List of grant-types that this App is allowed to use when it acts as an OAuthClient.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: true
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
allowed_operations- OPTIONAL. Required only when this App acts as an OAuthClient. Supported values are ‘introspect’ and ‘onBehalfOfUser’. The value ‘introspect’ allows the client to look inside the access-token. The value ‘onBehalfOfUser’ overrides how the client’s privileges are combined with the privileges of the Subject User. Ordinarily, authorization calculates the set of effective privileges as the intersection of the client’s privileges and the user’s privileges. The value ‘onBehalfOf’ indicates that authorization should ignore the privileges of the client and use only the user’s privileges to calculate the effective privileges.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: true
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
allowed_scopes- A list of scopes (exposed by this App or by other Apps) that this App is allowed to access when it acts as an OAuthClient.SCIM++ Properties:
caseExact: true
idcsCompositeKey: [fqs]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
fqs- A fully qualified scope that this App is allowed to access when it acts as an OAuthClient.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
id_of_defining_app- The ID of the App that defines this scope.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
read_only- If true, indicates that this value must be protected.Added In: 18.2.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
allowed_tags- A list of tags, acting as an OAuthClient, this App is allowed to access.Added In: 17.4.6
SCIM++ Properties:
idcsCompositeKey: [key, value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
key- Key or name of the allowed tag.Added In: 17.4.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
read_only- If true, indicates that this value must be protected.Added In: 18.2.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: boolean
- uniqueness: none
value- Value of the allowed tag.Added In: 17.4.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
app_icon- Application icon.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: string
- uniqueness: none
app_signon_policy- App Sign-on Policy.SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
ref- URI of the policy.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the Policy.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
app_thumbnail- Application thumbnail.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: string
- uniqueness: none
apps_network_perimeters- Network PerimeterAdded In: 2010242156
SCIM++ Properties:
idcsCompositeKey: [value]
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
ref- URI of the Network Perimeter.Added In: 2010242156
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- List of identifier of Network Perimeters for AppAdded In: 2010242156
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: always
- type: string
- uniqueness: none
as_opc_service- OPCService facet of the application.Deprecated Since: 17.3.4
SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
ref- URI of the OPCService facet.Deprecated Since: 17.3.4
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the OPCService facet.Deprecated Since: 17.3.4
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
attr_rendering_metadata- Label for the attribute to be shown in the UI.SCIM++ Properties:
idcsCompositeKey: [name]
idcsSearchable: false
multiValued: true
mutability: immutable
required: false
returned: default
type: complex
uniqueness: none
datatype- Data type of the attribute.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
helptext- Help text for the attribute. It can contain HTML tags.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
label- Label for the attribute to be shown in the UI.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
max_length- Maximum length of the attribute.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
max_size- Maximum size of the attribute.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
min_length- Minimum length of the attribute.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
min_size- Minimum size of the attribute..SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
name- Name of the attribute.SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
order- Data type of the attribute.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
read_only- Is the attribute readOnly.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
regexp- Regular expression of the attribute for validation.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
required- Attribute is required or optional.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
section- UI widget to use for the attribute.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
visible- Indicates whether the attribute is to be shown on the application creation UI.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
widget- UI widget to use for the attribute.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
audience- The base URI for all of the scopes defined in this App. The value of ‘audience’ is combined with the ‘value’ of each scope to form an ‘fqs’ or fully qualified scope.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
based_on_template- Application template on which the application is based.SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: immutable
required: true
returned: default
type: complex
last_modified- The most recent DateTime that the appTemplate on which the application based upon is updated. The attribute MUST be a DateTime.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: dateTime
- uniqueness: none
ref- URI of the application template.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the application template.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: true
- returned: always
- type: string
- uniqueness: none
well_known_id- Unique Well-known identifier used to reference app template.Added In: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: string
- uniqueness: none
bypass_consent- If true, indicates that consent should be skipped for all scopesAdded In: 19.2.1
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
callback_service_url- Callback Service URLSCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
certificates- Each value of this attribute represent a certificate that this App uses when it acts as an OAuthClient.SCIM++ Properties:
caseExact: false
idcsCompositeKey: [certAlias]
idcsSearchable: false
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
cert_alias- Certificate aliasSCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: always
- type: string
- uniqueness: none
kid- Certificate kidSCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
sha1thumbprint- sha1ThumbprintSCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
x509base64certificate- Base-64-encoded certificate.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: binary
- uniqueness: none
x5t- Certificate x5tSCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
client_ip_checking- Network Perimeters checking modeAdded In: 2010242156
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
client_secret- This value is the credential of this App, which this App supplies as a password when this App authenticates to the Oracle Public Cloud infrastructure. This value is also the client secret of this App when it acts as an OAuthClient.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- idcsSensitive: none
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
client_type- Specifies the type of access that this App has when it acts as an OAuthClient.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
cloud_control_properties- A collection of arbitrary properties that scope the privileges of a cloud-control App.Added In: 18.4.2
SCIM++ Properties:
idcsCompositeKey: [name]
idcsSearchable: false
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none
name- The name of the property.Added In: 18.4.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: true
- returned: default
- type: string
- uniqueness: none
values- The value(s) of the property.Added In: 18.4.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: true
- mutability: readOnly
- required: true
- returned: default
- type: string
- uniqueness: none
compartment_ocid- Oracle Cloud Infrastructure Compartment Id (ocid) in which the resource lives.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
contact_email_address- Contact Email AddressAdded In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
delegated_service_names- Service Names allow to use Oracle Cloud Infrastructure signature for client authentication instead of client credentialsAdded In: 2207040824
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: true
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
delete_in_progress- A boolean flag indicating this resource in the process of being deleted. Usually set to true when synchronous deletion of the resource would take too long.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
description- Description of the application.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
disable_kmsi_token_authentication- Indicates whether the application is allowed to be access using kmsi token.Added In: 2111190457
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: always
- type: boolean
- uniqueness: none
