Variable $MsgVpnAuthenticationOauthProfileConst

$MsgVpnAuthenticationOauthProfile: {
    properties: {
        authorizationGroupsClaimName: {
            description: "The name of the groups claim. If non-empty, the specified claim will be used to determine groups for authorization. If empty, the authorizationType attribute of the Message VPN will be used to determine authorization. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"groups\"`.";
            type: "string";
        };
        clientId: {
            description: "The OAuth client id. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        clientRequiredType: {
            description: "The required value for the TYP field in the ID token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"JWT\"`.";
            type: "string";
        };
        clientSecret: {
            description: "The OAuth client secret. This attribute is absent from a GET and not updated when absent in a PUT, subject to the exceptions in note 4. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        clientValidateTypeEnabled: {
            description: "Enable or disable verification of the TYP field in the ID token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        disconnectOnTokenExpirationEnabled: {
            description: "Enable or disable the disconnection of clients when their tokens expire. Changing this value does not affect existing clients, only new client connections. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        enabled: {
            description: "Enable or disable the OAuth profile. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `false`.";
            type: "boolean";
        };
        endpointDiscovery: {
            description: "The OpenID Connect discovery endpoint or OAuth Authorization Server Metadata endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        endpointDiscoveryRefreshInterval: {
            description: "The number of seconds between discovery endpoint requests. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `86400`.";
            format: "int32";
            type: "number";
        };
        endpointIntrospection: {
            description: "The OAuth introspection endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        endpointIntrospectionTimeout: {
            description: "The maximum time in seconds a token introspection request is allowed to take. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `1`.";
            format: "int32";
            type: "number";
        };
        endpointJwks: {
            description: "The OAuth JWKS endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        endpointJwksRefreshInterval: {
            description: "The number of seconds between JWKS endpoint requests. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `86400`.";
            format: "int32";
            type: "number";
        };
        endpointUserinfo: {
            description: "The OpenID Connect Userinfo endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        endpointUserinfoTimeout: {
            description: "The maximum time in seconds a userinfo request is allowed to take. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `1`.";
            format: "int32";
            type: "number";
        };
        issuer: {
            description: "The Issuer Identifier for the OAuth provider. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        mqttUsernameValidateEnabled: {
            description: "Enable or disable whether the API provided MQTT client username will be validated against the username calculated from the token(s). When enabled, connection attempts by MQTT clients are rejected if they differ. Note that this value only applies to MQTT clients; SMF client usernames will not be validated. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `false`.";
            type: "boolean";
        };
        msgVpnName: {
            description: "The name of the Message VPN.";
            type: "string";
        };
        oauthProfileName: {
            description: "The name of the OAuth profile.";
            type: "string";
        };
        oauthRole: {
            type: "Enum";
        };
        resourceServerParseAccessTokenEnabled: {
            description: "Enable or disable parsing of the access token as a JWT. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        resourceServerRequiredAudience: {
            description: "The required audience value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        resourceServerRequiredIssuer: {
            description: "The required issuer value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        resourceServerRequiredScope: {
            description: "A space-separated list of scopes that must be present in the scope claim. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        resourceServerRequiredType: {
            description: "The required TYP value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"at+jwt\"`.";
            type: "string";
        };
        resourceServerValidateAudienceEnabled: {
            description: "Enable or disable verification of the audience claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        resourceServerValidateIssuerEnabled: {
            description: "Enable or disable verification of the issuer claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        resourceServerValidateScopeEnabled: {
            description: "Enable or disable verification of the scope claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        resourceServerValidateTypeEnabled: {
            description: "Enable or disable verification of the TYP field in the access token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        usernameClaimName: {
            description: "The name of the username claim. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"sub\"`.";
            type: "string";
        };
    };
} = ...

