1. Packages
  2. Packages
  3. Selectel Provider
  4. API Docs
  5. IamOidcFederationGroupMappingsV1
Viewing docs for selectel 8.0.1
published on Thursday, May 28, 2026 by selectel
Viewing docs for selectel 8.0.1
published on Thursday, May 28, 2026 by selectel

    Manages OIDC federation group mappings for Selectel products using public API v1. Selectel products support Identity and Access Management (IAM). For more information about group mappings, see the official Selectel documentation.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as selectel from "@pulumi/selectel";
    
    const group1 = new selectel.IamGroupV1("group_1", {
        name: "Group name",
        roles: [{
            roleName: "reader",
            scope: "account",
        }],
    });
    const federation1 = new selectel.IamOidcFederationV1("federation_1", {
        name: "Federation name",
        description: "Federation description",
        issuer: "https://idp.example.com/realms/master",
        clientId: "my-client-id",
        clientSecret: "my-client-secret",
        authUrl: "https://idp.example.com/realms/master/protocol/openid-connect/auth",
        tokenUrl: "https://idp.example.com/realms/master/protocol/openid-connect/token",
        jwksUrl: "https://idp.example.com/realms/master/protocol/openid-connect/certs",
        sessionMaxAgeHours: 24,
    });
    const groupMappings1 = new selectel.IamOidcFederationGroupMappingsV1("group_mappings_1", {
        federationId: federation1.iamOidcFederationV1Id,
        groupMappings: [{
            internalGroupId: group1.iamGroupV1Id,
            externalGroupId: "external-group-1",
        }],
    });
    
    import pulumi
    import pulumi_selectel as selectel
    
    group1 = selectel.IamGroupV1("group_1",
        name="Group name",
        roles=[{
            "role_name": "reader",
            "scope": "account",
        }])
    federation1 = selectel.IamOidcFederationV1("federation_1",
        name="Federation name",
        description="Federation description",
        issuer="https://idp.example.com/realms/master",
        client_id="my-client-id",
        client_secret="my-client-secret",
        auth_url="https://idp.example.com/realms/master/protocol/openid-connect/auth",
        token_url="https://idp.example.com/realms/master/protocol/openid-connect/token",
        jwks_url="https://idp.example.com/realms/master/protocol/openid-connect/certs",
        session_max_age_hours=24)
    group_mappings1 = selectel.IamOidcFederationGroupMappingsV1("group_mappings_1",
        federation_id=federation1.iam_oidc_federation_v1_id,
        group_mappings=[{
            "internal_group_id": group1.iam_group_v1_id,
            "external_group_id": "external-group-1",
        }])
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/selectel/v8/selectel"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		group1, err := selectel.NewIamGroupV1(ctx, "group_1", &selectel.IamGroupV1Args{
    			Name: pulumi.String("Group name"),
    			Roles: selectel.IamGroupV1RoleArray{
    				&selectel.IamGroupV1RoleArgs{
    					RoleName: pulumi.String("reader"),
    					Scope:    pulumi.String("account"),
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		federation1, err := selectel.NewIamOidcFederationV1(ctx, "federation_1", &selectel.IamOidcFederationV1Args{
    			Name:               pulumi.String("Federation name"),
    			Description:        pulumi.String("Federation description"),
    			Issuer:             pulumi.String("https://idp.example.com/realms/master"),
    			ClientId:           pulumi.String("my-client-id"),
    			ClientSecret:       pulumi.String("my-client-secret"),
    			AuthUrl:            pulumi.String("https://idp.example.com/realms/master/protocol/openid-connect/auth"),
    			TokenUrl:           pulumi.String("https://idp.example.com/realms/master/protocol/openid-connect/token"),
    			JwksUrl:            pulumi.String("https://idp.example.com/realms/master/protocol/openid-connect/certs"),
    			SessionMaxAgeHours: pulumi.Float64(24),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = selectel.NewIamOidcFederationGroupMappingsV1(ctx, "group_mappings_1", &selectel.IamOidcFederationGroupMappingsV1Args{
    			FederationId: federation1.IamOidcFederationV1Id,
    			GroupMappings: selectel.IamOidcFederationGroupMappingsV1GroupMappingArray{
    				&selectel.IamOidcFederationGroupMappingsV1GroupMappingArgs{
    					InternalGroupId: group1.IamGroupV1Id,
    					ExternalGroupId: pulumi.String("external-group-1"),
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Selectel = Pulumi.Selectel;
    
    return await Deployment.RunAsync(() => 
    {
        var group1 = new Selectel.IamGroupV1("group_1", new()
        {
            Name = "Group name",
            Roles = new[]
            {
                new Selectel.Inputs.IamGroupV1RoleArgs
                {
                    RoleName = "reader",
                    Scope = "account",
                },
            },
        });
    
        var federation1 = new Selectel.IamOidcFederationV1("federation_1", new()
        {
            Name = "Federation name",
            Description = "Federation description",
            Issuer = "https://idp.example.com/realms/master",
            ClientId = "my-client-id",
            ClientSecret = "my-client-secret",
            AuthUrl = "https://idp.example.com/realms/master/protocol/openid-connect/auth",
            TokenUrl = "https://idp.example.com/realms/master/protocol/openid-connect/token",
            JwksUrl = "https://idp.example.com/realms/master/protocol/openid-connect/certs",
            SessionMaxAgeHours = 24,
        });
    
        var groupMappings1 = new Selectel.IamOidcFederationGroupMappingsV1("group_mappings_1", new()
        {
            FederationId = federation1.IamOidcFederationV1Id,
            GroupMappings = new[]
            {
                new Selectel.Inputs.IamOidcFederationGroupMappingsV1GroupMappingArgs
                {
                    InternalGroupId = group1.IamGroupV1Id,
                    ExternalGroupId = "external-group-1",
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.selectel.IamGroupV1;
    import com.pulumi.selectel.IamGroupV1Args;
    import com.pulumi.selectel.inputs.IamGroupV1RoleArgs;
    import com.pulumi.selectel.IamOidcFederationV1;
    import com.pulumi.selectel.IamOidcFederationV1Args;
    import com.pulumi.selectel.IamOidcFederationGroupMappingsV1;
    import com.pulumi.selectel.IamOidcFederationGroupMappingsV1Args;
    import com.pulumi.selectel.inputs.IamOidcFederationGroupMappingsV1GroupMappingArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var group1 = new IamGroupV1("group1", IamGroupV1Args.builder()
                .name("Group name")
                .roles(IamGroupV1RoleArgs.builder()
                    .roleName("reader")
                    .scope("account")
                    .build())
                .build());
    
            var federation1 = new IamOidcFederationV1("federation1", IamOidcFederationV1Args.builder()
                .name("Federation name")
                .description("Federation description")
                .issuer("https://idp.example.com/realms/master")
                .clientId("my-client-id")
                .clientSecret("my-client-secret")
                .authUrl("https://idp.example.com/realms/master/protocol/openid-connect/auth")
                .tokenUrl("https://idp.example.com/realms/master/protocol/openid-connect/token")
                .jwksUrl("https://idp.example.com/realms/master/protocol/openid-connect/certs")
                .sessionMaxAgeHours(24.0)
                .build());
    
            var groupMappings1 = new IamOidcFederationGroupMappingsV1("groupMappings1", IamOidcFederationGroupMappingsV1Args.builder()
                .federationId(federation1.iamOidcFederationV1Id())
                .groupMappings(IamOidcFederationGroupMappingsV1GroupMappingArgs.builder()
                    .internalGroupId(group1.iamGroupV1Id())
                    .externalGroupId("external-group-1")
                    .build())
                .build());
    
