You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/dyn/iap_v1.v1.html
+21Lines changed: 21 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -204,6 +204,13 @@ <h3>Method Details</h3>
204
204
"generateTroubleshootingUri": True or False, # Whether to generate a troubleshooting URL on access denied events to this application.
205
205
"remediationTokenGenerationEnabled": True or False, # Whether to generate remediation token on access denied events to this application.
206
206
},
207
+
"attributePropagationSettings": { # Configuration for propagating attributes to customer applications protected by IAP. These attributes may be SAML attributes from a 3rd party IdP, or potentially other sources in the future. # Settings to configure attribute propagation to customer application. These attributes may come from SAML/SessionStorage integration, or other sources in the future.
208
+
"enable": True or False, # Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
209
+
"expression": "A String", # Raw string CEL expression. Expression should be of the form attributes.saml_attributes.filter(attribute, attribute.name in [{attribute_list}]). An example expression to select the attributes "my_attr" and "other_attr": attributes.saml_attributes.filter(attribute, attribute.name in ["my_attr", "other_attr"])
210
+
"outputCredentials": [ # Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.
211
+
"A String",
212
+
],
213
+
},
207
214
"cookieDomain": "A String", # The Domain value to set for cookies generated by IAP. This value is not validated by the API, but will be ignored at runtime if invalid.
208
215
"csmSettings": { # Configuration for RCToken generated for service mesh workloads protected by IAP. RCToken are IAP generated JWTs that can be verified at the application. The RCToken is primarily used for service mesh deployments, and can be scoped to a single mesh by configuring the audience field accordingly. # Settings to configure IAP's behavior for a service mesh.
209
216
"rctokenAud": "A String", # Audience claim set in the generated RCToken. This value is not validated by IAP.
@@ -359,6 +366,13 @@ <h3>Method Details</h3>
359
366
"generateTroubleshootingUri": True or False, # Whether to generate a troubleshooting URL on access denied events to this application.
360
367
"remediationTokenGenerationEnabled": True or False, # Whether to generate remediation token on access denied events to this application.
361
368
},
369
+
"attributePropagationSettings": { # Configuration for propagating attributes to customer applications protected by IAP. These attributes may be SAML attributes from a 3rd party IdP, or potentially other sources in the future. # Settings to configure attribute propagation to customer application. These attributes may come from SAML/SessionStorage integration, or other sources in the future.
370
+
"enable": True or False, # Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
371
+
"expression": "A String", # Raw string CEL expression. Expression should be of the form attributes.saml_attributes.filter(attribute, attribute.name in [{attribute_list}]). An example expression to select the attributes "my_attr" and "other_attr": attributes.saml_attributes.filter(attribute, attribute.name in ["my_attr", "other_attr"])
372
+
"outputCredentials": [ # Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.
373
+
"A String",
374
+
],
375
+
},
362
376
"cookieDomain": "A String", # The Domain value to set for cookies generated by IAP. This value is not validated by the API, but will be ignored at runtime if invalid.
363
377
"csmSettings": { # Configuration for RCToken generated for service mesh workloads protected by IAP. RCToken are IAP generated JWTs that can be verified at the application. The RCToken is primarily used for service mesh deployments, and can be scoped to a single mesh by configuring the audience field accordingly. # Settings to configure IAP's behavior for a service mesh.
364
378
"rctokenAud": "A String", # Audience claim set in the generated RCToken. This value is not validated by IAP.
@@ -425,6 +439,13 @@ <h3>Method Details</h3>
425
439
"generateTroubleshootingUri": True or False, # Whether to generate a troubleshooting URL on access denied events to this application.
426
440
"remediationTokenGenerationEnabled": True or False, # Whether to generate remediation token on access denied events to this application.
427
441
},
442
+
"attributePropagationSettings": { # Configuration for propagating attributes to customer applications protected by IAP. These attributes may be SAML attributes from a 3rd party IdP, or potentially other sources in the future. # Settings to configure attribute propagation to customer application. These attributes may come from SAML/SessionStorage integration, or other sources in the future.
