Cloud IAM Update a Trusted Profile Claim Rule
A 3-step recipe with IBM. We can help you get access.
Recipe · 3 steps
Cloud IAM Update a Trusted Profile Claim Rule
with IBM · Identity & Access Management
Read a trusted profile's claim rule and update its conditions with optimistic concurrency.
- List every claim rule on the profile so the change is made with full sight of the other trust paths into this identity, not just the one being edited.
- Read the specific rule to capture its current conditions and entity tag. The existing conditions are what the update is diffed against by whoever reviews this change.
- Apply the updated realm, condition, and session expiration. The rule type is carried through from the read so a SAML rule is never accidentally converted into a compute resource rule, and If-Match ensures the rule has not shifted underneath
What you'll need to have ready
- profileId: The unique identifier of the trusted profile that owns the rule.
- ruleId: The unique identifier of the claim rule to update.
- claimName: The claim in the incoming token to test (e.g. "groups").
- claimValue: The value the claim must match for the profile to apply.
- claimOperator: How the claim value is compared.
- realmName: The updated realm name of the identity provider.
- ruleName: The updated name of the claim rule.
- sessionExpiration: Updated token session expiration in seconds.
For your developer
Arazzo workflow ibm:maintain-claim-rule, 3 operations: listClaimRules → getClaimRule → updateClaimRule. Specs on APIs.io.