Type declaration

  • properties: {
        authorizationGroupsClaimName: {
            description: "The name of the groups claim. If non-empty, the specified claim will be used to determine groups for authorization. If empty, the authorizationType attribute of the Message VPN will be used to determine authorization. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"groups\"`.";
            type: "string";
        };
        clientId: {
            description: "The OAuth client id. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        clientRequiredType: {
            description: "The required value for the TYP field in the ID token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"JWT\"`.";
            type: "string";
        };
        clientSecret: {
            description: "The OAuth client secret. This attribute is absent from a GET and not updated when absent in a PUT, subject to the exceptions in note 4. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        clientValidateTypeEnabled: {
            description: "Enable or disable verification of the TYP field in the ID token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        disconnectOnTokenExpirationEnabled: {
            description: "Enable or disable the disconnection of clients when their tokens expire. Changing this value does not affect existing clients, only new client connections. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        enabled: {
            description: "Enable or disable the OAuth profile. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `false`.";
            type: "boolean";
        };
        endpointDiscovery: {
            description: "The OpenID Connect discovery endpoint or OAuth Authorization Server Metadata endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        endpointDiscoveryRefreshInterval: {
            description: "The number of seconds between discovery endpoint requests. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `86400`.";
            format: "int32";
            type: "number";
        };
        endpointIntrospection: {
            description: "The OAuth introspection endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        endpointIntrospectionTimeout: {
            description: "The maximum time in seconds a token introspection request is allowed to take. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `1`.";
            format: "int32";
            type: "number";
        };
        endpointJwks: {
            description: "The OAuth JWKS endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        endpointJwksRefreshInterval: {
            description: "The number of seconds between JWKS endpoint requests. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `86400`.";
            format: "int32";
            type: "number";
        };
        endpointUserinfo: {
            description: "The OpenID Connect Userinfo endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        endpointUserinfoTimeout: {
            description: "The maximum time in seconds a userinfo request is allowed to take. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `1`.";
            format: "int32";
            type: "number";
        };
        issuer: {
            description: "The Issuer Identifier for the OAuth provider. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        mqttUsernameValidateEnabled: {
            description: "Enable or disable whether the API provided MQTT client username will be validated against the username calculated from the token(s). When enabled, connection attempts by MQTT clients are rejected if they differ. Note that this value only applies to MQTT clients; SMF client usernames will not be validated. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `false`.";
            type: "boolean";
        };
        msgVpnName: {
            description: "The name of the Message VPN.";
            type: "string";
        };
        oauthProfileName: {
            description: "The name of the OAuth profile.";
            type: "string";
        };
        oauthRole: {
            type: "Enum";
        };
        resourceServerParseAccessTokenEnabled: {
            description: "Enable or disable parsing of the access token as a JWT. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        resourceServerRequiredAudience: {
            description: "The required audience value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        resourceServerRequiredIssuer: {
            description: "The required issuer value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        resourceServerRequiredScope: {
            description: "A space-separated list of scopes that must be present in the scope claim. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
            type: "string";
        };
        resourceServerRequiredType: {
            description: "The required TYP value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"at+jwt\"`.";
            type: "string";
        };
        resourceServerValidateAudienceEnabled: {
            description: "Enable or disable verification of the audience claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        resourceServerValidateIssuerEnabled: {
            description: "Enable or disable verification of the issuer claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        resourceServerValidateScopeEnabled: {
            description: "Enable or disable verification of the scope claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        resourceServerValidateTypeEnabled: {
            description: "Enable or disable verification of the TYP field in the access token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
            type: "boolean";
        };
        usernameClaimName: {
            description: "The name of the username claim. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"sub\"`.";
            type: "string";
        };
    }
    • authorizationGroupsClaimName: {
          description: "The name of the groups claim. If non-empty, the specified claim will be used to determine groups for authorization. If empty, the authorizationType attribute of the Message VPN will be used to determine authorization. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"groups\"`.";
          type: "string";
      }
      • description: "The name of the groups claim. If non-empty, the specified claim will be used to determine groups for authorization. If empty, the authorizationType attribute of the Message VPN will be used to determine authorization. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"groups\"`."
      • type: "string"
    • clientId: {
          description: "The OAuth client id. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "The OAuth client id. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • clientRequiredType: {
          description: "The required value for the TYP field in the ID token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"JWT\"`.";
          type: "string";
      }
      • description: "The required value for the TYP field in the ID token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"JWT\"`."
      • type: "string"
    • clientSecret: {
          description: "The OAuth client secret. This attribute is absent from a GET and not updated when absent in a PUT, subject to the exceptions in note 4. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "The OAuth client secret. This attribute is absent from a GET and not updated when absent in a PUT, subject to the exceptions in note 4. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • clientValidateTypeEnabled: {
          description: "Enable or disable verification of the TYP field in the ID token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
          type: "boolean";
      }
      • description: "Enable or disable verification of the TYP field in the ID token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`."
      • type: "boolean"
    • disconnectOnTokenExpirationEnabled: {
          description: "Enable or disable the disconnection of clients when their tokens expire. Changing this value does not affect existing clients, only new client connections. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
