OAuth-OIDC Identity Provider and Identity Pool Auditable Event Methods on Confluent Cloud

Auditable event methods for Confluent Cloud ORGANIZATION resources are triggered by actions, or operations, on an OAuth-OIDC identity provider (IDENTITY_PROVIDER) or an associated identity pool (IDENTITY_POOL) in the same organization. For details about identity providers, see Add an identity provider. For details about identity pools, see Use OAuth Identity Pools with Your OAuth/OIDC Identity Provider on Confluent Cloud.

Auditable event methods by resource

Identity provider (`IDENTITY_PROVIDER`)

Your OAuth/OIDC identity provider (resource type: IDENTITY_PROVIDER) describes an external identity provider that supports OAuth 2.0 and OIDC standards to establish trust between your OAuth/OIDC identity provider and Confluent Cloud resources. An OAuth-OIDC identity provider can exist without an identity pool (resource type: IDENTITY_POOL), but you use identity pools to assign access based on policies you create using pool filter expressions.

Method name	Action triggering an auditable event message
CreateIdentityProvider	A request to create an identity provider.
DeleteIdentityProvider	A request to delete an identity provider.
GetIdentityProvider	A request to get the details of an identity provider.
ListIdentityProvider	A request to get a list of identity providers.
RefreshIdentityProviderKeys	A user-initiated request to refresh the JWKS (JSON Web Key Set) keys for an identity provider.
ScheduledJwksRefresh	An automated scheduled refresh of JWKS keys for an identity provider.
UpdateIdentityProvider	A request to update an identity provider.

CreateIdentityProvider

The CreateIdentityProvider event is generated by a request to create an identity provider.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "53313aa8109a583e0ae800a57004c2eb"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"CreateIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"6a407325-7496-4291-8f37-8b58922470d6",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.159Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "53313aa8109a583e0ae800a57004c2eb"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"CreateIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
   "specversion":"1.0",
   "id":"6a407325-7496-4291-8f37-8b58922470d6",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.159Z",
   "type":"io.confluent.cloud/request"
}

DeleteIdentityProvider

The DeleteIdentityProvider event is generated by a request to delete an identity provider.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"DeleteIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"DeleteIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

GetIdentityProvider

The GetIdentityProvider event is generated by a request to get the details of an identity provider.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "bd2fb8f33296a97989216ba63d8fd811"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"GetIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"7daf1c81-4d9c-4f9b-914a-7686aa6e5875",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.435Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "bd2fb8f33296a97989216ba63d8fd811"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"GetIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"7daf1c81-4d9c-4f9b-914a-7686aa6e5875",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.435Z",
   "type":"io.confluent.cloud/request"
}

ListIdentityProvider

The ListIdentityProvider event is generated by a request to get a list of the identity providers.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityProvider",
      "cloudResources":[
         {
            "resource":{
               "type":"ORGANIZATION",
               "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "2e3a74dda1b483a526174971a86b34c8"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"ListIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
   "specversion":"1.0",
   "id":"9c569e55-3e9d-4326-9948-a5e2962aab5f",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.673Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityProvider",
      "cloudResources":[
         {
            "resource":{
               "type":"ORGANIZATION",
               "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "2e3a74dda1b483a526174971a86b34c8"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"ListIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf",
   "specversion":"1.0",
   "id":"9c569e55-3e9d-4326-9948-a5e2962aab5f",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:11.673Z",
   "type":"io.confluent.cloud/request"
}

RefreshIdentityProviderKeys

The RefreshIdentityProviderKeys event is generated by a user-initiated request to refresh the JWKS (JSON Web Key Set) keys for an identity provider.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/service=trust-service",
      "internalServiceName":"crn://confluent.cloud/service=trust-service",
      "methodName":"RefreshIdentityProviderKeys",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"be46645f-b7b8-4fd2-9104-fd9a78d30c31"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-97dA"
            }
         }
      ],
      "authenticationInfo":{
         "exposure":"CUSTOMER",
         "principal":{
            "confluentUser":{
               "resourceId":"u-stgcdnx2md"
            }
         },
         "result":"SUCCESS",
         "identity":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=Confluent/identity=u-stgcdnx2md"
      },
      "requestMetadata":{
         "requestId":[
            "4f217750e64038fd4f4a033a1ecc8879"
         ],
         "clientAddress":[
            {
               "ip":"134.238.233.62"
            }
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"RefreshIdentityProviderKeys"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "serviceLocation":{