display_name- Display name of the application. Display name is intended to be user-friendly, and an administrator can change the value at any time.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: always
- type: string
- uniqueness: server
domain_ocid- Oracle Cloud Infrastructure Domain Id (ocid) in which the resource lives.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
editable_attributes- App attributes editable by subjectAdded In: 18.2.6
SCIM++ Properties:
caseExact: false
idcsCompositeKey: [name]
idcsSearchable: false
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none
name- Name of the attribute. The attribute name will be qualified by schema name if any extension schema defines the attribute. The attribute name will not be qualified by schema name if the base schema defines the attribute.Added In: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: true
- returned: default
- type: string
- uniqueness: none
error_page_url- This attribute specifies the URL of the page to which an application will redirect an end-user in case of error.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
granted_app_roles- A list of AppRoles that are granted to this App (and that are defined by other Apps). Within the Oracle Public Cloud infrastructure, this allows AppID-based association. Such an association allows this App to act as a consumer and thus to access resources of another App that acts as a producer.SCIM++ Properties:
caseExact: true
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none
admin_role- If true, then this granted AppRole confers administrative privileges within the App that defines it. Otherwise, the granted AppRole confers only functional privileges.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
app_id- The id of the App that defines this AppRole, which is granted to this App. The App that defines the AppRole acts as the producer; the App to which the AppRole is granted acts as a consumer.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
app_name- The name of the App that defines this AppRole, which is granted to this App. The App that defines the AppRole acts as the producer; the App to which the AppRole is granted acts as a consumer.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
display- The display-name of an AppRole that is granted to this App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
legacy_group_name- The name of the legacy group associated with this AppRole.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
read_only- If true, indicates that this value must be protected.Added In: 18.2.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: boolean
- uniqueness: none
ref- The URI of an AppRole that is granted to this App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
type- A label that indicates whether this AppRole was granted directly to the App (or indirectly through a Group). For an App, the value of this attribute will always be ‘direct’ (because an App cannot be a member of a Group).SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
value- The id of an AppRole that is granted to this App.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: true
- returned: default
- type: string
- uniqueness: none
grants- Grants assigned to the appSCIM++ Properties:
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none
grant_mechanism- Each value of grantMechanism indicates how (or by what component) some App (or App-Entitlement) was granted. A customer or the UI should use only grantMechanism values that start with ‘ADMINISTRATOR’:- ‘ADMINISTRATOR_TO_USER’ is for a direct grant to a specific User.
- ‘ADMINISTRATOR_TO_GROUP’ is for a grant to a specific Group, which results in indirect grants to Users who are members of that Group.
- ‘ADMINISTRATOR_TO_APP’ is for a grant to a specific App. The grantee (client) App gains access to the granted (server) App.
SCIM++ Properties: * caseExact: true * idcsSearchable: true * multiValued: false * mutability: readOnly * required: false * returned: default * type: string * uniqueness: none
grantee_id- Grantee identifierSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
grantee_type- Grantee resource type. Allowed values are User and Group.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- Grant URISCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Grant identifierSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
hashed_client_secret- Hashed Client Secret. This hash-value is used to verify the ‘clientSecret’ credential of this AppAdded In: 2106240046
SCIM++ Properties:
- idcsSearchable: false
- idcsSensitive: hash_sc
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: string
- uniqueness: none
home_page_url- Home Page URLAdded In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
icon- URL of application icon.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: reference
- uniqueness: none
id- Unique identifier for the SCIM Resource as defined by the Service Provider. Each representation of the Resource MUST include a non-empty id value. This identifier MUST be unique across the Service Provider’s entire set of Resources. It MUST be a stable, non-reassignable identifier that does not change when the same Resource is returned in subsequent requests. The value of the id attribute is always issued by the Service Provider and MUST never be specified by the Service Consumer. bulkId: is a reserved keyword and MUST NOT be used in the unique identifier.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: always
- type: string
- uniqueness: global
id_token_enc_algo- Encryption Alogrithm to use for encrypting ID token.Added In: 2010242156
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
idcs_created_by- The User or App who created the ResourceSCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readOnly
required: true
returned: default
type: complex
display- The displayName of the User or App who created this ResourceSCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ocid- The OCID of the SCIM resource that represents the User or App who created this ResourceSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- returned: default
- type: string
- uniqueness: none
ref- The URI of the SCIM resource that represents the User or App who created this ResourceSCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
type- The type of resource, User or App, that created this ResourceSCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
value- The ID of the SCIM resource that represents the User or App who created this ResourceSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: true
- returned: default
- type: string
- uniqueness: none
idcs_last_modified_by- The User or App who modified the ResourceSCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
display- The displayName of the User or App who modified this ResourceSCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ocid- The OCID of the SCIM resource that represents the User or App who modified this ResourceSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- returned: default
- type: string
- uniqueness: none
ref- The URI of the SCIM resource that represents the User or App who modified this ResourceSCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
type- The type of resource, User or App, that modified this ResourceSCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
value- The ID of the SCIM resource that represents the User or App who modified this ResourceSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: true
- returned: default
- type: string
- uniqueness: none
idcs_last_upgraded_in_release- The release number when the resource was upgraded.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: string
- uniqueness: none
idcs_prevented_operations- Each value of this attribute specifies an operation that only an internal client may perform on this particular resource.SCIM++ Properties:
- idcsSearchable: false
- multiValued: true
- mutability: readOnly
- required: false
- returned: request
- type: string
- uniqueness: none
identity_providers- A list of IdentityProvider assigned to app. A user trying to access this app will be automatically redirected to configured IdP during the authentication phase, before being able to access App.SCIM++ Properties:
idcsCompositeKey: [value]
idcsSearchable: false
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
display- Display-name of the IdentityProvider.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- URI of the IdentityProvider.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- ID of the IdentityProvider.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
idp_policy- IDP Policy.Added In: 18.1.2
SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
ref- URI of the policy.Added In: 18.1.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the Policy.Added In: 18.1.2
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
infrastructure- If true, this App is an internal infrastructure App.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_alias_app- If true, this App is an AliasApp and it cannot be granted to an end-user directly.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: always
- type: boolean
- uniqueness: none
is_database_service- If true, this application acts as database service ApplicationAdded In: 18.2.2
SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- type: boolean
is_enterprise_app- If true, this app acts as Enterprise app with Authentication and URL Authz policy.Added In: 19.2.1
SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_form_fill- If true, this application acts as FormFill ApplicationSCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_kerberos_realm- If true, indicates that this App supports Kerberos AuthenticationSCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_login_target- If true, this App allows runtime services to log end users into this App automatically.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_managed_app- If true, indicates that access to this App requires an account. That is, in order to log in to the App, a User must use an application-specific identity that is maintained in the remote identity-repository of that App.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_mobile_target- If true, indicates that the App should be visible in each end-user’s mobile application.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_multicloud_service_app- If true, indicates the app is used for multicloud service integration.Added In: 2301202328
SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_oauth_client- If true, this application acts as an OAuth ClientSCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_oauth_resource- If true, indicates that this application acts as an OAuth Resource.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_opc_service- If true, this application is an Oracle Public Cloud service-instance.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_obligation_capable- This flag indicates if the App is capable of validating obligations with the token for allowing access to the App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_radius_app- If true, this application acts as an Radius AppAdded In: 20.1.3
SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_saml_service_provider- If true, then this App acts as a SAML Service Provider.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_unmanaged_app- If true, indicates that this application accepts an Oracle Cloud Identity Service User as a login-identity (does not require an account) and relies for authorization on the User’s memberships in AppRoles.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_web_tier_policy- If true, the webtier policy is activeSCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
landing_page_url- The URL of the landing page for this App, which is the first page that an end user should see if runtime services log that end user in to this App automatically.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
linking_callback_url- This attribute specifies the callback URL for the social linking operation.Added In: 18.2.4
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
login_mechanism- The protocol that runtime services will use to log end users in to this App automatically. If ‘OIDC’, then runtime services use the OpenID Connect protocol. If ‘SAML’, then runtime services use Security Assertion Markup Language protocol.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
login_page_url- This attribute specifies the URL of the page that the App uses when an end-user signs in to that App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
logout_page_url- This attribute specifies the URL of the page that the App uses when an end-user signs out.Added In: 17.4.2
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
logout_uri- OAuth will use this URI to logout if this App wants to participate in SSO, and if this App’s session gets cleared as part of global logout. Note: This attribute is used only if this App acts as an OAuthClient.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
meta- A complex attribute that contains resource metadata. All sub-attributes are OPTIONAL.SCIM++ Properties:
caseExact: false
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
idcsCsvAttributeNameMappings: [[columnHeaderName:Created Date, mapsTo:meta.created]]
type: complex
created- The DateTime the Resource was added to the Service ProviderSCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: dateTime
- uniqueness: none
last_modified- The most recent DateTime that the details of this Resource were updated at the Service Provider. If this Resource has never been modified since its initial creation, the value MUST be the same as the value of created. The attribute MUST be a DateTime.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: dateTime
- uniqueness: none
location- The URI of the Resource being returned. This value MUST be the same as the Location HTTP response header.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
resource_type- Name of the resource type of the resource–for example, Users or GroupsSCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
version- The version of the Resource being returned. This value must be the same as the ETag HTTP response header.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
meter_as_opc_service- Indicates whether the application is billed as an OPCService. If true, customer is not billed for runtime operations of the app.Added In: 18.4.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: always
- type: boolean
- uniqueness: none
migrated- If true, this App was migrated from an earlier version of Oracle Public Cloud infrastructure (and may therefore require special handling from runtime services such as OAuth or SAML). If false, this App requires no special handling from runtime services.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
name- Name of the application. Also serves as username if the application authenticates to Oracle Public Cloud infrastructure. This name may not be user-friendly and cannot be changed once an App is created.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: string
- uniqueness: server
ocid- Unique Oracle Cloud Infrastructure identifier for the SCIM Resource.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: string
- uniqueness: global
post_logout_redirect_uris- Each value of this attribute is the URI of a landing page within this App. It is used only when this App, acting as an OAuthClient, initiates the logout flow and wants to be redirected back to one of its landing pages.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: true
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
privacy_policy_url- Privacy Policy URLAdded In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
product_logo_url- Application Logo URLAdded In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
product_name- Product NameAdded In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
protectable_secondary_audiences- A list of secondary audiences–additional URIs to be added automatically to any OAuth token that allows access to this App. Note: This attribute is used mainly for backward compatibility in certain Oracle Public Cloud Apps.Added In: 18.2.2
SCIM++ Properties:
caseExact: false
idcsCompositeKey: [value]
idcsSearchable: false
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
read_only- If true, indicates that this value must be protected.Added In: 18.2.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: boolean
- uniqueness: none
value- The value of an secondary audience–additional URI to be added automatically to any OAuth token that allows access to this App.Added In: 18.2.2
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
radius_policy- RADIUS Policy assigned to this application.Added In: 2209070044
SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
ref- URI of the policy.Added In: 2209070044
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the Policy.Added In: 2209070044
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
ready_to_upgrade- If true, this App requires an upgrade and mandates attention from application administrator. The flag is used by UI to indicate this app is ready to upgrade.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
redirect_uris- OPTIONAL. Each value is a URI within this App. This attribute is required when this App acts as an OAuthClient and is involved in three-legged flows (authorization-code flows).SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: true
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
refresh_token_expiry- Expiry-time in seconds for a Refresh Token. Any token that allows access to this App, once refreshed, will expire after the specified duration.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
saml_service_provider- An attribute that refers to the SAML Service Provider that runtime services will use to log an end user in to this App automatically. Note that this will be used only if the loginMechanism is ‘SAML’.SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
ref- The URI of the App that acts as a Service Provider.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- The id of the App that acts as a Service Provider.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: always
- type: string
- uniqueness: none
schemas- REQUIRED. The schemas attribute is an array of Strings which allows introspection of the supported schema version for a SCIM representation as well any schema extensions supported by that representation. Each String value must be a unique URI. This specification defines URIs for User, Group, and a standard \“enterprise\” extension. All representations of SCIM schema MUST include a non-zero value array with value(s) of the URIs supported by that representation. Duplicate values MUST NOT be included. Value order is not specified and MUST not impact behavior.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: true
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
scopes- Scopes defined by this App. Used when this App acts as an OAuth Resource.SCIM++ Properties:
caseExact: true
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
