Class: Aws::VerifiedPermissions::Types::OpenIdConnectIdentityTokenConfigurationDetail

Inherits:

Struct

Object
Struct
Aws::VerifiedPermissions::Types::OpenIdConnectIdentityTokenConfigurationDetail

show all

Defined in:: gems/aws-sdk-verifiedpermissions/lib/aws-sdk-verifiedpermissions/types.rb

Overview

The configuration of an OpenID Connect (OIDC) identity source for handling identity (ID) token claims. Contains the claim that you want to identify as the principal in an authorization request, and the values of the aud claim, or audiences, that you want to accept.

This data type is part of a OpenIdConnectTokenSelectionDetail structure, which is a parameter of GetIdentitySource.

Constant Summary collapse

SENSITIVE =

[:principal_id_claim, :client_ids]

Instance Attribute Summary collapse

#client_ids ⇒ Array<String>
The ID token audience, or client ID, claim values that you want to accept in your policy store from an OIDC identity provider.
#principal_id_claim ⇒ String
The claim that determines the principal in OIDC access tokens.

Instance Attribute Details

#client_ids ⇒ `Array<String>`

The ID token audience, or client ID, claim values that you want to accept in your policy store from an OIDC identity provider. For example, 1example23456789, 2example10111213.

Returns:

(Array<String>)

# File 'gems/aws-sdk-verifiedpermissions/lib/aws-sdk-verifiedpermissions/types.rb', line 3067

class OpenIdConnectIdentityTokenConfigurationDetail < Struct.new(
  :principal_id_claim,
  :client_ids)
  SENSITIVE = [:principal_id_claim, :client_ids]
  include Aws::Structure
end

#principal_id_claim ⇒ `String`

The claim that determines the principal in OIDC access tokens. For example, sub.