      }
   },
   "subject":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-97dA",
   "specversion":"1.0",
   "id":"9de0c265-b157-4e3f-82a2-e5f44e9140ad",
   "source":"crn://confluent.cloud/",
   "time":"2026-01-28T15:15:39.266706679Z",
   "type":"io.confluent.cloud/request",
   "dataschema":"https://confluent.io/internal/events/AuditLog.v2"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/service=trust-service",
      "internalServiceName":"crn://confluent.cloud/service=trust-service",
      "methodName":"RefreshIdentityProviderKeys",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"be46645f-b7b8-4fd2-9104-fd9a78d30c31"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-97dA"
            }
         }
      ],
      "authenticationInfo":{
         "exposure":"CUSTOMER",
         "principal":{
            "confluentUser":{
               "resourceId":"u-stgcdnx2md"
            }
         },
         "result":"SUCCESS",
         "identity":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=Confluent/identity=u-stgcdnx2md"
      },
      "requestMetadata":{
         "requestId":[
            "4f217750e64038fd4f4a033a1ecc8879"
         ],
         "clientAddress":[
            {
               "ip":"134.238.233.62"
            }
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"RefreshIdentityProviderKeys"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "serviceLocation":{

      }
   },
   "subject":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-97dA",
   "specversion":"1.0",
   "id":"9de0c265-b157-4e3f-82a2-e5f44e9140ad",
   "source":"crn://confluent.cloud/",
   "time":"2026-01-28T15:15:39.266706679Z",
   "type":"io.confluent.cloud/request",
   "dataschema":"https://confluent.io/internal/events/AuditLog.v2"
}

ScheduledJwksRefresh

The ScheduledJwksRefresh event is generated by an automated scheduled refresh of JWKS keys for an identity provider.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ScheduledJwksRefresh",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"be46645f-b7b8-4fd2-9104-fd9a78d30c31"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-Jnqr"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentServiceAccount":{
               "resourceId":"Confluent"
            }
         }
      },
      "requestMetadata":{
         "requestId":[
            "op-Jnqr | be46645f-b7b8-4fd2-9104-fd9a78d30c31 @ 2026-03-02T12:43:49.047911092"
         ]
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-Jnqr"
   },
   "subject":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-Jnqr",
   "specversion":"1.0",
   "id":"d00f3844-7b5c-46c2-a873-f563c5a69ce5",
   "source":"crn://confluent.cloud/",
   "time":"2026-03-02T12:43:49.047994784Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ScheduledJwksRefresh",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"be46645f-b7b8-4fd2-9104-fd9a78d30c31"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-Jnqr"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentServiceAccount":{
               "resourceId":"Confluent"
            }
         }
      },
      "requestMetadata":{
         "requestId":[
            "op-Jnqr | be46645f-b7b8-4fd2-9104-fd9a78d30c31 @ 2026-03-02T12:43:49.047911092"
         ]
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-Jnqr"
   },
   "subject":"crn://confluent.cloud/organization=be46645f-b7b8-4fd2-9104-fd9a78d30c31/identity-provider=op-Jnqr",
   "specversion":"1.0",
   "id":"d00f3844-7b5c-46c2-a873-f563c5a69ce5",
   "source":"crn://confluent.cloud/",
   "time":"2026-03-02T12:43:49.047994784Z",
   "type":"io.confluent.cloud/request"
}

UpdateIdentityProvider

The UpdateIdentityProvider event is generated by a request to update an identity provider.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"UpdateIdentityProvider"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityProvider",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "11b11b82eba1b682c3550298e061e647"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-providers",
            "kind":"UpdateIdentityProvider"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"2eda4799-2c48-4ac3-a162-63d57d6ccaa2",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.640Z",
   "type":"io.confluent.cloud/request"
}

Identity pool (`IDENTITY_POOL`)

An identity pool is associated with an identity provider (IDENTITY_PROVIDER).

Method name	Action triggering an auditable event message
CreateIdentityPool	A request to create an identity pool.
DeleteIdentityPool	A request to delete an identity pool.
GetIdentityPool	A request to get the details of an identity pool.
ListIdentityPool	A request to get a list of identity pools.
UpdateIdentityPool	A request to update an identity pool.