description- OAuth scope descriptionSCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
display_name- OAuth scope display nameAdded In: 19.2.1
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
fqs- The fully qualified value of this scope within this App. A fully qualified scope combines the ‘value’ of each scope with the value of ‘audience’. Each value of ‘fqs’ must be unique across the system. Used only when this App acts as an OAuth Resource.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: server
read_only- If true, indicates that this value must be protected.Added In: 18.2.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: boolean
- uniqueness: none
requires_consent- If true, indicates that a user must provide consent to access this scope. Note: Used only when this App acts as an OAuth Resource.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
value- OAuth scope.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
secondary_audiences- A list of secondary audiences–additional URIs to be added automatically to any OAuth token that allows access to this App. Note: This attribute is used mainly for backward compatibility in certain Oracle Public Cloud Apps.Deprecated Since: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: true
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
service_params- Custom attribute that is required to compute other attribute values during app creation.SCIM++ Properties:
idcsCompositeKey: [name]
idcsSearchable: false
multiValued: true
mutability: readWrite
required: false
returned: always
type: complex
uniqueness: none
name- The name of the attribute.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
value- The value of the attribute.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
service_type_urn- This Uniform Resource Name (URN) value identifies the type of Oracle Public Cloud service of which this app is an instance.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
service_type_version- This value specifies the version of the Oracle Public Cloud service of which this App is an instanceSCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
show_in_my_apps- If true, this app will be displayed in the MyApps page of each end-user who has access to the App.Added In: 18.1.2
SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
signon_policy- Sign-on Policy.Deprecated Since: 17.3.4
SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
ref- URI of the policy.Deprecated Since: 17.3.4
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the Policy.Deprecated Since: 17.3.4
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
tags- A list of tags on this resource.SCIM++ Properties:
idcsCompositeKey: [key, value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
uniqueness: none
key- Key or name of the tag.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
value- Value of the tag.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
tenancy_ocid- Oracle Cloud Infrastructure Tenant Id (ocid) in which the resource lives.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
terms_of_service_url- Terms of Service URLAdded In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
terms_of_use- Terms Of Use.Added In: 18.2.6
SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
name- Terms Of Use nameAdded In: 18.2.6
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: string
- uniqueness: none
ref- URI of the TermsOfUse.Added In: 18.2.6
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the TermsOfUseAdded In: 18.2.6
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
trust_policies- Trust Policies.SCIM++ Properties:
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
ref- URI of the policy.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the Policy.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
trust_scope- Indicates the scope of trust for this App when acting as an OAuthClient. A value of ‘Explicit’ indicates that the App is allowed to access only the scopes of OAuthResources that are explicitly specified as ‘allowedScopes’. A value of ‘Account’ indicates that the App is allowed implicitly to access any scope of any OAuthResource within the same Oracle Cloud Account. A value of ‘Tags’ indicates that the App is allowed to access any scope of any OAuthResource with a matching tag within the same Oracle Cloud Account. A value of ‘Default’ indicates that the Tenant default trust scope configured in the Tenant Settings is used.Added In: 17.4.2
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
urnietfparamsscimschemasoracleidcsextension_oci_tags- Oracle Cloud Infrastructure Tags.defined_tags- Oracle Cloud Infrastructure Defined TagsAdded In: 2011192329
SCIM++ Properties:
idcsCompositeKey: [namespace, key, value]
type: complex
idcsSearchable: true
required: false
mutability: readWrite
multiValued: true
returned: default
key- Oracle Cloud Infrastructure Tag keyAdded In: 2011192329
SCIM++ Properties:
- caseExact: false
- type: string
- required: true
- mutability: readWrite
- returned: default
- idcsSearchable: true
- uniqueness: none
namespace- Oracle Cloud Infrastructure Tag namespaceAdded In: 2011192329
SCIM++ Properties:
- caseExact: false
- type: string
- required: true
- mutability: readWrite
- returned: default
- idcsSearchable: true
- uniqueness: none
value- Oracle Cloud Infrastructure Tag valueAdded In: 2011192329
SCIM++ Properties:
- caseExact: false
- required: true
- idcsReturnEmptyWhenNull: true
- mutability: readWrite
- returned: default
- type: string
- idcsSearchable: true
- uniqueness: none
freeform_tags- Oracle Cloud Infrastructure Freeform TagsAdded In: 2011192329
SCIM++ Properties:
idcsCompositeKey: [key, value]
idcsSearchable: true
type: complex
required: false
mutability: readWrite
returned: default
multiValued: true
key- Oracle Cloud Infrastructure Tag keyAdded In: 2011192329
SCIM++ Properties:
- caseExact: false
- type: string
- required: true
- mutability: readWrite
- returned: default
- idcsSearchable: true
- uniqueness: none
value- Oracle Cloud Infrastructure Tag valueAdded In: 2011192329
SCIM++ Properties:
- caseExact: false
- required: true
- idcsReturnEmptyWhenNull: true
- mutability: readWrite
- returned: default
- type: string
- idcsSearchable: true
- uniqueness: none
tag_slug- Oracle Cloud Infrastructure Tag slugAdded In: 2011192329
SCIM++ Properties:
- type: binary
- mutability: readOnly
- returned: request
urnietfparamsscimschemasoracleidcsextensiondbcs_app- This extension provides attributes for database service facet of an Appdomain_app- Description:Added In: 18.2.2
SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
display- DB Domain App display nameAdded In: 18.2.2
SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: string
- uniqueness: none
ref- DB Domain App URIAdded In: 18.2.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- DB Domain App identifierAdded In: 18.2.2
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
domain_name- The name of the Enterprise Domain that contains any number of DBInstances. If specified, the value must be unique. A non-null value indicates that App represents a DBDomain. A value of null indicates that the App represents an DB-instance.Added In: 18.2.2
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: string
- uniqueness: server
urnietfparamsscimschemasoracleidcsextensionenterprise_app_app- This extension defines the Enterprise App related attributes.allow_authz_decision_ttl- Allow Authz policy decision expiry time in seconds.Added In: 19.2.1
SCIM++ Properties:
- idcsMaxValue: 3600
- idcsMinValue: 0
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
allow_authz_policy- Allow Authz Policy.Added In: 19.2.1
SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
ref- URI of the policy.Added In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the Policy.Added In: 19.2.1
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
app_resources- A list of AppResources of this App.Added In: 19.2.1
SCIM++ Properties:
caseExact: true
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
ref- The URI of an AppResource of this App.Added In: 19.2.1
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: reference
- uniqueness: none
value- The id of an AppResource of this App.Added In: 19.2.1
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
deny_authz_decision_ttl- Deny Authz policy decision expiry time in seconds.Added In: 19.2.1
SCIM++ Properties:
- idcsMaxValue: 3600
- idcsMinValue: 0
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
deny_authz_policy- Deny Authz Policy.Added In: 19.2.1
SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
ref- URI of the policy.Added In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Identifier of the Policy.Added In: 19.2.1
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
urnietfparamsscimschemasoracleidcsextensionform_fill_app_app- This extension provides attributes for Form-Fill facet of Appconfiguration- FormFill Application Configuration CLOB which has to be maintained in Form-Fill APP for legacy code to do Form-Fill injectionSCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
form_cred_method- Indicates how FormFill obtains the username and password of the account that FormFill will use to sign into the target App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
form_credential_sharing_group_id- Credential Sharing Group to which this form-fill application belongs.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
