UpdateWorkspaceAuthentication

Source: src/AWS/Grafana/UpdateWorkspaceAuthentication.ts

Runtime binding for the UpdateWorkspaceAuthentication operation (IAM action grafana:UpdateWorkspaceAuthentication), scoped to one Workspace.

Defines the SAML identity provider the workspace authenticates users from — IdP metadata, assertion-attribute mapping, and which groups receive the Admin and Editor roles. Changes can take a few minutes to apply. Provide the implementation with Effect.provide(AWS.Grafana.UpdateWorkspaceAuthenticationHttp).

Managing Authentication

const updateAuth = yield* Grafana.UpdateWorkspaceAuthentication(workspace);

yield* updateAuth({
  authenticationProviders: ["SAML"],
  samlConfiguration: {
    idpMetadata: { url: "https://idp.example.com/metadata.xml" },
    assertionAttributes: { role: "grafanaRole" },
    roleValues: { admin: ["platform-team"] },
  },
});