A list of allowed email domains that users can use to authenticate with. This field is comma separated. Supports wildcards (e.g. *.example.com).

The configuration type to use for the OIDC configuration.

The issuer for the OIDC configuration. This is only supported when the OIDC configuration type is set to 'custom'.

The URL of the OIDC discovery endpoint.

The authorization endpoint to use for OIDC authorization. This is only supported when the OIDC configuration type is set to 'custom'.

The URL of the OIDC JWKS endpoint.

The token endpoint to use for OIDC token exchange.

The userinfo endpoint to get user information from the OIDC provider.

The client ID to use for OIDC authentication.

The client secret to use for OIDC authentication.

Whether to enable or disable this OIDC configuration.

The ID of the organization to create the OIDC config for.

Whether to manage group memberships for the OIDC configuration. If enabled, users will automatically be assigned groups when they sign in, based on which groups they are a member of in the OIDC provider.

The algorithm to use for JWT signature verification.