Description
External OpenID Connect (OIDC) Provider used to authenticate users.
Properties
- Name
- Specifies a symbolic name for the provider. (Identifier)
- OIDCDiscoveryEndpoint
- URL to where an OpenID Provider publishes its metadata.
- OIDCClientId
- Identifier assigned to a client application that wishes to interact with an OpenID Provider. (Default: oneconnect)
- VerifyProviderCertificate
- Verify OIDC Provider certificate using the configured root certificates. (Default: No)
- RootCertificates
- Selects one or more root, intermediate or self signed certificates to validate OIDC Provider certificate against.
- VerifyNonce
- Verify Nonce in OIDC ID Token received from OIDC client. (Default: Yes)
- AlternativeOIDCUserClaim
- Alternative OIDC ID Token claim, i.e parameter replacing the default 'sub' claim, used for setting the username in the userauth
system if authentication is successful. The ID Token is generated on the OIDC Provider/Server and is relayed by the client
during login. (Default: No)
- OIDCUserClaim
- Alternative OIDC username claim value. Please consult the OIDC Provider documentation or administrator for a claim that will
contain a value unique for every user.
- Attribute
- Special Attribute of the current object. (Optional)
- Comments
- Text describing the current object. (Optional)