        }
    }
    
    resources:
      group1:
        type: selectel:IamGroupV1
        name: group_1
        properties:
          name: Group name
          roles:
            - roleName: reader
              scope: account
      federation1:
        type: selectel:IamOidcFederationV1
        name: federation_1
        properties:
          name: Federation name
          description: Federation description
          issuer: https://idp.example.com/realms/master
          clientId: my-client-id
          clientSecret: my-client-secret
          authUrl: https://idp.example.com/realms/master/protocol/openid-connect/auth
          tokenUrl: https://idp.example.com/realms/master/protocol/openid-connect/token
          jwksUrl: https://idp.example.com/realms/master/protocol/openid-connect/certs
          sessionMaxAgeHours: 24
      groupMappings1:
        type: selectel:IamOidcFederationGroupMappingsV1
        name: group_mappings_1
        properties:
          federationId: ${federation1.iamOidcFederationV1Id}
          groupMappings:
            - internalGroupId: ${group1.iamGroupV1Id}
              externalGroupId: external-group-1
    
    Example coming soon!
    

    Create IamOidcFederationGroupMappingsV1 Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IamOidcFederationGroupMappingsV1(name: string, args: IamOidcFederationGroupMappingsV1Args, opts?: CustomResourceOptions);
    @overload
    def IamOidcFederationGroupMappingsV1(resource_name: str,
                                         args: IamOidcFederationGroupMappingsV1Args,
                                         opts: Optional[ResourceOptions] = None)
    
    @overload
    def IamOidcFederationGroupMappingsV1(resource_name: str,
                                         opts: Optional[ResourceOptions] = None,
                                         federation_id: Optional[str] = None,
                                         group_mappings: Optional[Sequence[IamOidcFederationGroupMappingsV1GroupMappingArgs]] = None,
                                         iam_oidc_federation_group_mappings_v1_id: Optional[str] = None)
    func NewIamOidcFederationGroupMappingsV1(ctx *Context, name string, args IamOidcFederationGroupMappingsV1Args, opts ...ResourceOption) (*IamOidcFederationGroupMappingsV1, error)
    public IamOidcFederationGroupMappingsV1(string name, IamOidcFederationGroupMappingsV1Args args, CustomResourceOptions? opts = null)
    public IamOidcFederationGroupMappingsV1(String name, IamOidcFederationGroupMappingsV1Args args)
    public IamOidcFederationGroupMappingsV1(String name, IamOidcFederationGroupMappingsV1Args args, CustomResourceOptions options)
    
    type: selectel:IamOidcFederationGroupMappingsV1
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "selectel_iamoidcfederationgroupmappingsv1" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args IamOidcFederationGroupMappingsV1Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IamOidcFederationGroupMappingsV1Args
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IamOidcFederationGroupMappingsV1Args
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IamOidcFederationGroupMappingsV1Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IamOidcFederationGroupMappingsV1Args
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var iamOidcFederationGroupMappingsV1Resource = new Selectel.IamOidcFederationGroupMappingsV1("iamOidcFederationGroupMappingsV1Resource", new()
    {
        FederationId = "string",
        GroupMappings = new[]
        {
            new Selectel.Inputs.IamOidcFederationGroupMappingsV1GroupMappingArgs
            {
                ExternalGroupId = "string",
                InternalGroupId = "string",
            },
        },
        IamOidcFederationGroupMappingsV1Id = "string",
    });
    
    example, err := selectel.NewIamOidcFederationGroupMappingsV1(ctx, "iamOidcFederationGroupMappingsV1Resource", &selectel.IamOidcFederationGroupMappingsV1Args{
    	FederationId: pulumi.String("string"),
    	GroupMappings: selectel.IamOidcFederationGroupMappingsV1GroupMappingArray{
    		&selectel.IamOidcFederationGroupMappingsV1GroupMappingArgs{
    			ExternalGroupId: pulumi.String("string"),
    			InternalGroupId: pulumi.String("string"),
    		},
    	},
    	IamOidcFederationGroupMappingsV1Id: pulumi.String("string"),
    })
    
