OAuth-OIDC Identity Provider and Identity Pool Auditable Event Methods on Confluent Cloud

Auditable event methods for Confluent Cloud ORGANIZATION resources are triggered by actions, or operations, on an OAuth-OIDC (OpenID Connect) identity provider (IDENTITY_PROVIDER) or an identity pool (IDENTITY_POOL) in the same organization.

For details about identity providers, see Add an identity provider. For details about identity pools, see Use OAuth Identity Pools with Your OAuth/OIDC Identity Provider on Confluent Cloud.

Identity provider

An OAuth-OIDC identity provider (IDENTITY_PROVIDER) is an external identity service that supports the OAuth 2.0 and OIDC standards to establish trust with Confluent Cloud resources. An OAuth-OIDC identity provider can exist without an identity pool (IDENTITY_POOL). Identity pools assign access based on policies you create using pool filter expressions.

Method name	Action triggering an auditable event message
CreateIdentityProvider	A request to create an identity provider.
DeleteIdentityProvider	A request to delete an identity provider.
GetIdentityProvider	A request to get the details of an identity provider.
ListIdentityProvider	A request to get a list of identity providers.
RefreshIdentityProviderKeys	A user-initiated request to refresh the JWKS (JSON Web Key Set) keys for an identity provider.
ScheduledJwksRefresh	An automated scheduled refresh of JWKS keys for an identity provider.
UpdateIdentityProvider	A request to update an identity provider.

CreateIdentityProvider

The CreateIdentityProvider event is generated by a request to create an identity provider.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "53313aa8109a583e0ae800a57004c2eb"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"CreateIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"6a407325-7496-4291-8f37-8b58922470d6",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.159Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "53313aa8109a583e0ae800a57004c2eb"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"CreateIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
   "specversion":"1.0",
   "id":"6a407325-7496-4291-8f37-8b58922470d6",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.159Z",
   "type":"io.confluent.cloud/request"
}

DeleteIdentityProvider

The DeleteIdentityProvider event is generated by a request to delete an identity provider.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"DeleteIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"DeleteIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

GetIdentityProvider

The GetIdentityProvider event is generated by a request to get the details of an identity provider.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "bd2fb8f33296a97989216ba63d8fd811"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"GetIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"7daf1c81-4d9c-4f9b-914a-7686aa6e5875",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.435Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "bd2fb8f33296a97989216ba63d8fd811"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"GetIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"7daf1c81-4d9c-4f9b-914a-7686aa6e5875",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.435Z",
   "type":"io.confluent.cloud/request"
}

ListIdentityProvider

The ListIdentityProvider event is generated by a request to get a list of identity providers.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityProvider",
      "cloudResources":[
         {
            "resource":{
               "type":"ORGANIZATION",
               "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "2e3a74dda1b483a526174971a86b34c8"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"ListIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
   "specversion":"1.0",
   "id":"9c569e55-3e9d-4326-9948-a5e2962aab5f",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.673Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityProvider",
      "cloudResources":[
         {
            "resource":{
               "type":"ORGANIZATION",
               "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "2e3a74dda1b483a526174971a86b34c8"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"ListIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
   "specversion":"1.0",
   "id":"9c569e55-3e9d-4326-9948-a5e2962aab5f",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.673Z",
   "type":"io.confluent.cloud/request"
}

RefreshIdentityProviderKeys

The RefreshIdentityProviderKeys event is generated by a user-initiated request to refresh the JWKS (JSON Web Key Set) keys for an identity provider.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/service=trust-service",
      "internalServiceName":"crn://confluent.cloud/service=trust-service",
      "methodName":"RefreshIdentityProviderKeys",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"be46645f-b7b8-4fd2-9104-fd9a78d30c31"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-97dA"
            }
         }
      ],
      "authenticationInfo":{
         "exposure":"CUSTOMER",
         "principal":{
            "confluentUser":{
               "resourceId":"u-stgcdnx2md"
            }
         },
         "result":"SUCCESS",
         "identity":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=Confluent/identity=u-stgcdnx2md"
      },
      "requestMetadata":{
         "requestId":[
            "4f217750e64038fd4f4a033a1ecc8879"
         ],
         "clientAddress":[
            {
               "ip":"134.238.233.62"
            }
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"RefreshIdentityProviderKeys"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "serviceLocation":{

      }
   },
   "subject":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-97dA",
   "specversion":"1.0",
   "id":"9de0c265-b157-4e3f-82a2-e5f44e9140ad",
   "source":"crn://confluent.cloud/",
   "time":"2026-01-28T15:15:39.266706679Z",
   "type":"io.confluent.cloud/request",
   "dataschema":"https://confluent.io/internal/events/AuditLog.v2"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/service=trust-service",
      "internalServiceName":"crn://confluent.cloud/service=trust-service",
      "methodName":"RefreshIdentityProviderKeys",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"be46645f-b7b8-4fd2-9104-fd9a78d30c31"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-97dA"
            }
         }
      ],
      "authenticationInfo":{
         "exposure":"CUSTOMER",
         "principal":{
            "confluentUser":{
               "resourceId":"u-stgcdnx2md"
            }
         },
         "result":"SUCCESS",
         "identity":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=Confluent/identity=u-stgcdnx2md"
      },
      "requestMetadata":{
         "requestId":[
            "4f217750e64038fd4f4a033a1ecc8879"
         ],
         "clientAddress":[
            {
               "ip":"134.238.233.62"
            }
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"RefreshIdentityProviderKeys"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "serviceLocation":{