form_fill_url_match- A list of application-formURLs that FormFill should match against any formUrl that the user-specifies when signing in to the target service. Each item in the list also indicates how FormFill should interpret that formUrl.SCIM++ Properties:
idcsCompositeKey: [formUrl]
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
form_url- An application formUrl that FormFill will match against any formUrl that a User enters in trying to access the target-service which this App represents.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
form_url_match_type- Indicates how to interpret the value of ‘formUrl’ when matching against a user-specified formUrl. The system currently supports only ‘Exact’, which indicates that the value of ‘formUrl’ should be treated as a literal value.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
form_type- Type of the FormFill application like WebApplication, MainFrameApplication, WindowsApplication. Initially, we will support only WebApplication.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
reveal_password_on_form- If true, indicates that system is allowed to show the password in plain-text for this account after re-authentication.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
sync_from_template- If true, indicates that each of the Form-Fill-related attributes that can be inherited from the template actually will be inherited from the template. If false, indicates that the AppTemplate on which this App is based has disabled inheritance for these Form-Fill-related attributes.Added In: 17.4.2
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
user_name_form_expression- Indicates the custom expression, which can combine concat and substring operations with literals and with any attribute of the Oracle Identity Cloud Service UserSCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
user_name_form_template- Format for generating a username. This value can be Username or Email Address; any other value will be treated as a custom expression. A custom expression may combine ‘concat’ and ‘substring’ operations with literals and with any attribute of the Oracle Identity Cloud Service user.SCIM++ Properties:
- caseExact: false
- idcsPii: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
urnietfparamsscimschemasoracleidcsextensionform_fill_app_template_app_template- This extension provides attributes for Form-Fill facet of AppTemplateconfiguration- FormFill Application Configuration CLOB which has to be maintained in Form-Fill APP for legacy code to do Form-Fill injectionSCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
form_cred_method- Indicates how FormFill obtains the username and password of the account that FormFill will use to sign into the target App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
form_credential_sharing_group_id- Credential Sharing Group to which this form-fill application belongs.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
form_fill_url_match- A list of application-formURLs that FormFill should match against any formUrl that the user-specifies when signing in to the target service. Each item in the list also indicates how FormFill should interpret that formUrl.SCIM++ Properties:
idcsCompositeKey: [formUrl]
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
form_url- An application formUrl that FormFill will match against any formUrl that a User enters in trying to access the target-service which this App represents.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
form_url_match_type- Indicates how to interpret the value of ‘formUrl’ when matching against a user-specified formUrl. The system currently supports only ‘Exact’, which indicates that the value of ‘formUrl’ should be treated as a literal value.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
form_type- Type of the FormFill application like WebApplication, MainFrameApplication, WindowsApplication. Initially, we will support only WebApplication.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
reveal_password_on_form- If true, indicates that system is allowed to show the password in plain-text for this account after re-authentication.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
sync_from_template- If true, indicates that each of the Form-Fill-related attributes that can be inherited from the template actually will be inherited from the template. If false, indicates that the AppTemplate disabled inheritance for these Form-Fill-related attributes.Added In: 17.4.2
SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
user_name_form_expression- Indicates the custom expression, which can combine concat and substring operations with literals and with any attribute of the Oracle Identity Cloud Service UserSCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
user_name_form_template- Format for generating a username. This value can be Username or Email Address; any other value will be treated as a custom expression. A custom expression may combine ‘concat’ and ‘substring’ operations with literals and with any attribute of the Oracle Identity Cloud Service user.SCIM++ Properties:
- caseExact: false
- idcsPii: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
urnietfparamsscimschemasoracleidcsextensionkerberos_realm_app- Kerberos Realmdefault_encryption_salt_type- The type of salt that the system will use to encrypt Kerberos-specific artifacts of this App unless another type of salt is specified.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: string
- uniqueness: none
master_key- The primary key that the system should use to encrypt artifacts that are specific to this Kerberos realm – for example, to encrypt the Principal Key in each KerberosRealmUser.SCIM++ Properties:
- idcsSearchable: false
- idcsSensitive: none
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: string
- uniqueness: none
max_renewable_age- Max Renewable Age in secondsSCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: integer
- uniqueness: none
max_ticket_life- Max Ticket Life in secondsSCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: integer
- uniqueness: none
realm_name- The name of the Kerberos Realm that this App uses for authentication.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: string
- uniqueness: none
supported_encryption_salt_types- The types of salt that are available for the system to use when encrypting Kerberos-specific artifacts for this App.SCIM++ Properties:
- idcsSearchable: false
- multiValued: true
- mutability: readWrite
- required: false
- returned: request
- type: string
- uniqueness: none
ticket_flags- Ticket FlagsSCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: integer
- uniqueness: none
urnietfparamsscimschemasoracleidcsextensionmanagedapp_app- Managed Appaccount_form_visible- If true, then the account form will be displayed in the Oracle Identity Cloud Service UI to interactively create or update an account for this App. If a value is not specified for this attribute, a default value of \“false\” will be assumed as the value for this attribute.Added In: 18.4.2
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
admin_consent_granted- If true, admin has granted consent to perform managed app run-time operations.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
bundle_configuration_properties- ConnectorBundle configuration propertiesSCIM++ Properties:
idcsCompositeKey: [name]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
confidential- If true, this bundle configuration property value is confidential and will be encrypted in Oracle Identity Cloud Service. This attribute maps to \“isConfidential\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: boolean
- uniqueness: none
display_name- Display name of the bundle configuration property. This attribute maps to \“displayName\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
help_message- Help message of the bundle configuration property. This attribute maps to \“helpMessage\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
icf_type- ICF data type of the bundle configuration property. This attribute maps to \“type\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: string
- uniqueness: none
name- Name of the bundle configuration property. This attribute maps to \“name\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: string
- uniqueness: none
order- Display sequence of the bundle configuration property.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
required- If true, this bundle configuration property is required to connect to the target connected managed app. This attribute maps to \“isRequired\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: boolean
- uniqueness: none
value- Value of the bundle configuration property. This attribute maps to \“value\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- idcsSensitive: encrypt
- multiValued: true
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
bundle_pool_configuration- Configurable options maintaining a pool of ICF connector instances. Values for sub attributes can be set only if the ConnectorBundle referenced in the App has connectorPoolingSupported set to trueSCIM++ Properties:
idcsSearchable: false
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
max_idle- Maximum number of connector instances in the pool that are idle and active.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
max_objects- Maximum number of connector instances in the pool that are idle and active.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
max_wait- Maximum time (in milliseconds) to wait for a free connector instance to become available before failing.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
