OIDC Auth

Changed on

Update OIDC Auth configuration on machine identity

patch/api/v1/auth/oidc-auth/identities/{identityId}

Request

  • Base URL
    https://us.infisical.com
  • URL
    https://us.infisical.com/api/v1/auth/oidc-auth/identities/{identityId}
  • Auth
    HTTP bearer

Path parameters

identityIdstring required

The ID of the machine identity to update the auth method for.

Request body

oidcDiscoveryUrlstring uri

The new URL used to retrieve the OpenID Connect configuration from the identity provider.

caCertstring

The new PEM-encoded CA cert for establishing secure communication with the Identity Provider endpoints.

boundIssuerstring

The new unique identifier of the identity provider issuing the JWT.

boundAudiencesstring

The new list of intended recipients.

boundClaimsobject

The new attributes that should be present in the JWT for it to be valid.

claimMetadataMappingobject

The new attributes that should be present in the permission metadata from the JWT.

boundSubjectstring

The new expected principal that is the subject of the JWT.

accessTokenTTLinteger

The new lifetime for an access token in seconds.

accessTokenMaxTTLinteger

The new maximum lifetime for an access token in seconds.

accessTokenNumUsesLimitinteger

The new maximum number of times that an access token can be used.

templateIdstring uuid nullable

The ID of the OIDC auth template to link. While linked, identity provider settings are managed by the template and cannot be set individually. Pass null to unlink the template; the settings copied from it are kept.

Response

Default Response

Changes

  • 57c08724c66eRevision changes
    • info

      added the new optional request property

    • info

      added the optional property / to the response with the status