Access ID

Access key (relevant only for access-type=access_key)

Access Type (access_key/password/saml/ldap/k8s/azure_ad/oidc/aws_iam/universal_identity/jwt/gcp/cert/oci/kerberos)

Account id (relevant only for access-type=password where the email address is associated with more than one account)

Email (relevant only for access-type=password)

Password (relevant only for access-type=password)

Azure cloud environment to use. Values: AzureCloud (default), AzureUSGovernment, AzureChinaCloud.

Certificate challenge encoded in base64. (relevant only for access-type=cert)

Certificate data encoded in base64. Used if file was not provided. (relevant only for access-type=cert)

The cloud identity (relevant only for access-type=azure_ad,aws_iam,gcp)

Disable the FAST negotiation in the Kerberos authentication method

The service principal name of the gateway as registered in LDAP (i.e., HTTP/gateway)

Gateway URL relevant only for access-type=k8s/oauth2/saml/oidc

GCP JWT audience

Set output format to JSON

The Json Web Token (relevant only for access-type=jwt/oidc)

The K8S Auth config name (relevant only for access-type=k8s)

The K8S service account token. (relevant only for access-type=k8s)

KerberosToken represents a Kerberos token generated for the gateway SPN (Service Principal Name).

TThe username for the entry within the keytab to authenticate via Kerberos

Private key data encoded in base64. Used if file was not provided.(relevant only for access-type=cert)

Base64-encoded content of a valid keytab file, containing the service account's entry.

Base64-encoded content of a valid krb5.conf file, specifying the settings and parameters required for Kerberos authentication.

LDAP password (relevant only for access-type=ldap)

The type of the OCI configuration to use [instance/apikey/resource] (relevant only for access-type=oci)

Signed certificate challenge encoded in base64. (relevant only for access-type=cert)

The universal_identity token (relevant only for access-type=universal_identity)

Returns a link to complete the authentication remotely (relevant only for access-type=saml/oidc)

LDAP username (relevant only for access-type=ldap)