min_evictable_idle_time_millis- Minimum time (in milliseconds) to wait before evicting an idle conenctor instance from the pool.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
min_idle- Minimum number of idle connector instances in the pool.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
can_be_authoritative- If true, the managed app can be authoritative.Added In: 17.4.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
connected- If true, the accounts of the application are managed through an ICF connector bundleSCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
connector_bundle- ConnectorBundleSCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none
display- ConnectorBundle display nameSCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- ConnectorBundle URISCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
type- Connector Bundle type. Allowed values are ConnectorBundle, LocalConnectorBundle.Added In: 20.1.3
SCIM++ Properties:
- caseExact: true
- idcsDefaultValue: ConnectorBundle
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: string
- uniqueness: none
value- ConnectorBundle identifierSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: string
- uniqueness: none
well_known_id- Unique Well-known identifier used to reference connector bundle.Added In: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: string
- uniqueness: none
enable_auth_sync_new_user_notification- If true, send activation email to new users created from authoritative sync.Added In: 19.2.1
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
enable_sync- If true, sync run-time operations are enabled for this App.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
enable_sync_summary_report_notification- If true, send sync summary as notification upon job completion.Added In: 20.1.3
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
flat_file_bundle_configuration_properties- Flat file connector bundle configuration propertiesSCIM++ Properties:
idcsCompositeKey: [name]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
confidential- If true, this flatfile bundle configuration property value is confidential and will be encrypted in Oracle Identity Cloud Service. This attribute maps to \“isConfidential\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: boolean
- uniqueness: none
display_name- Display name of the flatfile bundle configuration property. This attribute maps to \“displayName\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
help_message- Help message of the flatfile bundle configuration property. This attribute maps to \“helpMessage\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
icf_type- ICF data type of flatfile the bundle configuration property. This attribute maps to \“type\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: string
- uniqueness: none
name- Name of the flatfile bundle configuration property. This attribute maps to \“name\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: string
- uniqueness: none
order- Display sequence of the bundle configuration property.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: integer
- uniqueness: none
required- If true, this flatfile bundle configuration property is required to connect to the target connected managed app. This attribute maps to \“isRequired\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: boolean
- uniqueness: none
value- Value of the flatfile bundle configuration property. This attribute maps to \“value\” attribute in \“ConfigurationProperty\” in ICF.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- idcsSensitive: encrypt
- multiValued: true
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
flat_file_connector_bundle- Flat file connector bundle to sync from a flat file.SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
display- ConnectorBundle display nameSCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- ConnectorBundle URISCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- ConnectorBundle identifierSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
well_known_id- Unique well-known identifier used to reference connector bundle.Added In: 19.1.4
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: string
- uniqueness: none
identity_bridges- IdentityBridges associated with this AppAdded In: 19.1.4
SCIM++ Properties:
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
uniqueness: none
name- Name of the IdentityBridge associated with the App.Added In: 19.1.4
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- The URI of the IdentityBridge associated with the App.Added In: 19.1.4
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- The Id of the IdentityBridge associated with the App.Added In: 19.1.4
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: always
- type: string
- uniqueness: none
is_authoritative- If true, sync from the managed app will be performed as authoritative sync.Added In: 17.4.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_directory- If true, the managed app is a directory.Added In: 19.1.4
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_on_premise_app- If true, the managed app is an On-Premise app.Added In: 19.1.4
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_schema_customization_supported- If true, the managed app supports schema customization.Added In: 19.1.4
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_schema_discovery_supported- If true, the managed app supports schema discovery.Added In: 19.1.4
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_three_legged_oauth_enabled- If true, the managed app requires 3-legged OAuth for authorization.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
is_two_legged_oauth_enabled- If true, indicates that Oracle Identity Cloud Service can use two-legged OAuth to connect to this ManagedApp.Added In: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: boolean
- uniqueness: none
object_classes- Object classesSCIM++ Properties:
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none
display- Object class display nameSCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
is_account_object_class- If true, the object class represents an account. The isAccountObjectClass attribute value ‘true’ MUST appear no more than once.SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: boolean
- uniqueness: none
ref- Object class URISCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
resource_type- Object class resource typeSCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
type- Object Class type. Allowed values are AccountObjectClass, ManagedObjectClass.Added In: 18.1.6
SCIM++ Properties:
- caseExact: true
- idcsDefaultValue: AccountObjectClass
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: string
- uniqueness: none
value- Object class template identifierSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: true
- returned: default
- type: string
- uniqueness: none
sync_config_last_modified- The most recent DateTime that the configuration of this App was updated. AppServices updates this timestamp whenever AppServices updates an App’s configuration with respect to synchronization.Added In: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: dateTime
- uniqueness: none
three_legged_oauth_credential- The value of this attribute persists any OAuth access token that the system uses to connect to this ManagedApp. The system obtains this access token using an OAuth protocol flow that could be two-legged or three-legged. A two-legged flow involves only the requester and the server. A three-legged flow also requires the consent of a user – in this case the consent of an administrator.SCIM++ Properties:
idcsSearchable: true
multiValued: false
mutability: readWrite
required: false
returned: default
type: complex
access_token- Access TokenSCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- idcsSensitive: encrypt
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
access_token_expiry- Access token expirySCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: dateTime
- uniqueness: none
refresh_token- Refresh TokenSCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- idcsSensitive: encrypt
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
three_legged_oauth_provider_name- Three legged OAuth provider name in Oracle Identity Cloud Service.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
urnietfparamsscimschemasoracleidcsextensionmulticloud_service_app_app- This extension defines attributes specific to Apps that represent instances of Multicloud Service Appmulticloud_platform_url- The multicloud platform service URL which the application will invoke for runtime operations such as AWSCredentials api invocationAdded In: 2301202328
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: immutable
- required: false
- returned: request
- type: string
- uniqueness: none
multicloud_service_type- Specifies the service type for which the application is configured for multicloud integration. For applicable external service types, app will invoke multicloud service for runtime operationsAdded In: 2301202328
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: immutable
- required: true
- returned: request
- type: string
- uniqueness: none
urnietfparamsscimschemasoracleidcsextensionopc_service_app- This extension defines attributes specific to Apps that represent instances of an Oracle Public Cloud (OPC) service.current_federation_mode- Current Federation ModeAdded In: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: string
current_synchronization_mode- Current Synchronization ModeAdded In: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: string
