yandex_organizationmanager_idp_user (Resource)
Written by
Updated at February 12, 2026
A user in the Identity Provider system.
Users are created within a userpool and can authenticate to access cloud resources.
Each user has a unique identifier, credentials, and profile information.
Example usage
//
// Create a new OrganizationManager Idp User.
//
resource "yandex_organizationmanager_idp_user" "example_user" {
userpool_id = yandex_organizationmanager_idp_userpool.your_userpool.userpool_id
username = "example@your-domain.com"
full_name = "Test User"
given_name = "Test"
family_name = "User"
email = "test-userov@example.com"
is_active = true
password_spec = {
password = "secret-password"
}
}
Arguments & Attributes Reference
created_at(Read-Only) (String). Timestamp when the user was created.email(String). User's email address.external_id(String). External identifier for federation with external identity systems.
This ID can be used to link this user with an account in an external system.family_name(String). User's last name.
Part of the user's profile information.full_name(Required)(String). User's full name (display name).
This is typically shown in the UI and used for identification purposes.given_name(String). User's first name.
Part of the user's profile information.id(String). ID of the user to return.is_active(Bool). Whether the user is active. Default is true.password_hash[Block]. Password hash. Credentials type. Exactly one of credentials type must be specified.password_hash(Required)(String). The password hash string.password_hash_type(Required)(String). Type of the password hash.
password_spec[Block]. Password specification. Credentials type. Exactly one of credentials type must be specified.generation_proof(String). Proof that the password was generated by the system.password(Required)(String). The password string.
phone_number(String). User's phone number.status(Read-Only) (String). Current status of the user.
Determines whether the user can authenticate and access the system.updated_at(Read-Only) (String). Timestamp when the user was last updated.user_id(String). ID of the user to return.username(Required)(String). Username used for authentication.
Usually in the format of an email address.userpool_id(Required)(String). ID of the userpool this user belongs to.
To get the userpool ID, make a [UserpoolService.List] request.