CreateIdentityPool

The CreateIdentityPool event is generated by a request to create an identity pool.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "60b6f72e84b00b77dc639ffd46959f60"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"CreateIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"f77b6a40-744f-4315-9088-ac7a586f326b",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.201Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"CreateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "60b6f72e84b00b77dc639ffd46959f60"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"CreateIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"f77b6a40-744f-4315-9088-ac7a586f326b",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.201Z",
   "type":"io.confluent.cloud/request"
}

DeleteIdentityPool

The DeleteIdentityPool event is generated by a request to delete an identity pool.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"DeleteIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"DeleteIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"DeleteIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

GetIdentityPool

The GetIdentityPool event is generated by a request to get the details of an identity pool.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "e53cd6b6f5ee8fb355d4260a5d5527ab"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"GetIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"e332d272-8839-4e48-ad1e-5b06b10cb66a",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.579Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"GetIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "e53cd6b6f5ee8fb355d4260a5d5527ab"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"GetIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"e332d272-8839-4e48-ad1e-5b06b10cb66a",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:12.579Z",
   "type":"io.confluent.cloud/request"
}

ListIdentityPool

The ListIdentityPool event is generated by a request to get a list of the identity pools.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "afc978427a382556b7309f3979cb9e42"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"ListIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"40ae0052-e4de-4815-933d-de53af795ddb",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.034Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"ListIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_PROVIDER",
               "resourceId":"op-V7vN"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "afc978427a382556b7309f3979cb9e42"
         ]
      },
      "request":{
         "accessType":"READ_ONLY",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"ListIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN",
   "specversion":"1.0",
   "id":"40ae0052-e4de-4815-933d-de53af795ddb",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.034Z",
   "type":"io.confluent.cloud/request"
}

UpdateIdentityPool

The UpdateIdentityPool event is generated by a request to update an identity pool.

Examples

SUCCESS

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"UpdateIdentityPool"
         }
      },
      "result":{
         "status":"SUCCESS"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

FAILURE

{
   "datacontenttype":"application/json",
   "data":{
      "serviceName":"crn://confluent.cloud/",
      "methodName":"UpdateIdentityPool",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"2ff3a9ef-255b-4f52-a18e-77fe068dc5cf"
                  },
                  {
                     "type":"IDENTITY_PROVIDER",
                     "resourceId":"op-V7vN"
                  }
               ]
            },
            "resource":{
               "type":"IDENTITY_POOL",
               "resourceId":"pool-RpDd"
            }
         }
      ],
      "authenticationInfo":{
         "principal":{
            "confluentUser":{
               "resourceId":"User:u-nxd3q3"
            }
         },
         "result":"SUCCESS"
      },
      "requestMetadata":{
         "requestId":[
            "23782e56d67685006094e2e792340eb9"
         ]
      },
      "request":{
         "accessType":"MODIFICATION",
         "data":{
            "api_version":"iam/v2",
            "display_name":"identity-pools",
            "kind":"UpdateIdentityPool"
         }
      },
      "result":{
         "status":"FAILURE"
      },
      "resourceName":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd"
   },
   "subject":"crn://confluent.cloud/organization=2ff3a9ef-255b-4f52-a18e-77fe068dc5cf/identity-provider=op-V7vN/identity-pool=pool-RpDd",
   "specversion":"1.0",
   "id":"eb89c440-4efc-48cd-b927-ff0ec061a206",
   "source":"crn://confluent.cloud/",
   "time":"2022-09-27T04:51:13.393Z",
   "type":"io.confluent.cloud/request"
}

OAuth-OIDC Identity Provider and Identity Pool Auditable Event Methods on Confluent Cloud

Auditable event methods by resource

Identity provider (IDENTITY_PROVIDER)

CreateIdentityProvider

Examples

DeleteIdentityProvider

Examples

GetIdentityProvider

Examples

ListIdentityProvider

Examples

RefreshIdentityProviderKeys

Examples

ScheduledJwksRefresh

Examples

UpdateIdentityProvider

Examples

Identity pool (IDENTITY_POOL)

CreateIdentityPool

Examples

DeleteIdentityPool

Examples

GetIdentityPool

Examples

ListIdentityPool

Examples

UpdateIdentityPool

Examples

Identity provider (`IDENTITY_PROVIDER`)

Identity pool (`IDENTITY_POOL`)