Skip to content

identity-provider create jwtauth

qlik identity-provider create jwtauth

Create a new IdP

Synopsis

Creates a new IdP on a tenant. Requesting user must be assigned the TenantAdmin role. For non-interactive IdPs (e.g. JWT), IdP must be created by sending options payload. For interactive IdPs (e.g. SAML or OIDC), send pendingOptions payload to require the interactive verification step; or send options payload with skipVerify set to true to skip validation step and make IdP immediately available.

qlik identity-provider create jwtauth [flags]

Options

      --clockToleranceSec int       There can be clock skew between the IdP and Qlik's login server. In these cases, a tolerance can be set.
      --description string          Payload for creating an identity provider using JWT authentication.
  -f, --file string                 Reads request from a file
  -h, --help                        help for jwtauth
      --interval int                Duration in seconds to wait between retries, at least 1 (default 1)
      --options-issuer string       The JWT issuer.
      --options-staticKeys string   Keys for verifying JWTs. Limited to 1 key per identity provider. (JSON array)
                                    Array of JSON-objects with the fields:
                                      "kid" - Key ID used to sign the JWTs. (string)
                                      "pem" - Pem-encoded public key for verifying the JWTs. (string)
                                    Required fields: kid, pem
                                    Example value: [{"kid":"abc","pem":"abc"}] (default "[]")
      --protocol string             The protocol to be used for communicating with the identity provider.
      --provider string             The identity provider to be used.
  -q, --quiet                       Return only IDs from the command
      --raw                         Return original response from server without any processing
      --retry int                   Number of retries to do before failing, max 10
      --tenantIds strings           The tenant identifiers that map to the given IdP.

Options inherited from parent commands

  -c, --config string            path/to/config.yml where parameters can be set instead of on the command line
      --context string           Name of the context used when connecting to Qlik Associative Engine
      --headers stringToString   HTTP headers to use when connecting to Qlik Associative Engine (default [])
      --insecure                 Enabling insecure will make it possible to connect using self-signed certificates
      --json                     Returns output in JSON format, if possible. Disables verbose and traffic output
  -s, --server string            URL to Qlik Cloud or directly to a Qlik Associative Engine
      --server-type string       The type of server you are using: cloud, Windows (Enterprise on Windows) or engine
  -v, --verbose                  Log extra information
Was this page helpful?