https://silo.pgsty.com/developers/security-token-service/Recent content in Security Token Service (STS) on SILOHugoenhttps://silo.pgsty.com/developers/security-token-service/AssumeRoleWithCustomToken/Mon, 01 Jan 0001 00:00:00 +0000https://silo.pgsty.com/developers/security-token-service/AssumeRoleWithCustomToken/<p><a id="assumerolewithcustomtoken"></a> <a id="minio-sts-assumerolewithcustomtoken"></a></p> <p>The MinIO Security Token Service (STS) <code>AssumeRoleWithCustomToken</code> API endpoint generates a token for use with the <a href="https://silo.pgsty.com/administration/identity-access-management/pluggable-authentication/#minio-external-identity-management-plugin">MinIO External Identity Management Plugin</a>.</p> <h2 id="request-endpoint">Request Endpoint</h2> <p>The <code>AssumeRoleWithCustomToken</code> endpoint has the following form:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">POST https://minio.example.net?Action<span class="o">=</span>AssumeRoleWithCustomToken<span class="o">[</span><span class="p">&amp;</span>ARGS<span class="o">]</span> </span></span></code></pre></div><p>The following example uses all supported arguments. Replace the <code>minio.example.net</code> hostname with the appropriate URL for your MinIO cluster:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">POST https://minio.example.net?Action<span class="o">=</span>AssumeRoleWithCustomToken </span></span><span class="line"><span class="cl"><span class="p">&amp;</span><span class="nv">Token</span><span class="o">=</span>TOKEN </span></span><span class="line"><span class="cl"><span class="p">&amp;</span><span class="nv">Version</span><span class="o">=</span>2011-06-15 </span></span><span class="line"><span class="cl"><span class="p">&amp;</span><span class="nv">DurationSeconds</span><span class="o">=</span><span class="m">86000</span> </span></span><span class="line"><span class="cl"><span class="p">&amp;</span><span class="nv">RoleArn</span><span class="o">=</span><span class="s2">&#34;external-auth-provider&#34;</span> </span></span></code></pre></div><h3 id="request-query-parameters">Request Query Parameters</h3> <p>This endpoint supports the following query parameters:</p> <table> <thead> <tr> <th><p>Parameter</p></th> <th><p>Type</p>https://silo.pgsty.com/developers/security-token-service/AssumeRoleWithLDAPIdentity/Mon, 01 Jan 0001 00:00:00 +0000https://silo.pgsty.com/developers/security-token-service/AssumeRoleWithLDAPIdentity/<p><a id="assumerolewithldapidentity"></a> <a id="minio-sts-assumerolewithldapidentity"></a></p> <p>The MinIO Security Token Service (STS) <code>AssumeRoleWithLDAPIdentity</code> API endpoint generates temporary access credentials using Active Directory or LDAP user credentials. This page documents the MinIO server <code>AssumeRoleWithLDAPIdentity</code> endpoint. For instructions on implementing STS using an S3-compatible SDK, defer to the documentation for that SDK.</p> <p>The MinIO STS <code>AssumeRoleWithLDAPIdentity</code> API endpoint is modeled after the AWS <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html">AssumeRoleWithWebIdentity</a> endpoint and shares certain request/response elements. This page documents the MinIO-specific syntax and links out to the AWS reference for all shared elements.</p>https://silo.pgsty.com/developers/security-token-service/AssumeRoleWithWebIdentity/Mon, 01 Jan 0001 00:00:00 +0000https://silo.pgsty.com/developers/security-token-service/AssumeRoleWithWebIdentity/<p><a id="assumerolewithwebidentity"></a> <a id="minio-sts-assumerolewithwebidentity"></a></p> <p>The MinIO Security Token Service (STS) <code>AssumeRoleWithWebIdentity</code> API endpoint generates temporary access credentials using a JSON Web Token (JWT) returned from a <a href="https://silo.pgsty.com/operations/external-iam/configure-openid-external-identity-management/#minio-external-identity-management-openid-configure">configured OpenID IDentity Provider (IDP)</a>. This page documents the MinIO server <code>AssumeRoleWithWebIdentity</code> endpoint. For instructions on implementing STS using an S3-compatible SDK, defer to the documentation for that SDK.</p> <p>The MinIO STS <code>AssumeRoleWithWebIdentity</code> API endpoint is modeled after the AWS <a href="https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html">AssumeRoleWithWebIdentity</a> endpoint and shares certain request/response elements. This page documents the MinIO-specific syntax and links out to the AWS reference for all shared elements.</p>