External Credential Input
- JSON example for creating an external credential (POST)
-
{ "developerName": "SampleAws", "masterLabel": "SampleAwsLabel", "authenticationProtocol": "AwsSv4", "authenticationProtocolVariant": "AwsSv4_STS", "parameters": [ { "parameterName": "AwsService", "parameterType": "AuthParameter", "parameterValue": "dynamodb" }, { "parameterName": "AwsRegion", "parameterType": "AuthParameter", "parameterValue": "us-west-2" }, { "parameterName": "AwsAccountId", "parameterType": "AuthParameter", "parameterValue": "sampleAccountId" }, { "parameterName": "AwsStsExternalId", "parameterType": "AuthProviderUrlQueryParameter", "parameterValue": "sampleExternalId" }, { "parameterName": "AwsStsDuration", "parameterType": "AuthProviderUrlQueryParameter", "parameterValue": "1000" } ], "principals": [ { "principalName": "SamplePrincipal", "principalType": "NamedPrincipal", "sequenceNumber": 1 } ], "customHeaders": [ { "headerName": "SampleHeader", "headerValue": "SampleHeaderValue", "sequenceNumber": 1 } ] }
- JSON example for updating an external credential (PUT)
-
{ "developerName": "SampleOAuth", "masterLabel": "SampleOAuthLabel", "authenticationProtocol": "OAuth", "authenticationProtocolVariant": "JwtBearer", "parameters": [ { "id": "0puxxxxxxxxxxxxxxx", "parameterName": "SigningCertificate", "parameterType": "SigningCertificate", "parameterValue": "SampleCertificate" }, { "parameterName": "AuthProviderUrl", "parameterType": "AuthProviderUrl", "parameterValue": "www.identityprovider.com" }, { "parameterDescription": "Expiration Time", "parameterName": "exp", "parameterType": "JwtBodyClaim", "parameterValue": "{!Text(FLOOR((NOW() - DATETIMEVALUE( \"1970-01-01 00:00:00\" )) * 86400 + 120))}" }, { "parameterName": "Scope", "parameterType": "AuthParameter", "parameterValue": "SampleScope" } ], "principals": [ { "principalName": "SamplePerUserPrincipal", "principalType": "PerUserPrincipal", "sequenceNumber": 1, "parameters": [ { "parameterName": "Scope", "parameterType": "AuthParameter", "parameterValue": "SamplePrincipalGroupScope" } ] } ], "customHeaders": [ { "headerName": "SampleHeader", "headerValue": "SampleHeaderValue", "sequenceNumber": 1 } ] }
- Properties
-
Name Type Description Required or Optional Available Version authenticationProtocol String Authentication protocol of the external credential. Values are: - AwsSv4
- Basic
- Custom
- Jwt
- OAuth
Required 58.0 authenticationProtocolVariant String Authentication protocol variant of the external credential. Values are: - AwsSv4_STS—AWS Signature Version 4 with Security Token Service.
- ClientCredentialsClientSecret—OAuth 2.0 Client Credentials client secret. Client secrets are sent in the callout’s request body.
- ClientCredentialsClientSecretBasic—OAuth 2.0 Client Credentials client secret. Client secrets are sent in the callout’s authorization header, as with Basic authentication.
- ClientCredentialsJwtAssertion—OAuth 2.0 Client Credentials JSON Web Token assertion.
- JwtBearer—OAuth 2.0 JSON Web Token bearer flow.
- NoAuthentication—No authentication.
- RolesAnywhere—AWS Signature Version 4 with Identity and Access Management (IAM) Roles Anywhere.
Optional 58.0 customHeaders Credential Custom Header Input[] List of credential custom headers. Optional 58.0 developerName String Fully qualified developer name of the external credential. Required for POST Optional for PUT
58.0 masterLabel String External credential label. Required 58.0 parameters External Credential Parameter Input[] List of external credential parameters. Optional depending on authenticationProtocol and authenticationVariant 58.0 principals External Credential Principal Input[] List of principals the credential has. Optional 58.0