      }
   },
   "subject":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-97dA",
   "specversion":"1.0",
   "id":"9de0c265-b157-4e3f-82a2-e5f44e9140ad",
   "source":"crn://confluent.cloud/",
   "time":"2026-01-28T15:15:39.266706679Z",
   "type":"io.confluent.cloud/request",
   "dataschema":"https://confluent.io/internal/events/AuditLog.v2"
}

ScheduledJwksRefresh

The ScheduledJwksRefresh event is generated by an automated scheduled refresh of JWKS keys for an identity provider.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ScheduledJwksRefresh",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"be46645f-b7b8-4fd2-9104-fd9a78d30c31"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-Jnqr"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentServiceAccount":{
               "resourceId":"Confluent"
            }
         }
      },
      "requestMetadata":{
         "requestId":[
            "op-Jnqr | be46645f-b7b8-4fd2-9104-fd9a78d30c31 @ 2026-03-02T12:43:49.047911092"
         ]
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-Jnqr"
   },
   "subject":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-Jnqr",
   "specversion":"1.0",
   "id":"d00f3844-7b5c-46c2-a873-f563c5a69ce5",
   "source":"crn://confluent.cloud/",
   "time":"2026-03-02T12:43:49.047994784Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ScheduledJwksRefresh",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"be46645f-b7b8-4fd2-9104-fd9a78d30c31"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-Jnqr"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentServiceAccount":{
               "resourceId":"Confluent"
            }
         }
      },
      "requestMetadata":{
         "requestId":[
            "op-Jnqr | be46645f-b7b8-4fd2-9104-fd9a78d30c31 @ 2026-03-02T12:43:49.047911092"
         ]
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-Jnqr"
   },
   "subject":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-Jnqr",
   "specversion":"1.0",
   "id":"d00f3844-7b5c-46c2-a873-f563c5a69ce5",
   "source":"crn://confluent.cloud/",
   "time":"2026-03-02T12:43:49.047994784Z",
   "type":"io.confluent.cloud/request"
}

UpdateIdentityProvider

The UpdateIdentityProvider event is generated by a request to update an identity provider.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"UpdateIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"UpdateIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

Identity pool

An identity pool (IDENTITY_POOL) is a group of identities that you grant access to Confluent Cloud resources based on policies you create using pool filter expressions. An identity pool is associated with an identity provider.

Method name	Action triggering an auditable event message
CreateIdentityPool	A request to create an identity pool.
DeleteIdentityPool	A request to delete an identity pool.
GetIdentityPool	A request to get the details of an identity pool.
ListIdentityPool	A request to get a list of identity pools.
UpdateIdentityPool	A request to update an identity pool.

CreateIdentityPool

The CreateIdentityPool event is generated by a request to create an identity pool.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "60b6f72e84b00b77dc639ffd46959f60"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"CreateIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"f77b6a40-744f-4315-9088-ac7a586f326b",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.201Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "60b6f72e84b00b77dc639ffd46959f60"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"CreateIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"f77b6a40-744f-4315-9088-ac7a586f326b",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.201Z",
   "type":"io.confluent.cloud/request"
}

DeleteIdentityPool

The DeleteIdentityPool event is generated by a request to delete an identity pool.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"DeleteIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"DeleteIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

GetIdentityPool

The GetIdentityPool event is generated by a request to get the details of an identity pool.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "e53cd6b6f5ee8fb355d4260a5d5527ab"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"GetIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"e332d272-8839-4e48-ad1e-5b06b10cb66a",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.579Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "e53cd6b6f5ee8fb355d4260a5d5527ab"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"GetIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"e332d272-8839-4e48-ad1e-5b06b10cb66a",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.579Z",
   "type":"io.confluent.cloud/request"
}

ListIdentityPool

The ListIdentityPool event is generated by a request to get a list of identity pools.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "afc978427a382556b7309f3979cb9e42"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"ListIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"40ae0052-e4de-4815-933d-de53af795ddb",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.034Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "afc978427a382556b7309f3979cb9e42"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"ListIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"40ae0052-e4de-4815-933d-de53af795ddb",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.034Z",
   "type":"io.confluent.cloud/request"
}

UpdateIdentityPool

The UpdateIdentityPool event is generated by a request to update an identity pool.

To view example event messages, expand the following dropdowns:

Success

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"UpdateIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

Failure

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"UpdateIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}