pulumi-gcp-kotlin/com.pulumi.gcp.iam.kotlin.outputs/WorkforcePoolProviderOidcWebSsoConfig

WorkforcePoolProviderOidcWebSsoConfig

data class WorkforcePoolProviderOidcWebSsoConfig(val additionalScopes: List<String>? = null, val assertionClaimsBehavior: String, val responseType: String)

Constructors

constructor(additionalScopes: List<String>? = null, assertionClaimsBehavior: String, responseType: String)

Types

Companion

object Companion

Properties

additionalScopes

val additionalScopes: List<String>? = null

Additional scopes to request for in the OIDC authentication request on top of scopes requested by default. By default, the openid, profile and email scopes that are supported by the identity provider are requested. Each additional scope may be at most 256 characters. A maximum of 10 additional scopes may be configured. The extra_attributes_oauth2_client block supports:

assertionClaimsBehavior

val assertionClaimsBehavior: String

The behavior for how OIDC Claims are included in the assertion object used for attribute mapping and attribute condition.

responseType

val responseType: String

The Response Type to request for in the OIDC Authorization Request for web sign-in. The CODE Response Type is recommended to avoid the Implicit Flow, for security reasons.