# Reference for the teleport\_saml\_idp\_service\_provider Terraform data-source

This page describes the supported values of the `teleport_saml_idp_service_provider` data source of the Teleport Terraform provider.

## Schema

### Required

- `spec` (Attributes) Spec is the SAML IdP service provider spec. (see [below for nested schema](#nested-schema-for-spec))
- `version` (String) Version is the API version used to create the resource. It must be specified. Based on this version, Teleport will apply different defaults on resource creation or deletion. It must be an integer prefixed by "v". For example: `v1`

### Optional

- `metadata` (Attributes) Metadata is resource metadata (see [below for nested schema](#nested-schema-for-metadata))
- `sub_kind` (String) SubKind is an optional resource sub kind, used in some resources

### Nested Schema for `spec`

Optional:

- `acs_url` (String) ACSURL is the endpoint where SAML authentication response will be redirected.
- `attribute_mapping` (Attributes List) AttributeMapping is used to map service provider requested attributes to username, role and traits in Teleport. (see [below for nested schema](#nested-schema-for-specattribute_mapping))
- `entity_descriptor` (String) EntityDescriptor is the entity descriptor for the service provider
- `entity_id` (String) EntityID is the entity ID for the entity descriptor. If entity descriptor is provided, this value is checked that it matches the entity ID in the entity descriptor at upsert time to avoid having to parse the XML blob in the entity descriptor every time we need to use this resource.
- `launch_urls` (List of String) LaunchURLs is used to configure custom landing URLs for service provider. It is useful in the following scenarios: 1. If a service provider does not support IdP initiated authentication, launch url can be configured to launch users directly into the service provider authentication endpoint. 2. If a service provider does support IdP initiated authentication, it can be useful if that service provider acts as a master authentication service provider for internal services. In such case, Teleport administrator can configure launch URL, that lets user pick a specific internal service URL from the Log In tile in the UI, which would take them to that particular service for authentication instead of directly launching to the master service provider. Each launch URL value must be an HTTPs endpoint.
- `preset` (String) Preset is used to define service provider profile that will have a custom behavior processed by Teleport.
- `relay_state` (String) RelayState is used to add custom value in the SAML response as a relay\_state HTTP parameter. The value can contain service provider specific redirect URL, static state token etc. The value is only applied in the IdP initiated SSO flow.

### Nested Schema for `spec.attribute_mapping`

Optional:

- `name` (String) name is an attribute name.
- `name_format` (String) name\_format is an attribute name format.
- `value` (String) value is an attribute value definable with predicate expression.

### Nested Schema for `metadata`

Required:

- `name` (String) Name is an object name

Optional:

- `description` (String) Description is object description
- `expires` (String) Expires is a global expiry time header can be set on any resource in the system.
- `labels` (Map of String) Labels is a set of labels