REST Resource: inboundOidcSsoProfiles

Resource: InboundOidcSsoProfile

An OIDC federation between a Google enterprise customer and an OIDC identity provider.

JSON representation
{ "name" : string , "customer" : string , "displayName" : string , "idpConfig" : { object ( `OidcIdpConfig` ) } , "rpConfig" : { object ( `OidcRpConfig` ) } }

Fields
`name`	`string` Output only. Resource name of the OIDC SSO profile.
`customer`	`string` Immutable. The customer. For example: `customers/C0123abc` .
`displayName`	`string` Human-readable name of the OIDC SSO profile.
`idpConfig`	`object ( OidcIdpConfig )` OIDC identity provider configuration.
`rpConfig`	`object ( OidcRpConfig )` OIDC relying party (RP) configuration for this OIDC SSO profile. These are the RP details provided by Google that should be configured on the corresponding identity provider.

OidcIdpConfig

OIDC IDP (identity provider) configuration.

JSON representation
{ "issuerUri" : string , "changePasswordUri" : string }

Fields

Fields
`issuerUri`	`string` Required. The Issuer identifier for the IdP. Must be a URL. The discovery URL will be derived from this as described in Section 4 of the OIDC specification .
`changePasswordUri`	`string` The Change Password URLof the identity provider. Users will be sent to this URL when changing their passwords at `myaccount.google.com` . This takes precedence over the change password URL configured at customer-level. Must use `HTTPS` .

issuerUri

string

Required. The Issuer identifier for the IdP. Must be a URL. The discovery URL will be derived from this as described in Section 4 of the OIDC specification .

changePasswordUri

string

The Change Password URLof the identity provider. Users will be sent to this URL when changing their passwords at myaccount.google.com . This takes precedence over the change password URL configured at customer-level. Must use HTTPS .

OidcRpConfig

OIDC RP (relying party) configuration.

JSON representation
{ "clientId" : string , "clientSecret" : string , "redirectUris" : [ string ] }

Fields

Fields
`clientId`	`string` OAuth2 client ID for OIDC.
`clientSecret`	`string` Input only. OAuth2 client secret for OIDC.
`redirectUris[]`	`string` Output only. The URL(s) that this client may use in authentication requests.

clientId

string

OAuth2 client ID for OIDC.

clientSecret

string

Input only. OAuth2 client secret for OIDC.

redirectUris[]

string

Output only. The URL(s) that this client may use in authentication requests.

Methods
`create`	Creates an `InboundOidcSsoProfile` for a customer.
`delete`	Deletes an `InboundOidcSsoProfile` .
`get`	Gets an `InboundOidcSsoProfile` .
`list`	Lists `InboundOidcSsoProfile` objects for a Google enterprise customer.
`patch`	Updates an `InboundOidcSsoProfile` .

REST Resource: inboundOidcSsoProfiles

Resource: InboundOidcSsoProfile

OidcIdpConfig

OidcRpConfig

Methods

`create`

`delete`

`get`

`list`

`patch`