enabling_next_fed_sync_modes- If true, indicates that enablement is in progress started but not completedAdded In: 18.2.6
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: boolean
next_federation_mode- Next Federation ModeAdded In: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: string
next_synchronization_mode- Next Synchronization ModeAdded In: 18.2.6
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: string
region- This value identifies the OPC region in which the service is running.Added In: 19.1.4
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: request
- type: string
- uniqueness: none
service_instance_identifier- This value specifies the unique identifier assigned to an instance of an Oracle Public Cloud service app.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: immutable
- required: false
- returned: default
- type: string
- uniqueness: server
urnietfparamsscimschemasoracleidcsextensionradius_app_app- This extension defines attributes specific to Apps that represent instances of Radius App.capture_client_ip- If true, capture the client IP address from the RADIUS request packet. IP Address is used for auditing, policy-evaluation and country-code calculation.Added In: 2205120021
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
client_ip- This is the IP address of the RADIUS Client like Oracle Database server. It can be only IP address and not hostname.Added In: 20.1.3
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
country_code_response_attribute_id- Vendor-specific identifier of the attribute in the RADIUS response that will contain the end-user’s country code. This is an integer-value in the range 1 to 255Added In: 2205120021
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
end_user_ip_attribute- The name of the attribute that contains the Internet Protocol address of the end-user.Added In: 2205120021
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
group_membership_radius_attribute- RADIUS attribute that RADIUS-enabled system uses to pass the group membershipAdded In: 20.1.3
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
group_membership_to_return- In a successful authentication response, Oracle Identity Cloud Service will pass user’s group information restricted to groups persisted in this attribute, in the specified RADIUS attribute.Added In: 20.1.3
SCIM++ Properties:
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: true
mutability: readWrite
required: false
returned: request
type: complex
uniqueness: none
display- A human readable name, primarily used for display purposes. READ-ONLY.Added In: 20.1.3
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- The URI of the corresponding Group resource to which the user belongsAdded In: 20.1.3
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- The identifier of the User’s group.Added In: 20.1.3
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: always
- type: string
- uniqueness: none
group_name_format- Configure the groupNameFormat based on vendor in order to pass it to RADIUS infraAdded In: 20.1.3
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
include_group_in_response- Indicates to include groups in RADIUS responseAdded In: 20.1.3
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: boolean
password_and_otp_together- Indicates if password and OTP are passed in the same sign-in request or not.Added In: 2205120021
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
port- This is the port of RADIUS Proxy which RADIUS client will connect to.Added In: 20.1.3
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
radius_vendor_specific_id- ID used to identify a particular vendor.Added In: 2205120021
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
response_format- Configure the responseFormat based on vendor in order to pass it to RADIUS infraAdded In: 20.1.3
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
response_format_delimiter- The delimiter used if group membership responseFormat is a delimited list instead of repeating attributesAdded In: 20.1.3
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
secret_key- Secret key used to secure communication between RADIUS Proxy and RADIUS clientAdded In: 20.1.3
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
type_of_radius_app- Value consists of type of RADIUS App. Type can be Oracle Database, VPN etcAdded In: 2205120021
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
urnietfparamsscimschemasoracleidcsextensionrequestable_app- Requestable Apprequestable- Flag controlling whether resource can be request by user through self service console.Added In: 17.3.4
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: boolean
- uniqueness: none
urnietfparamsscimschemasoracleidcsextensionsaml_service_provider_app- This extension defines attributes related to the Service Providers configuration.assertion_consumer_url- The attribute represents the URL to which the SAML Assertions will be sent by the SAML IdP.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
encrypt_assertion- If true, indicates that the system must encrypt the Security Assertion Markup Language (SAML) assertion.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
encryption_algorithm- This attribute indicates the encryption algorithm used to encrypt the SAML assertion.SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
encryption_certificate- This attribute represents the encryption certificate that an App uses to encrypt the Security Assertion Markup Language (SAML) assertion.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
federation_protocol- Specifies the preferred federation protocol (SAML2.0 or WS-Fed1.1).Added In: 18.2.6
SCIM++ Properties:
- caseExact: true
- idcsDefaultValue: SAML2.0
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
group_assertion_attributes- Each value of this attribute describes an attribute of Group that will be sent in a Security Assertion Markup Language (SAML) assertion.Deprecated Since: 18.2.2
SCIM++ Properties:
caseExact: false
idcsCompositeKey: [name]
idcsSearchable: false
idcsValuePersistedInOtherAttribute: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
condition- Indicates the filter types that are supported for the Group assertion attributes.Deprecated Since: 18.2.2
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- idcsValuePersistedInOtherAttribute: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
format- Indicates the format of the assertion attribute.Deprecated Since: 18.2.2
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- idcsValuePersistedInOtherAttribute: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
group_name- Indicates the group name that are supported for the group assertion attributes.Deprecated Since: 18.2.2
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- idcsValuePersistedInOtherAttribute: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
name- The attribute represents the name of the attribute that will be used in the Security Assertion Markup Language (SAML) assertionDeprecated Since: 18.2.2
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- idcsValuePersistedInOtherAttribute: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
hok_acs_url- Hok Assertion Consumer Service UrlAdded In: 2101262133
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
hok_required- If enabled, then the SAML Service supports Hok for this App.Added In: 2101262133
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
include_signing_cert_in_signature- If true, then the signing certificate is included in the signature.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
key_encryption_algorithm- This attribute indicates the key encryption algorithm.Added In: 18.4.2
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
last_notification_sent_time- Records the notification timestamp for the SP whose signing certificate is about to expire.Added In: 2302092332
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: dateTime
- uniqueness: none
logout_binding- This attribute represents the HTTP binding that would be used while logout.SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
logout_enabled- If true, then the SAML Service supports logout for this App.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
logout_request_url- The URL to which the partner sends the logout request.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
logout_response_url- The URL to which the partner sends the logout response.SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
metadata- This attribute represents the metadata of a Security Provider in the Security Assertion Markup Language protocol.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
name_id_format- This can be any string, but there are a set of standard nameIdFormats. If a nameIdFormat other than the standard list is chosen, it will be considered a custom nameidformat. The standard nameidformats include: saml-x509, saml-emailaddress, saml-windowsnamequalifier, saml-kerberos, saml-persistent, saml-transient, saml-unspecified, saml-none, and saml-persistent-opaque.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
name_id_userstore_attribute- Deprecated Since: 18.2.2SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- idcsValuePersistedInOtherAttribute: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none This property specifies which user attribute is used as the NameID value in the SAML assertion. This attribute can be constructed by using attributes from the Oracle Identity Cloud Service Core Users schema.
