Create OIDC Test Configuration

can

lock

object

Operations the current user is able to perform on this object

alternate_email_login_allowed

boolean

Allow alternate email-based login via '/login/email' for admins and for specified users with the 'login_special_email' permission. This option is useful as a fallback during ldap setup, if ldap config problems occur later, or if you need to support some users who are not in your ldap directory. Looker email/password logins are always disabled for regular users when ldap is enabled.

audience

string

OpenID Provider Audience

auth_requires_role

boolean

Users will not be allowed to login at all unless a role for them is found in OIDC if set to true

authorization_endpoint

string

OpenID Provider Authorization Url

default_new_user_group_ids

string[]

default_new_user_groups

Group[]

default_new_user_role_ids

string[]

default_new_user_roles

Role[]

enabled

boolean

Enable/Disable OIDC authentication for the server

groups

OIDCGroupRead[]

groups_attribute

string

Name of user record attributes used to indicate groups. Used when 'groups_finder_type' is set to 'grouped_attribute_values'

groups_with_role_ids

OIDCGroupWrite[]

identifier

string

Relying Party Identifier (provided by OpenID Provider)

issuer

string

OpenID Provider Issuer

modified_at

lock

string

When this config was last modified

modified_by

lock

string

User id of user who last modified this config

new_user_migration_types

string

Merge first-time oidc login to existing user account by email addresses. When a user logs in for the first time via oidc this option will connect this user into their existing account by finding the account with a matching email address by testing the given types of credentials for existing users. Otherwise a new user account will be created for the user. This list (if provided) must be a comma separated list of string like 'email,ldap,google'

scopes

string[]

secret

string

(Write-Only) Relying Party Secret (provided by OpenID Provider)

set_roles_from_groups

boolean

Set user roles in Looker based on groups from OIDC

test_slug

lock

string

Slug to identify configurations that are created in order to run a OIDC config test

token_endpoint

string

OpenID Provider Token Url

user_attribute_map_email

string

Name of user record attributes used to indicate email address field

user_attribute_map_first_name

string

Name of user record attributes used to indicate first name

user_attribute_map_last_name

string

Name of user record attributes used to indicate last name

user_attributes

OIDCUserAttributeRead[]

user_attributes_with_ids

OIDCUserAttributeWrite[]

userinfo_endpoint

string

OpenID Provider User Information Url

allow_normal_group_membership

boolean

Allow OIDC auth'd users to be members of non-reflected Looker groups. If 'false', user will be removed from non-reflected groups on login.

allow_roles_from_normal_groups

boolean

OIDC auth'd users will inherit roles from non-reflected Looker groups.

allow_direct_roles

boolean

Allows roles to be directly assigned to OIDC auth'd users.

url

lock

string

Link to get this item