Values.OidcConfigInfoSourceContains the OpenID Connect (OIDC) configuration information for Single Sign-On (SSO) authentication, including identity provider settings and client credentials.
type nonrec t = {applicationName : GenericString.t option;The name of the OIDC application as registered with the identity provider.
*)clientId : GenericString.t option;The OAuth client ID assigned by the identity provider for authentication requests.
*)companyId : GenericString.t option;Custom identifier your end users will use to sign in with SSO.
*)scopes : GenericString.t option;The OAuth scopes requested from the identity provider, which determine what user information is accessible (e.g., 'openid profile email').
*)issuer : GenericString.t option;The issuer URL of the identity provider, which serves as the base URL for OIDC endpoints and configuration discovery.
*)clientSecret : SensitiveString.t option;The OAuth client secret used to authenticate the application with the identity provider.
*)secret : SensitiveString.t option;An additional secret credential used by the identity provider for authentication.
*)redirectUrl : GenericString.t option;The callback URL where the identity provider redirects users after successful authentication. This URL must be registered with the identity provider.
*)userId : GenericString.t option;The claim field from the OIDC token to use as the unique user identifier (e.g., 'email', 'sub', or a custom claim).
*)customUsername : GenericString.t option;A custom field mapping to extract the username from the OIDC token when the standard username claim is insufficient.
*)caCertificate : GenericString.t option;The X.509 CA certificate for validating SSL/TLS connections to the identity provider when using self-signed or enterprise certificates.
*)applicationId : OidcConfigInfoApplicationIdInteger.t option;The unique identifier for the registered OIDC application. Valid range is 1-10.
*)ssoTokenBufferMinutes : Integer.t option;The grace period in minutes before the SSO token expires when the system should proactively refresh the token to maintain seamless user access.
*)extraAuthParams : GenericString.t option;Additional authentication parameters to include in the OIDC authorization request as a query string. Useful for provider-specific extensions.
*)}val make :
?applicationName:GenericString.t ->
?clientId:GenericString.t ->
?companyId:GenericString.t ->
?scopes:GenericString.t ->
?issuer:GenericString.t ->
?clientSecret:SensitiveString.t ->
?secret:SensitiveString.t ->
?redirectUrl:GenericString.t ->
?userId:GenericString.t ->
?customUsername:GenericString.t ->
?caCertificate:GenericString.t ->
?applicationId:OidcConfigInfoApplicationIdInteger.t ->
?ssoTokenBufferMinutes:Integer.t ->
?extraAuthParams:GenericString.t ->
unit ->
tval to_value :
t ->
[> `Structure of
(string
* [> `Integer of OidcConfigInfoApplicationIdInteger.t
| `String of GenericString.t ])
list ]