View Source GoogleApi.IAM.V1.Model.GoogleIamAdminV1WorkforcePoolProviderOidcWebSsoConfig (google_api_iam v0.42.0)

Configuration for web single sign-on for the OIDC provider.

Attributes

additionalScopes (type: list(String.t), default: nil) - Additional scopes to request for in the OIDC authentication request on top of scopes requested by default. By default, the openid, profile and email scopes that are supported by the identity provider are requested. Each additional scope may be at most 256 characters. A maximum of 10 additional scopes may be configured.
assertionClaimsBehavior (type: String.t, default: nil) - Required. The behavior for how OIDC Claims are included in the assertion object used for attribute mapping and attribute condition.
responseType (type: String.t, default: nil) - Required. The Response Type to request for in the OIDC Authorization Request for web sign-in. The CODE Response Type is recommended to avoid the Implicit Flow, for security reasons.

Summary

Types

t()

Functions

decode(value, options)

Unwrap a decoded JSON object into its complex fields.

Types

t()

@type t() ::
  %GoogleApi.IAM.V1.Model.GoogleIamAdminV1WorkforcePoolProviderOidcWebSsoConfig{
    additionalScopes: [String.t()] | nil,
    assertionClaimsBehavior: String.t() | nil,
    responseType: String.t() | nil
  }

Functions

decode(value, options)

@spec decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.