stratumctl oidc-providers

Manage OIDC federation providers

stratumctl oidc-providers [flags]

Aliases: oidc-provider

Subcommands

• stratumctl oidc-providers create: Register a new OIDC provider
• stratumctl oidc-providers delete: Remove an OIDC provider. Idempotent.
• stratumctl oidc-providers get: Describe an OIDC provider
• stratumctl oidc-providers list: List registered OIDC providers
• stratumctl oidc-providers update: Update an OIDC provider (sparse PATCH; name is immutable)

stratumctl oidc-providers create

Register a new OIDC provider

stratumctl oidc-providers create [flags]

Examples

stratumctl oidc-providers create --name authentik --display-name "Sign in with Authentik" --issuer-url https://auth.example.com/application/o/stratum/ \
  --client-id stratum-console --client-secret-ref kv/data/oidc/authentik#client_secret

Flags

Flag	Type	Default	Description
--client-id	string		OAuth 2 client id at the IdP
--client-secret-ref	string		OpenBao ref: <mount>/data/<path>#<field>
--disable-jit	bool	false	Refuse unknown-email logins instead of JIT-creating users
--display-name	string		UI label (“Sign in with X”)
--issuer-url	string		IdP issuer URL
--name	string		Slug — appears in callback URL (immutable)
--scope	stringSlice		Scope to request (repeatable). Defaults to openid,email,profile.

stratumctl oidc-providers delete

Remove an OIDC provider. Idempotent.

stratumctl oidc-providers delete <id> [flags]

Examples

stratumctl oidc-providers delete oidcp-4k8m2x7q9a

stratumctl oidc-providers get

Describe an OIDC provider

stratumctl oidc-providers get <id> [flags]

Examples

stratumctl oidc-providers get oidcp-4k8m2x7q9a
stratumctl oidc-providers get oidcp-4k8m2x7q9a --output json

stratumctl oidc-providers list

List registered OIDC providers

stratumctl oidc-providers list [flags]

Examples

stratumctl oidc-providers list
stratumctl oidc-providers list --output json

stratumctl oidc-providers update

Update an OIDC provider (sparse PATCH; name is immutable)

stratumctl oidc-providers update <id> [flags]

Examples

stratumctl oidc-providers update oidcp-4k8m2x7q9a --display-name "Sign in with SSO"
stratumctl oidc-providers update oidcp-4k8m2x7q9a --state disabled

Flags

Flag	Type	Default	Description
--client-id	string		New client id
--client-secret-ref	string		New client secret OpenBao ref
--display-name	string		New display name
--issuer-url	string		New issuer URL
--state	string		New state: active|disabled