pulumi-aws-native-kotlin/com.pulumi.awsnative.eks.kotlin.inputs/IdentityProviderConfigOidcIdentityProviderConfigArgs

IdentityProviderConfigOidcIdentityProviderConfigArgs

data class IdentityProviderConfigOidcIdentityProviderConfigArgs(val clientId: Output<String>, val groupsClaim: Output<String>? = null, val groupsPrefix: Output<String>? = null, val issuerUrl: Output<String>, val requiredClaims: Output<List<IdentityProviderConfigRequiredClaimArgs>>? = null, val usernameClaim: Output<String>? = null, val usernamePrefix: Output<String>? = null) : ConvertibleToJava<IdentityProviderConfigOidcIdentityProviderConfigArgs>

An object representing an OpenID Connect (OIDC) configuration.

Constructors

fun IdentityProviderConfigOidcIdentityProviderConfigArgs(clientId: Output<String>, groupsClaim: Output<String>? = null, groupsPrefix: Output<String>? = null, issuerUrl: Output<String>, requiredClaims: Output<List<IdentityProviderConfigRequiredClaimArgs>>? = null, usernameClaim: Output<String>? = null, usernamePrefix: Output<String>? = null)

Functions

toJava

open override fun toJava(): IdentityProviderConfigOidcIdentityProviderConfigArgs

Properties

clientId

val clientId: Output<String>

This is also known as audience. The ID for the client application that makes authentication requests to the OpenID identity provider.

groupsClaim

val groupsClaim: Output<String>? = null

The JWT claim that the provider uses to return your groups.

groupsPrefix

val groupsPrefix: Output<String>? = null

The prefix that is prepended to group claims to prevent clashes with existing names (such as system: groups).

issuerUrl

val issuerUrl: Output<String>

The URL of the OpenID identity provider that allows the API server to discover public signing keys for verifying tokens.

requiredClaims

val requiredClaims: Output<List<IdentityProviderConfigRequiredClaimArgs>>? = null

usernameClaim

val usernameClaim: Output<String>? = null

The JSON Web Token (JWT) claim to use as the username. The default is sub, which is expected to be a unique identifier of the end user. You can choose other claims, such as email or name, depending on the OpenID identity provider. Claims other than email are prefixed with the issuer URL to prevent naming clashes with other plug-ins.

usernamePrefix

val usernamePrefix: Output<String>? = null

The prefix that is prepended to username claims to prevent clashes with existing names. If you do not provide this field, and username is a value other than email, the prefix defaults to issuerurl#. You can use the value - to disable all prefixing.