Create a workload identity provider

curl -X POST https://api.mixlayer.com/v1/organizations/org_id/workload_identity/providers \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "attribute_transformations": {},
  "authorization_rules": [
    {
      "condition": "string",
      "permissions": [
        "inference"
      ]
    }
  ],
  "config": {
    "allowed_audiences": [
      "string"
    ],
    "issuer_uri": "string",
    "type": "oidc"
  },
  "name": "string"
}'

{
  "data": {
    "active": true,
    "attribute_transformations": {},
    "authorization_rules": [
      {
        "condition": "string",
        "permissions": [
          "inference"
        ]
      }
    ],
    "config": {
      "allowed_audiences": [
        "string"
      ],
      "issuer_uri": "string",
      "jwks": null,
      "type": "oidc"
    },
    "created_at": "2024-01-15T09:30:00Z",
    "id": "string",
    "name": "string",
    "organization_id": "string",
    "policy_revision": 1,
    "updated_at": "2024-01-15T09:30:00Z",
    "attribute_condition": "string"
  }
}

Requires an organization owner or an API key with api-admin.

Authentication

AuthorizationBearer

Console user session, Mixlayer API key, or Mixlayer workload access token supplied as a Bearer token.

Path parameters

org_idstringRequired

Organization ID

Request

This endpoint expects an object.

attribute_transformationsmap from strings to stringsRequired

CEL expressions mapping assertion values to normalized attributes.

authorization_ruleslist of objectsRequired

Ordered authorization rules ending in an unconditional fallback.

configobjectRequired

Provider-specific trust configuration.

namestringRequired

Human-readable provider name.

activeboolean or nullOptional

Defaults to active when omitted.

attribute_conditionstring or nullOptional

Optional CEL condition that admits or rejects the workload.

Response

Created workload identity provider

dataobject

Persisted organization-scoped workload identity provider.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

413

Content Too Large Error

415

Unsupported Media Type Error

422

Unprocessable Entity Error

500

Internal Server Error