POST
/
api
/
v1
/
auth
/
oidc-auth
/
identities
/
{identityId}

Authorizations

Authorization
string
headerrequired

An access token in Infisical

Path Parameters

identityId
string
required

The ID of the identity to attach the configuration onto.

Body

application/json
oidcDiscoveryUrl
string
required

The URL used to retrieve the OpenID Connect configuration from the identity provider.

caCert
string
default:

The PEM-encoded CA cert for establishing secure communication with the Identity Provider endpoints.

boundIssuer
string
required

The unique identifier of the identity provider issuing the JWT.

boundAudiences
string
default:

The list of intended recipients.

boundClaims
object
required

The attributes that should be present in the JWT for it to be valid.

boundSubject
string
default:

The expected principal that is the subject of the JWT.

accessTokenTrustedIps
object[]

The IPs or CIDR ranges that access tokens can be used from.

accessTokenTTL
integer
default: 2592000

The lifetime for an acccess token in seconds.

accessTokenMaxTTL
integer
default: 2592000

The maximum lifetime for an acccess token in seconds.

accessTokenNumUsesLimit
integer
default: 0

The maximum number of times that an access token can be used.

Response

200 - application/json
identityOidcAuth
object
required

Was this page helpful?