The redirect uri to use when configuring the identity provider
The alias unique identifies an identity provider and it is also used to build the redirect uri.
Enable/disable this identity provider.
Indicates if this provider should be tried by default for authentication even before displaying login screen
Enable/disable if tokens must be stored after authenticating users.
Enable/disable new users can read any stored tokens. This assigns the broker.read-token role.
Define under which conditions must user update his profile right after the first login.
If enabled then email provided by this provider is not verified even if verification is enabled for the realm.
Number defining order of the provider in GUI (eg. on Login page).
OpenID Connect Config OIDC SP and external IDP configuration.
The Authorization Url.
The Token Url.
End session endpoint to use to logout user from external IDP.
The User Info Url. This is optional.
The client or client identifier registered withing the identity provider.
The client or client secret registered withing the identity provider.
The issuer identifier for the issuer of the response. If not provided, no validation will be performed.
The scopes to be sent when asking for authorization. It can be a space-separated list of scopes. Defaults to 'openid'.
Specifies whether the Authorization Server prompts the End-User for reauthentication and consent.
Enable/disable signature validation of external IDP signatures.