Openid-connect (Section)#

Path: /profiles/profile/settings/authorization-server/openid-connect

Parameters#

NameTypeRequiredDefaultDescription
id-token-ttluint32optional3600The number of seconds an id token will be valid. Can be overruled by individual client configuration.
amr-as-arraybooleanoptionalfalseWhen enabled, the ‘amr’ claim of an ID token is issued as an array of strings, as required by the OpenID Connect specification, instead of a single string. Disabled by default, for retro-compatibility.
passthrough-unscoped-claimsbooleanoptionalfalseWhen set, any claim that is not defined by the OpenID Connect specification, but is added by a procedure, is not removed by scope filtering.

Subsections#

NameTypeDescription
expose-metadataSectionThis section specifies what metadata is exposed on the OpenID Connect discovery endpoint for this profile.
require-pairwise-subject-identifiersSectionSet when clients on this profile must always be issued pairwise pseudonyms for authenticated subjects
id-token-encryptionSectionEnables the use of issuing encrypted ID tokens.

Was this helpful?