OpenIdConnectAccessTokenConfigurationDetail
The configuration of an OpenID Connect (OIDC) identity source for handling access token
claims. Contains the claim that you want to identify as the principal in an authorization
request, and the values of the aud
claim, or audiences, that you want to
accept.
This data type is part of a OpenIdConnectTokenSelectionDetail structure, which is a parameter of GetIdentitySource.
Contents
Note
In the following list, the required parameters are described first.
- audiences
-
The access token
aud
claim values that you want to accept in your policy store. For example,https://myapp.example.com, https://myapp2.example.com
.Type: Array of strings
Array Members: Minimum number of 1 item. Maximum number of 255 items.
Length Constraints: Minimum length of 1. Maximum length of 255.
Required: No
- principalIdClaim
-
The claim that determines the principal in OIDC access tokens. For example,
sub
.Type: String
Length Constraints: Minimum length of 1.
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: