Access
Constructors
Properties
The lifetime of the Access Token after creation. Valid units are m and h. Must be greater than or equal to 1m and less than or equal to 24h.
Allow PKCE flow without a client secret.
The URL where this applications tile redirects users.
The application client secret, only returned on initial apply.
The service provider's endpoint that is responsible for receiving and parsing a SAML assertion.
Custom attribute mapped from IDPs.
Custom claim mapped from IDPs.
The relay state used if not provided by the identity provider.
The OIDC flows supported by this application.
A regex to filter Cloudflare groups returned in ID token and userinfo endpoint.
Hybrid and Implicit Flow options.
The unique identifier for the SaaS application.
The format of the name identifier sent to the SaaS application.
A JSONata expression that transforms an application's user identities into a NameID value for its SAML assertion. This expression should evaluate to a singular string. The output of this expression can override the name_id_format setting.
The permitted URL's for Cloudflare to return Authorization codes and Access/ID tokens.
Refresh token grant options.
A JSONata expression that transforms an application's user identities into attribute assertions in the SAML response. The expression can transform id, email, name, and groups values. It can also transform fields listed in the samlattributes or oidcfields of the identity provider used to authenticate. The output of this expression must be a JSON object.
A globally unique name for an identity or service provider.
The endpoint where the SaaS application will send login requests.