pulumi-gcp-kotlin/com.pulumi.gcp.iam.kotlin.inputs/WorkforcePoolProviderOidcWebSsoConfigArgs

WorkforcePoolProviderOidcWebSsoConfigArgs

data class WorkforcePoolProviderOidcWebSsoConfigArgs(val additionalScopes: Output<List<String>>? = null, val assertionClaimsBehavior: Output<String>, val responseType: Output<String>) : ConvertibleToJava<WorkforcePoolProviderOidcWebSsoConfigArgs>

Constructors

fun WorkforcePoolProviderOidcWebSsoConfigArgs(additionalScopes: Output<List<String>>? = null, assertionClaimsBehavior: Output<String>, responseType: Output<String>)

Functions

Link copied to clipboard
open override fun toJava(): WorkforcePoolProviderOidcWebSsoConfigArgs

Properties

Link copied to clipboard
val additionalScopes: Output<List<String>>? = null

Additional scopes to request for in the OIDC authentication request on top of scopes requested by default. By default, the openid, profile and email scopes that are supported by the identity provider are requested. Each additional scope may be at most 256 characters. A maximum of 10 additional scopes may be configured.

Link copied to clipboard
val assertionClaimsBehavior: Output<String>

The behavior for how OIDC Claims are included in the assertion object used for attribute mapping and attribute condition.

Link copied to clipboard
val responseType: Output<String>

The Response Type to request for in the OIDC Authorization Request for web sign-in. The CODE Response Type is recommended to avoid the Implicit Flow, for security reasons.