    resource "selectel_iamoidcfederationgroupmappingsv1" "iamOidcFederationGroupMappingsV1Resource" {
      federation_id = "string"
      group_mappings {
        external_group_id = "string"
        internal_group_id = "string"
      }
      iam_oidc_federation_group_mappings_v1_id = "string"
    }
    
    var iamOidcFederationGroupMappingsV1Resource = new IamOidcFederationGroupMappingsV1("iamOidcFederationGroupMappingsV1Resource", IamOidcFederationGroupMappingsV1Args.builder()
        .federationId("string")
        .groupMappings(IamOidcFederationGroupMappingsV1GroupMappingArgs.builder()
            .externalGroupId("string")
            .internalGroupId("string")
            .build())
        .iamOidcFederationGroupMappingsV1Id("string")
        .build());
    
    iam_oidc_federation_group_mappings_v1_resource = selectel.IamOidcFederationGroupMappingsV1("iamOidcFederationGroupMappingsV1Resource",
        federation_id="string",
        group_mappings=[{
            "external_group_id": "string",
            "internal_group_id": "string",
        }],
        iam_oidc_federation_group_mappings_v1_id="string")
    
    const iamOidcFederationGroupMappingsV1Resource = new selectel.IamOidcFederationGroupMappingsV1("iamOidcFederationGroupMappingsV1Resource", {
        federationId: "string",
        groupMappings: [{
            externalGroupId: "string",
            internalGroupId: "string",
        }],
        iamOidcFederationGroupMappingsV1Id: "string",
    });
    
    type: selectel:IamOidcFederationGroupMappingsV1
    properties:
        federationId: string
        groupMappings:
            - externalGroupId: string
              internalGroupId: string
        iamOidcFederationGroupMappingsV1Id: string
    

    IamOidcFederationGroupMappingsV1 Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IamOidcFederationGroupMappingsV1 resource accepts the following input properties:

    FederationId string
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    GroupMappings List<IamOidcFederationGroupMappingsV1GroupMapping>
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    IamOidcFederationGroupMappingsV1Id string
    Resource ID. Equals the federation_id value.
    FederationId string
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    GroupMappings []IamOidcFederationGroupMappingsV1GroupMappingArgs
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    IamOidcFederationGroupMappingsV1Id string
    Resource ID. Equals the federation_id value.
    federation_id string
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    group_mappings list(object)
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iam_oidc_federation_group_mappings_v1_id string
    Resource ID. Equals the federation_id value.
    federationId String
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    groupMappings List<IamOidcFederationGroupMappingsV1GroupMapping>
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iamOidcFederationGroupMappingsV1Id String
    Resource ID. Equals the federation_id value.
    federationId string
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    groupMappings IamOidcFederationGroupMappingsV1GroupMapping[]
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iamOidcFederationGroupMappingsV1Id string
    Resource ID. Equals the federation_id value.
    federation_id str
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    group_mappings Sequence[IamOidcFederationGroupMappingsV1GroupMappingArgs]
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iam_oidc_federation_group_mappings_v1_id str
    Resource ID. Equals the federation_id value.
    federationId String
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    groupMappings List<Property Map>
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iamOidcFederationGroupMappingsV1Id String
    Resource ID. Equals the federation_id value.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IamOidcFederationGroupMappingsV1 resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing IamOidcFederationGroupMappingsV1 Resource

