pulumi-gcp-kotlin/com.pulumi.gcp.iam.kotlin.inputs/WorkforcePoolProviderOidcArgs

WorkforcePoolProviderOidcArgs

data class WorkforcePoolProviderOidcArgs(val clientId: Output<String>, val clientSecret: Output<WorkforcePoolProviderOidcClientSecretArgs>? = null, val issuerUri: Output<String>, val jwksJson: Output<String>? = null, val webSsoConfig: Output<WorkforcePoolProviderOidcWebSsoConfigArgs>? = null) : ConvertibleToJava<WorkforcePoolProviderOidcArgs>

Constructors

Link copied to clipboard
fun WorkforcePoolProviderOidcArgs(clientId: Output<String>, clientSecret: Output<WorkforcePoolProviderOidcClientSecretArgs>? = null, issuerUri: Output<String>, jwksJson: Output<String>? = null, webSsoConfig: Output<WorkforcePoolProviderOidcWebSsoConfigArgs>? = null)

Functions

Link copied to clipboard
open override fun toJava(): WorkforcePoolProviderOidcArgs

Properties

Link copied to clipboard
val clientId: Output<String>

The client ID. Must match the audience claim of the JWT issued by the identity provider.

Link copied to clipboard
val clientSecret: Output<WorkforcePoolProviderOidcClientSecretArgs>? = null

The optional client secret. Required to enable Authorization Code flow for web sign-in. Structure is documented below.

Link copied to clipboard
val issuerUri: Output<String>

The OIDC issuer URI. Must be a valid URI using the 'https' scheme.

Link copied to clipboard
val jwksJson: Output<String>? = null
Link copied to clipboard
val webSsoConfig: Output<WorkforcePoolProviderOidcWebSsoConfigArgs>? = null

Configuration for web single sign-on for the OIDC provider. Here, web sign-in refers to console sign-in and gcloud sign-in through the browser. Structure is documented below.