outbound_assertion_attributes- Use to construct the outgoing SAML attributesAdded In: 18.2.6
SCIM++ Properties:
caseExact: false
idcsCompositeKey: [value]
idcsSearchable: true
multiValued: false
mutability: readOnly
required: false
returned: default
type: complex
uniqueness: none
direction- Mapped Attribute DirectionAdded In: 18.2.6
SCIM++ Properties:
- idcsSearchable: true
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- Mapped Attribute URIAdded In: 18.2.6
SCIM++ Properties:
- idcsSearchable: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- Mapped Attribute identifierAdded In: 18.2.6
SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- mutability: readOnly
- required: true
- returned: default
- type: string
- uniqueness: none
partner_provider_id- The ID of the Provider. This value corresponds to the entityID from the Service Provider metadata.SCIM++ Properties:
- caseExact: false
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
partner_provider_pattern- The pattern of the Provider. This value corresponds to the entityID from the Service Provider metadata.Added In: 2202230830
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: string
- uniqueness: none
sign_response_or_assertion- Indicates which part of the response should be signed. A value of \“Assertion\” indicates that the Assertion should be signed. A value of \“Response\” indicates that the SSO Response should be signed. A value of \“AssertionAndResponse\” indicates that both the Assertion and the SSO Response should be signed.SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
signature_hash_algorithm- This attribute represents the algorithm used to hash the signature.SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
signing_certificate- This attribute represents the signing certificate that an App uses to verify the signed authentication request.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
succinct_id- This attribute represents the Succinct ID.SCIM++ Properties:
- caseExact: true
- idcsSearchable: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: server
tenant_provider_id- The alternate Provider ID to be used as the Oracle Identity Cloud Service providerID (instead of the one in SamlSettings) when interacting with this SP.Added In: 19.2.1
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
user_assertion_attributes- Each value of this attribute describes an attribute of User that will be sent in a Security Assertion Markup Language (SAML) assertion.Deprecated Since: 18.2.2
SCIM++ Properties:
caseExact: false
idcsCompositeKey: [name]
idcsSearchable: false
idcsValuePersistedInOtherAttribute: true
multiValued: true
mutability: readWrite
required: false
returned: default
type: complex
uniqueness: none
format- Indicates the format of the assertion attribute.Deprecated Since: 18.2.2
SCIM++ Properties:
- caseExact: true
- idcsSearchable: false
- idcsValuePersistedInOtherAttribute: true
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
name- The attribute represents the name of the attribute that will be used in the Security Assertion Markup Language (SAML) assertionDeprecated Since: 18.2.2
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- idcsValuePersistedInOtherAttribute: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
user_store_attribute_name- This attribute specifies which user attribute should be used to create the value of the SAML assertion attribute. The userstore attribute can be constructed by using attributes from the Oracle Identity Cloud Service Core Users schema.
Note: Attributes from extensions to the Core User schema are not supported in v1.0.Deprecated Since: 18.2.2
SCIM++ Properties:
- caseExact: false
- idcsSearchable: false
- idcsValuePersistedInOtherAttribute: true
- multiValued: false
- mutability: readWrite
- required: true
- returned: default
- type: string
- uniqueness: none
urnietfparamsscimschemasoracleidcsextensionweb_tier_policy_app- WebTier Policyresource_ref- If this Attribute is true, resource ref id and resource ref name attributes will we included in wtp json response.Added In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: boolean
- uniqueness: none
web_tier_policy_az_control- Webtier policy AZ ControlAdded In: 19.2.1
SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: default
- type: string
- uniqueness: none
web_tier_policy_json- Store the web tier policy for an application as a string in Javascript Object Notification (JSON) format.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readWrite
- required: false
- returned: request
- type: string
- uniqueness: none
user_roles- A list of AppRoles defined by this UnmanagedApp. Membership in each of these AppRoles confers end-user privilege within this App.SCIM++ Properties:
idcsCompositeKey: [value]
idcsSearchable: false
multiValued: true
mutability: readOnly
required: false
returned: request
type: complex
description- The description of the AppRole.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
display- Display-name of the AppRole.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: string
- uniqueness: none
ref- URI of the AppRole.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: false
- returned: default
- type: reference
- uniqueness: none
value- ID of the AppRole.SCIM++ Properties:
- idcsSearchable: false
- multiValued: false
- mutability: readOnly
- required: true
- returned: default
- type: string
- uniqueness: none