REST Resource: inboundOidcSsoProfiles

Resource: InboundOidcSsoProfile

An OIDC federation between a Google enterprise customer and an OIDC identity provider.

JSON representation 
{
  "name": string,
  "customer": string,
  "displayName": string,
  "idpConfig": {
    object (OidcIdpConfig)
  },
  "rpConfig": {
    object (OidcRpConfig)
  }
}
Fields
name

string

Output only. Resource name of the OIDC SSO profile.
customer

string

Immutable. The customer.

For example: customers/C0123abc.
displayName

string

Human-readable name of the OIDC SSO profile.
idpConfig

object (OidcIdpConfig)

OIDC identity provider configuration.
rpConfig

object (OidcRpConfig)

OIDC relying party (RP) configuration for this OIDC SSO profile. These are the RP details provided by Google that should be configured on the corresponding identity provider.

OidcIdpConfig

OIDC IDP (identity provider) configuration.

JSON representation 
{
  "issuerUri": string,
  "changePasswordUri": string
}
Fields
issuerUri

string

Required. The Issuer identifier for the IdP. Must be a URL. The discovery URL will be derived from this as described in Section 4 of the OIDC specification.
changePasswordUri

string

The Change Password URL of the identity provider. Users will be sent to this URL when changing their passwords at myaccount.google.com. This takes precedence over the change password URL configured at customer-level. Must use HTTPS.

OidcRpConfig

OIDC RP (relying party) configuration.

JSON representation 
{
  "clientId": string,
  "clientSecret": string,
  "redirectUris": [
    string
  ]
}
Fields
clientId

string

OAuth2 client ID for OIDC.
clientSecret

string

Input only. OAuth2 client secret for OIDC.
redirectUris[]

string

Output only. The URL(s) that this client may use in authentication requests.

Methods

create

 Creates an InboundOidcSsoProfile for a customer.

delete

 Deletes an InboundOidcSsoProfile.

get

 Gets an InboundOidcSsoProfile.

list

 Lists InboundOidcSsoProfile objects for a Google enterprise customer.

patch

 Updates an InboundOidcSsoProfile.