IExternalAuthUpdate Interface

Definition

Namespace:: Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models

Assembly:: Az.RedHatOpenShiftHcp.private.dll

Important

Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

[System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.ExternalAuthUpdateTypeConverter))]
public interface IExternalAuthUpdate : Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.IProxyResource

[<System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.ExternalAuthUpdateTypeConverter))>]
type IExternalAuthUpdate = interface
    interface IJsonSerializable
    interface IProxyResource
    interface IResource

Public Interface IExternalAuthUpdate
Implements IProxyResource

Derived: Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.ExternalAuthUpdate

Attributes: TypeConverterAttribute

Implements: IProxyResource IResource IJsonSerializable

Properties

Name	Description
ClaimValidationRule	The claim validation rules.
Client	External Auth OIDC clients There must not be more than 20 entries and entries must have unique namespace/name pairs.
GroupClaim	Claim name of the external profile
GroupPrefix	Prefix for the claim external profile. If this is specified, prefixPolicy will be set to "Prefix" by default.
Id	Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}" (Inherited from IResource)
IssuerAudience	This configures the acceptable audiences for JWT tokens issued by the identity provider. At least one of the entries must match the 'aud' claim in the JWT token. Audiences must contain at least one entry and must not exceed ten entries.
IssuerCa	The issuer of the token. Certificate bundle to use to validate server certificates for the configured URL. It must be PEM encoded and when not specified, the system trust is used.
IssuerUrl	This configures the URL used to issue tokens by the identity provider. The Kubernetes API server determines how authentication tokens should be handled by matching the 'iss' claim in the JWT to the issuerURL of configured identity providers. issuerURL must use the 'https' scheme.
Name	The name of the resource (Inherited from IResource)
SystemDataCreatedAt	The timestamp of resource creation (UTC). (Inherited from IResource)
SystemDataCreatedBy	The identity that created the resource. (Inherited from IResource)
SystemDataCreatedByType	The type of identity that created the resource. (Inherited from IResource)
SystemDataLastModifiedAt	The timestamp of resource last modification (UTC) (Inherited from IResource)
SystemDataLastModifiedBy	The identity that last modified the resource. (Inherited from IResource)
SystemDataLastModifiedByType	The type of identity that last modified the resource. (Inherited from IResource)
Type	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts" (Inherited from IResource)
UsernameClaim	Claim name of the external profile
UsernamePrefix	Prefix for the claim external profile. Must be set when the prefixPolicy field is set to 'Prefix' and must be unset otherwise.
UsernamePrefixPolicy	Prefix policy is an optional field that configures how a prefix should be applied to the value of the JWT claim specified in the 'claim' field. Allowed values are 'Prefix', 'NoPrefix', and 'None'. If not specified, the default policy is 'None'. When set to 'Prefix', the value specified in the prefix field will be prepended to the value of the JWT claim. The prefix field must be set when prefixPolicy is 'Prefix'. When set to 'NoPrefix', no prefix will be prepended to the value of the JWT claim. When set to 'None', this means no opinion and the platform is left to choose any prefixes that are applied which is subject to change over time. Currently, the platform prepends `{issuerURL}#` to the value of the JWT claim when the claim is not 'email'. As an example, consider the following scenario: `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`, the JWT claims include "username":"userA" and "email":"userA

Methods

Name	Description
ToJson(JsonObject, SerializationMode)	(Inherited from IJsonSerializable)

Applies to