443
+
"enable": True or False, # Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
444
+
"expression": "A String", # Raw string CEL expression. Expression should be of the form attributes.saml_attributes.filter(attribute, attribute.name in [{attribute_list}]). An example expression to select the attributes "my_attr" and "other_attr": attributes.saml_attributes.filter(attribute, attribute.name in ["my_attr", "other_attr"])
445
+
"outputCredentials": [ # Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.
446
+
"A String",
447
+
],
448
+
},
428
449
"cookieDomain": "A String", # The Domain value to set for cookies generated by IAP. This value is not validated by the API, but will be ignored at runtime if invalid.
429
450
"csmSettings": { # Configuration for RCToken generated for service mesh workloads protected by IAP. RCToken are IAP generated JWTs that can be verified at the application. The RCToken is primarily used for service mesh deployments, and can be scoped to a single mesh by configuring the audience field accordingly. # Settings to configure IAP's behavior for a service mesh.
430
451
"rctokenAud": "A String", # Audience claim set in the generated RCToken. This value is not validated by IAP.
Copy file name to clipboardExpand all lines: googleapiclient/discovery_cache/documents/iap.v1.json
+39-1Lines changed: 39 additions & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -652,7 +652,7 @@
652
652
}
653
653
}
654
654
},
655
-
"revision": "20220805",
655
+
"revision": "20220822",
656
656
"rootUrl": "https://iap.googleapis.com/",
657
657
"schemas": {
658
658
"AccessDeniedPageSettings": {
@@ -731,6 +731,10 @@
731
731
"$ref": "AccessDeniedPageSettings",
732
732
"description": "Customization for Access Denied page."
733
733
},
734
+
"attributePropagationSettings": {
735
+
"$ref": "AttributePropagationSettings",
736
+
"description": "Settings to configure attribute propagation to customer application. These attributes may come from SAML/SessionStorage integration, or other sources in the future."
737
+
},
734
738
"cookieDomain": {
735
739
"description": "The Domain value to set for cookies generated by IAP. This value is not validated by the API, but will be ignored at runtime if invalid.",
736
740
"type": "string"
@@ -742,6 +746,40 @@
742
746
},
743
747
"type": "object"
744
748
},
749
+
"AttributePropagationSettings": {
750
+
"description": "Configuration for propagating attributes to customer applications protected by IAP. These attributes may be SAML attributes from a 3rd party IdP, or potentially other sources in the future.",
751
+
"id": "AttributePropagationSettings",
752
+
"properties": {
753
+
"enable": {
754
+
"description": "Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.",
755
+
"type": "boolean"
756
+
},
757
+
"expression": {
758
+
"description": "Raw string CEL expression. Expression should be of the form attributes.saml_attributes.filter(attribute, attribute.name in [{attribute_list}]). An example expression to select the attributes \"my_attr\" and \"other_attr\": attributes.saml_attributes.filter(attribute, attribute.name in [\"my_attr\", \"other_attr\"])",
759
+
"type": "string"
760
+
},
761
+
"outputCredentials": {
762
+
"description": "Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.",
763
+
"items": {
764
+
"enum": [
765
+
"OUTPUT_CREDENTIALS_UNSPECIFIED",
766
+
"HEADER",
767
+
"JWT",
768
+
"RCTOKEN"
769
+
],
770
+
"enumDescriptions": [
771
+
"No output credential. This is unsupported in IAP, there must be an output credential.",
772
+
"Propagate attributes in the headers with \"x-goog-iap-attr-\" prefix.",
773
+
"Propagate attributes in the JWT of the form: \"additional_claims\": { \"my_attribute\": [\"value1\", \"value2\"] }",
774
+
"Propagate attributes in the RCToken of the form: \"additional_claims\": { \"my_attribute\": [\"value1\", \"value2\"] }"
775
+
],
776
+
"type": "string"
777
+
},
778
+
"type": "array"
779
+
}
780
+
},
781
+
"type": "object"
782
+
},
745
783
"Binding": {
746
784
"description": "Associates `members`, or principals, with a `role`.",
0 commit comments