          type: "boolean";
      }
      • description: "Enable or disable the disconnection of clients when their tokens expire. Changing this value does not affect existing clients, only new client connections. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`."
      • type: "boolean"
    • enabled: {
          description: "Enable or disable the OAuth profile. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `false`.";
          type: "boolean";
      }
      • description: "Enable or disable the OAuth profile. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `false`."
      • type: "boolean"
    • endpointDiscovery: {
          description: "The OpenID Connect discovery endpoint or OAuth Authorization Server Metadata endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "The OpenID Connect discovery endpoint or OAuth Authorization Server Metadata endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • endpointDiscoveryRefreshInterval: {
          description: "The number of seconds between discovery endpoint requests. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `86400`.";
          format: "int32";
          type: "number";
      }
      • description: "The number of seconds between discovery endpoint requests. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `86400`."
      • format: "int32"
      • type: "number"
    • endpointIntrospection: {
          description: "The OAuth introspection endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "The OAuth introspection endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • endpointIntrospectionTimeout: {
          description: "The maximum time in seconds a token introspection request is allowed to take. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `1`.";
          format: "int32";
          type: "number";
      }
      • description: "The maximum time in seconds a token introspection request is allowed to take. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `1`."
      • format: "int32"
      • type: "number"
    • endpointJwks: {
          description: "The OAuth JWKS endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "The OAuth JWKS endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • endpointJwksRefreshInterval: {
          description: "The number of seconds between JWKS endpoint requests. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `86400`.";
          format: "int32";
          type: "number";
      }
      • description: "The number of seconds between JWKS endpoint requests. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `86400`."
      • format: "int32"
      • type: "number"
    • endpointUserinfo: {
          description: "The OpenID Connect Userinfo endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "The OpenID Connect Userinfo endpoint. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • endpointUserinfoTimeout: {
          description: "The maximum time in seconds a userinfo request is allowed to take. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `1`.";
          format: "int32";
          type: "number";
      }
      • description: "The maximum time in seconds a userinfo request is allowed to take. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `1`."
      • format: "int32"
      • type: "number"
    • issuer: {
          description: "The Issuer Identifier for the OAuth provider. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "The Issuer Identifier for the OAuth provider. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • mqttUsernameValidateEnabled: {
          description: "Enable or disable whether the API provided MQTT client username will be validated against the username calculated from the token(s). When enabled, connection attempts by MQTT clients are rejected if they differ. Note that this value only applies to MQTT clients; SMF client usernames will not be validated. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `false`.";
          type: "boolean";
      }
      • description: "Enable or disable whether the API provided MQTT client username will be validated against the username calculated from the token(s). When enabled, connection attempts by MQTT clients are rejected if they differ. Note that this value only applies to MQTT clients; SMF client usernames will not be validated. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `false`."
      • type: "boolean"
    • msgVpnName: {
          description: "The name of the Message VPN.";
          type: "string";
      }
      • description: "The name of the Message VPN."
      • type: "string"
    • oauthProfileName: {
          description: "The name of the OAuth profile.";
          type: "string";
      }
      • description: "The name of the OAuth profile."
      • type: "string"
    • oauthRole: {
          type: "Enum";
      }
      • type: "Enum"
    • resourceServerParseAccessTokenEnabled: {
          description: "Enable or disable parsing of the access token as a JWT. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
          type: "boolean";
      }
      • description: "Enable or disable parsing of the access token as a JWT. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`."
      • type: "boolean"
    • resourceServerRequiredAudience: {
          description: "The required audience value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "The required audience value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • resourceServerRequiredIssuer: {
          description: "The required issuer value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "The required issuer value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • resourceServerRequiredScope: {
          description: "A space-separated list of scopes that must be present in the scope claim. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`.";
          type: "string";
      }
      • description: "A space-separated list of scopes that must be present in the scope claim. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"\"`."
      • type: "string"
    • resourceServerRequiredType: {
          description: "The required TYP value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"at+jwt\"`.";
          type: "string";
      }
      • description: "The required TYP value. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"at+jwt\"`."
      • type: "string"
    • resourceServerValidateAudienceEnabled: {
          description: "Enable or disable verification of the audience claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
          type: "boolean";
      }
      • description: "Enable or disable verification of the audience claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`."
      • type: "boolean"
    • resourceServerValidateIssuerEnabled: {
          description: "Enable or disable verification of the issuer claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
          type: "boolean";
      }
      • description: "Enable or disable verification of the issuer claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`."
      • type: "boolean"
    • resourceServerValidateScopeEnabled: {
          description: "Enable or disable verification of the scope claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
          type: "boolean";
      }
      • description: "Enable or disable verification of the scope claim in the access token or introspection response. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`."
      • type: "boolean"
    • resourceServerValidateTypeEnabled: {
          description: "Enable or disable verification of the TYP field in the access token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`.";
          type: "boolean";
      }
      • description: "Enable or disable verification of the TYP field in the access token header. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `true`."
      • type: "boolean"
    • usernameClaimName: {
          description: "The name of the username claim. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"sub\"`.";
          type: "string";
      }
      • description: "The name of the username claim. Changes to this attribute are synchronized to HA mates and replication sites via config-sync. The default value is `\"sub\"`."
      • type: "string"

Settings

Member Visibility

Theme