3.99. OIDCProvider

Description

External OpenID Connect (OIDC) Provider used to authenticate users.

Properties

Name
Specifies a symbolic name for the provider. (Identifier)
OIDCDiscoveryEndpoint
URL to where an OpenID Provider publishes its metadata.
OIDCClientId
Identifier assigned to a client application that wishes to interact with an OpenID Provider. (Default: oneconnect)
VerifyProviderCertificate
Verify OIDC Provider certificate using the configured root certificates. (Default: No)
RootCertificates
Selects one or more root, intermediate or self signed certificates to validate OIDC Provider certificate against.
VerifyNonce
Verify Nonce in OIDC ID Token received from OIDC client. (Default: Yes)
AlternativeOIDCUserClaim
Alternative OIDC ID Token claim, i.e parameter replacing the default 'sub' claim, used for setting the username in the userauth system if authentication is successful. The ID Token is generated on the OIDC Provider/Server and is relayed by the client during login. (Default: No)
OIDCUserClaim
Alternative OIDC username claim value. Please consult the OIDC Provider documentation or administrator for a claim that will contain a value unique for every user.
Attribute
Special Attribute of the current object. (Optional)
Comments
Text describing the current object. (Optional)