    Get an existing IamOidcFederationGroupMappingsV1 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IamOidcFederationGroupMappingsV1State, opts?: CustomResourceOptions): IamOidcFederationGroupMappingsV1
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            federation_id: Optional[str] = None,
            group_mappings: Optional[Sequence[IamOidcFederationGroupMappingsV1GroupMappingArgs]] = None,
            iam_oidc_federation_group_mappings_v1_id: Optional[str] = None) -> IamOidcFederationGroupMappingsV1
    func GetIamOidcFederationGroupMappingsV1(ctx *Context, name string, id IDInput, state *IamOidcFederationGroupMappingsV1State, opts ...ResourceOption) (*IamOidcFederationGroupMappingsV1, error)
    public static IamOidcFederationGroupMappingsV1 Get(string name, Input<string> id, IamOidcFederationGroupMappingsV1State? state, CustomResourceOptions? opts = null)
    public static IamOidcFederationGroupMappingsV1 get(String name, Output<String> id, IamOidcFederationGroupMappingsV1State state, CustomResourceOptions options)
    resources:  _:    type: selectel:IamOidcFederationGroupMappingsV1    get:      id: ${id}
    import {
      to = selectel_iamoidcfederationgroupmappingsv1.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    FederationId string
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    GroupMappings List<IamOidcFederationGroupMappingsV1GroupMapping>
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    IamOidcFederationGroupMappingsV1Id string
    Resource ID. Equals the federation_id value.
    FederationId string
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    GroupMappings []IamOidcFederationGroupMappingsV1GroupMappingArgs
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    IamOidcFederationGroupMappingsV1Id string
    Resource ID. Equals the federation_id value.
    federation_id string
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    group_mappings list(object)
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iam_oidc_federation_group_mappings_v1_id string
    Resource ID. Equals the federation_id value.
    federationId String
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    groupMappings List<IamOidcFederationGroupMappingsV1GroupMapping>
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iamOidcFederationGroupMappingsV1Id String
    Resource ID. Equals the federation_id value.
    federationId string
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    groupMappings IamOidcFederationGroupMappingsV1GroupMapping[]
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iamOidcFederationGroupMappingsV1Id string
    Resource ID. Equals the federation_id value.
    federation_id str
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    group_mappings Sequence[IamOidcFederationGroupMappingsV1GroupMappingArgs]
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iam_oidc_federation_group_mappings_v1_id str
    Resource ID. Equals the federation_id value.
    federationId String
    Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.
    groupMappings List<Property Map>
    Defines mappings between internal IAM groups and external identity provider groups. You can add multiple mappings – each mapping in a separate block.
    iamOidcFederationGroupMappingsV1Id String
    Resource ID. Equals the federation_id value.

    Supporting Types

    IamOidcFederationGroupMappingsV1GroupMapping, IamOidcFederationGroupMappingsV1GroupMappingArgs

    ExternalGroupId string
    External identity provider group ID.
    InternalGroupId string
    Internal IAM group ID.
    ExternalGroupId string
    External identity provider group ID.
    InternalGroupId string
    Internal IAM group ID.
    external_group_id string
    External identity provider group ID.
    internal_group_id string
    Internal IAM group ID.
    externalGroupId String
    External identity provider group ID.
    internalGroupId String
    Internal IAM group ID.
    externalGroupId string
    External identity provider group ID.
    internalGroupId string
    Internal IAM group ID.
    external_group_id str
    External identity provider group ID.
    internal_group_id str
    Internal IAM group ID.
    externalGroupId String
    External identity provider group ID.
    internalGroupId String
    Internal IAM group ID.

    Import

    You can import OIDC Federation group mappings:

    export OS_DOMAIN_NAME=<account_id>

    export OS_USERNAME=

    export OS_PASSWORD=

    $ pulumi import selectel:index/iamOidcFederationGroupMappingsV1:IamOidcFederationGroupMappingsV1 group_mappings_1 <federation_id>
    

    where:

    • <account_id> — Selectel account ID. The account ID is in the top right corner of the Control panel. Learn more about Registration.

    • <username> — Name of the service user. To get the name, in the Control panel, go to Account ⟶ the Service users tab ⟶ copy the name of the required user. Learn more about Service Users.

    • <password> — Password of the service user.

    • <federation_id> — Unique identifier of the federation, for example, abc1bb378ac84e1234b869b77aadd2ab. To get the federation ID, in the Control Panel, go to AccountFederations → copy the ID under the federation name.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    selectel selectel/terraform-provider-selectel
    License
    Notes
    This Pulumi package is based on the selectel Terraform Provider.
    Viewing docs for selectel 8.0.1
    published on Thursday, May 28, 2026 by selectel

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial