Authorization-parameters-whitelist (Section)#

Path: /profiles/profile{id, type}/settings/apps-service/applications/application{id}/token-handler/authorization-parameters-whitelist

Parameters#

NameTypeRequiredDefaultDescription
allowed-parametermulti-value, non-empty-stringoptionalThe authorization parameter names that are allowed to be sent by an SPA in ‘login/start’ requests. The ‘scope’ parameter is always allowed and it doesn’t have to be whitelisted here.

Was this helpful?