HEX
Server: Apache/2.4.68 (Debian)
System: Linux as-cs-widget-demo-us-central1 6.1.0-44-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.164-1 (2026-03-09) x86_64
User: root (0)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: //lib/google-cloud-sdk/lib/surface/iam/workforce_pools/providers/update_oidc.yaml
# -*- coding: utf-8 -*- #
# Copyright 2021 Google LLC. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
- release_tracks: [ALPHA, BETA, GA]
  command_type: UPDATE
  help_text:
    brief: Update an OIDC workforce pool provider.
    description: Update an OIDC workforce pool provider.
    examples: |
      The following command updates the OIDC workforce pool provider with the ID
      `my-workforce-pool-provider` in the workforce pool `my-workforce-pool`. Explicit values for
      all required and optional parameters are provided:

        $ {command} my-workforce-pool-provider \
          --workforce-pool="my-workforce-pool" \
          --location="global" \
          --display-name="My Workforce Pool Provider" \
          --description="My workforce pool provider description." \
          --disabled \
          --detailed-audit-logging \
          --attribute-mapping="google.subject=assertion.sub" \
          --attribute-condition="true" \
          --client-id="client-id" \
          --client-secret-value="client-secret" \
          --issuer-uri="https://test-idp.com" \
          --web-sso-response-type="code" \
          --web-sso-assertion-claims-behavior="merge-user-info-over-id-token-claims" \
          --web-sso-additional-scopes="groups,photos"
          --jwk-json-path="path/to/jwk.json"

  request:
    collection: iam.locations.workforcePools.providers
    modify_request_hooks:
    - googlecloudsdk.command_lib.iam.hooks:AddClearableExtraAttributesConfigToRequest
    - googlecloudsdk.command_lib.iam.hooks:AddExtraAttributesConfigFieldMask
    - googlecloudsdk.command_lib.iam.hooks:AddClearableExtendedAttributesConfigToRequest
    - googlecloudsdk.command_lib.iam.hooks:AddExtendedAttributesConfigFieldMask

  arguments:
    resource:
      help_text: The workforce pool provider to update.
      spec: !REF googlecloudsdk.command_lib.iam.resources:workforce_pool_provider
      is_positional: true

    params:
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.display_name
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.description
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.disabled
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.detailed_audit_logging
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.attribute_mapping
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.attribute_condition
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.oidc_issuer_uri
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.oidc_client_id
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.oidc_clearable_client_secret
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.oidc_web_sso_response_type
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.oidc_web_sso_assertion_claims_behavior
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.oidc_web_sso_additional_scopes
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.oidc_jwks_json_path
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.scim_usage
    - _REF_: googlecloudsdk.command_lib.iam.flags:workforce_pool_provider.attribute_sync_interval
      hidden: true
    additional_arguments_hook: googlecloudsdk.command_lib.iam.workforce_pools.flags:AddClearableExtraAndExtendedAttributesOAuth2Client

  async:
    collection: iam.locations.workforcePools.providers.operations