AuthenticateOidcActionConfig
Request parameters when using an identity provider (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.
Types
Properties
The query parameters (up to 10) to include in the redirect request to the authorization endpoint.
The authorization endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
The OAuth 2.0 client secret. This parameter is required if you are creating a rule. If you are modifying a rule, you can omit this parameter if you set UseExistingClientSecret
to true.
The behavior if the user is not authenticated. The following are possible values:
The name of the cookie used to maintain session information. The default is AWSELBAuthSessionCookie.
The maximum duration of the authentication session, in seconds. The default is 604800 seconds (7 days).
The token endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.
Indicates whether to use the existing client secret when modifying a rule. If you are creating a rule, you can omit this parameter or set it to false.
The user info endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path.