POST
/
api
/
v1
/
auth
/
oidc-auth
/
identities
/
{identityId}

Authorizations

Authorization
string
header
required

An access token in Infisical

Path Parameters

identityId
string
required

The ID of the identity to attach the configuration onto.

Body

application/json
boundClaims
object
required

The attributes that should be present in the JWT for it to be valid.

boundIssuer
string
required

The unique identifier of the identity provider issuing the JWT.

Minimum length: 1
oidcDiscoveryUrl
string
required

The URL used to retrieve the OpenID Connect configuration from the identity provider.

Minimum length: 1
accessTokenMaxTTL
integer
default:
2592000

The maximum lifetime for an access token in seconds.

Required range: x < 315360000
accessTokenNumUsesLimit
integer
default:
0

The maximum number of times that an access token can be used.

Required range: x > 0
accessTokenTrustedIps
object[]

The IPs or CIDR ranges that access tokens can be used from.

accessTokenTTL
integer
default:
2592000

The lifetime for an access token in seconds.

Required range: 1 < x < 315360000
boundAudiences
string
default:

The list of intended recipients.

boundSubject
string
default:

The expected principal that is the subject of the JWT.

caCert
string
default:

The PEM-encoded CA cert for establishing secure communication with the Identity Provider endpoints.

Response

200 - application/json
identityOidcAuth
object
required

Was this page helpful?