Table of Contents
A low-level client representing AWS SSO Identity Store (IdentityStore)
The AWS Single Sign-On (SSO) Identity Store service provides a single place to retrieve all of your identities (users and groups). For more information about AWS, see the AWS Single Sign-On User Guide .
import boto3
client = boto3.client('identitystore')
These are the available methods:
Check if an operation can be paginated.
Retrieves the group metadata and attributes from GroupId in an identity store.
See also: AWS API Documentation
Request Syntax
response = client.describe_group(
IdentityStoreId='string',
GroupId='string'
)
[REQUIRED]
The globally unique identifier for the identity store, such as d-1234567890 . In this example, d- is a fixed prefix, and 1234567890 is a randomly generated string that contains number and lower case letters. This value is generated at the time that a new identity store is created.
[REQUIRED]
The identifier for a group in the identity store.
dict
Response Syntax
{
'GroupId': 'string',
'DisplayName': 'string'
}
Response Structure
(dict) --
GroupId (string) --
The identifier for a group in the identity store.
DisplayName (string) --
Contains the group’s display name value. The length limit is 1,024 characters. This value can consist of letters, accented characters, symbols, numbers, punctuation, tab, new line, carriage return, space, and nonbreaking space in this attribute. The characters <>;:% are excluded. This value is specified at the time that the group is created and stored as an attribute of the group object in the identity store.
Exceptions
Retrieves the user metadata and attributes from UserId in an identity store.
See also: AWS API Documentation
Request Syntax
response = client.describe_user(
IdentityStoreId='string',
UserId='string'
)
[REQUIRED]
The globally unique identifier for the identity store, such as d-1234567890 . In this example, d- is a fixed prefix, and 1234567890 is a randomly generated string that contains number and lower case letters. This value is generated at the time that a new identity store is created.
[REQUIRED]
The identifier for a user in the identity store.
dict
Response Syntax
{
'UserName': 'string',
'UserId': 'string'
}
Response Structure
(dict) --
UserName (string) --
Contains the user’s user name value. The length limit is 128 characters. This value can consist of letters, accented characters, symbols, numbers, and punctuation. The characters <>;:% are excluded. This value is specified at the time the user is created and stored as an attribute of the user object in the identity store.
UserId (string) --
The identifier for a user in the identity store.
Exceptions
Create a paginator for an operation.
Returns an object that can wait for some condition.
Lists the attribute name and value of the group that you specified in the search. We only support DisplayName as a valid filter attribute path currently, and filter is required. This API returns minimum attributes, including GroupId and group DisplayName in the response.
See also: AWS API Documentation
Request Syntax
response = client.list_groups(
IdentityStoreId='string',
MaxResults=123,
NextToken='string',
Filters=[
{
'AttributePath': 'string',
'AttributeValue': 'string'
},
]
)
[REQUIRED]
The globally unique identifier for the identity store, such as d-1234567890 . In this example, d- is a fixed prefix, and 1234567890 is a randomly generated string that contains number and lower case letters. This value is generated at the time that a new identity store is created.
A list of Filter objects, which is used in the ListUsers and ListGroups request.
A query filter used by ListUsers and ListGroup . This filter object provides the attribute name and attribute value to search users or groups.
The attribute path that is used to specify which attribute name to search. Length limit is 255 characters. For example, UserName is a valid attribute path for the ListUsers API, and DisplayName is a valid attribute path for the ListGroups API.
Represents the data for an attribute. Each attribute value is described as a name-value pair.
dict
Response Syntax
{
'Groups': [
{
'GroupId': 'string',
'DisplayName': 'string'
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
Groups (list) --
A list of Group objects in the identity store.
(dict) --
A group object, which contains a specified group’s metadata and attributes.
GroupId (string) --
The identifier for a group in the identity store.
DisplayName (string) --
Contains the group’s display name value. The length limit is 1,024 characters. This value can consist of letters, accented characters, symbols, numbers, punctuation, tab, new line, carriage return, space, and nonbreaking space in this attribute. The characters <>;:% are excluded. This value is specified at the time the group is created and stored as an attribute of the group object in the identity store.
NextToken (string) --
The pagination token used for the ListUsers and ListGroups API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it1 is used in the API request to search for the next page.
Exceptions
Lists the attribute name and value of the user that you specified in the search. We only support UserName as a valid filter attribute path currently, and filter is required. This API returns minimum attributes, including UserId and UserName in the response.
See also: AWS API Documentation
Request Syntax
response = client.list_users(
IdentityStoreId='string',
MaxResults=123,
NextToken='string',
Filters=[
{
'AttributePath': 'string',
'AttributeValue': 'string'
},
]
)
[REQUIRED]
The globally unique identifier for the identity store, such as d-1234567890 . In this example, d- is a fixed prefix, and 1234567890 is a randomly generated string that contains number and lower case letters. This value is generated at the time that a new identity store is created.
A list of Filter objects, which is used in the ListUsers and ListGroups request.
A query filter used by ListUsers and ListGroup . This filter object provides the attribute name and attribute value to search users or groups.
The attribute path that is used to specify which attribute name to search. Length limit is 255 characters. For example, UserName is a valid attribute path for the ListUsers API, and DisplayName is a valid attribute path for the ListGroups API.
Represents the data for an attribute. Each attribute value is described as a name-value pair.
dict
Response Syntax
{
'Users': [
{
'UserName': 'string',
'UserId': 'string'
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
Users (list) --
A list of User objects in the identity store.
(dict) --
A user object, which contains a specified user’s metadata and attributes.
UserName (string) --
Contains the user’s user name value. The length limit is 128 characters. This value can consist of letters, accented characters, symbols, numbers, and punctuation. The characters <>;:% are excluded. This value is specified at the time the user is created and stored as an attribute of the user object in the identity store.
UserId (string) --
The identifier for a user in the identity store.
NextToken (string) --
The pagination token used for the ListUsers and ListGroups API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it is used in the API request to search for the next page.
Exceptions
The available paginators are: