Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
documentation:latest:idpopenidconnect [2019/11/04 11:20]
127.0.0.1 external edit
documentation:latest:idpopenidconnect [2019/12/21 15:14] (current)
Line 154: Line 154:
   * **ID Token signature algorithm**:​ Select one of ''​none'',​ ''​HS256'',​ ''​HS384'',​ ''​HS512'',​ ''​RS256'',​ ''​RS384'',​ ''​RS512''​   * **ID Token signature algorithm**:​ Select one of ''​none'',​ ''​HS256'',​ ''​HS384'',​ ''​HS512'',​ ''​RS256'',​ ''​RS384'',​ ''​RS512''​
   * **ID Token expiration**:​ Expiration time of ID Tokens. The default value is one hour.   * **ID Token expiration**:​ Expiration time of ID Tokens. The default value is one hour.
 +  * **Force claims to be returned in ID Token**: This options will make user attributes from the requested scope appear as ID Token claims.
   * **Access token expiration**:​ Expiration time of Access Tokens. The default value is one hour.   * **Access token expiration**:​ Expiration time of Access Tokens. The default value is one hour.
   * **Authorization Code expiration**:​ Expiration time of authorization code, when using the Authorization Code flow. The default value is one minute.   * **Authorization Code expiration**:​ Expiration time of authorization code, when using the Authorization Code flow. The default value is one minute.
Line 165: Line 166:
  
 Associate attributes to extra claims if the RP request them, for example ''​birth''​ => ''​birthplace birthcountry''​ Associate attributes to extra claims if the RP request them, for example ''​birth''​ => ''​birthplace birthcountry''​
 +
 +=== Macros ===
 +
 +You can define here macros that will be only evaluated for this service, and not registered in the session of the user.
  
 === Display === === Display ===