identitycenter.md

Using Identity Center as a credentials broker

If you'd like to configure Speedrun to use Identity Center as a credentials broker note these points:

1. Getting CLI creds embeds the credentials in the command that is copied to the clipboard.
2. Full Identity Center support requires Speedrun v1.119 or later.

Switching to the Identity Center credentials broker

To use the Identity Center credentials broker, click the gear icon in the Speedrun toolbar to enter settings. Then change the Credentials Broker to Identity Center (Experimental). You can set the default permission set for your personal account. Setting this will configure what permission set to use when you select your GitHub username in the dropdowns. The screenshot below shows the necessary fields to configure Identity Center.

Alternatively if you set the variable ssoStartUrl anywhere in your #srConfig, it will override this setting. If you are configuring pages for your team include something like this on your page.

#copy
```
#srConfig
{
  ssoStartUrl: '~~~SSO start url~~~'
}
```

Configuration

Instead of configuring a role you need to provide an account and permSet in your configuration.

```
#srConfig
{
    services : {
        MiddleOutService : {
            regions : {
                "us-west-2 - Beta" : {
                    "permSet" : "middleout-beta",
                    "account" : "11111111111"
                },
                "us-west-2 - Prod" : {
                    "permSet" : "middleout-prod",
                    "account" : "222222222222"
                }
            }
        }
    }
}
```

You can define the permSet at a higher level and use JavaScript if you want to generate it.

```
#srConfig
{
    services : {
        MiddleOutService : {
            permSet: "middleout-${srRegionName.split(' - ')[1].toLowerCase()}",
            regions: {
                "us-west-2 - Beta" : {
                   "account" : "111111111111"
                },
                "us-west-2 - Prod" : {
                   "account" : "222222222222"
                }
            }
        },
        PiedPiperFrontendService : {
            permSet: "frontend-${srRegionName.split(' - ')[1].toLowerCase()}",
            regions : {
                "us-west-2 - Beta" : {
                   "account" : "333333333333"
                },
                "us-west-2 - Prod" : {
                   "account" : "444444444444"
                }
            }
        }
    }
}
```

Return to Cookbook