yandex_organizationmanager_idp_application_oauth_application (Resource)
Written by
Updated at December 1, 2025
An OAuth application resource.
Example usage
//
// Create a new OrganizationManager Idp Application OAuth Application.
//
resource "yandex_organizationmanager_idp_application_oauth_application" "example_app" {
organization_id = "some_organization_id"
name = "example-oauth-app"
description = "Example OAuth application"
client_grant = {
client_id = "some_client_id"
authorized_scopes = ["openid", "profile", "email"]
}
group_claims_settings = {
group_distribution_type = "ALL_GROUPS"
}
labels = {
env = "production"
app = "example"
}
}
Schema
Required
name(String) Name of the application.
The name is unique within the organization. 3-63 characters long.organization_id(String) ID of the organization that the application belongs to.
Optional
application_id(String) ID of the OAuth application to return.
To get the OAuth application ID, make a [ApplicationService.List] request.client_grant(Attributes) Represents current connection to the OAuth client with specified scopes (see below for nested schema)description(String) Description of the application. 0-256 characters long.group_claims_settings(Attributes) Settings of the group claims (see below for nested schema)id(String) ID of the OAuth application to return.
To get the OAuth application ID, make a [ApplicationService.List] request.labels(Map of String) Resource labels askey:valuepairs.timeouts(Attributes) (see below for nested schema)
Read-Only
created_at(String) Creation timestamp.status(String) Current status of the application.updated_at(String) Modification timestamp.
Nested Schema for client_grant
Required:
client_id(String) OAuth client id
Optional:
authorized_scopes(List of String) List of authorized client scopes by the application
Nested Schema for group_claims_settings
Optional:
group_distribution_type(String) Represents current distribution type of the groups. I.e. which groups are visible for the application users.
Nested Schema for timeouts
Optional:
create(String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).delete(String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.read(String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.update(String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).