Iam

  • Identity Charmers | bundle
Channel Revision Published
latest/edge 8 12 Jul 2023
juju deploy iam --channel edge
Show information

Platform:

Learn about configurations >

  • apple_private_key | string

    The private key downloaded from Apple. To be used only with Apple providers.

  • apple_private_key_id | string

    The private key identifier generated by Apple. To be used only with Apple providers.

  • apple_team_id | string

    The Team ID provided by Apple. To be used only with Apple providers.

  • client_id | string

    The registered client_id

  • client_secret | string

    The registered client_secret

  • enabled | boolean

    Default: True

    Controls whether the provider is enabled.

  • issuer_url | string

    The issuer_url, this value is only used when provider is "generic" or "auth0"

  • jsonnet_mapper | string

    The jsonnet mapper that will be used for mapping the external idp claims to kratos attributes. For example: local claims = { email_verified: false, } + std.extVar('claims'); { identity: { traits: { [if 'email' in claims && claims.email_verified then 'email' else null]: claims.email, [if 'name' in claims then 'name' else null]: claims.name, [if 'given_name' in claims then 'given_name' else null]: claims.given_name, [if 'family_name' in claims then 'family_name' else null]: claims.family_name, }, }, } For more info see https://www.ory.sh/docs/kratos/reference/jsonnet.

  • label | string

    The text that will be shown to the user when asked to choose a provider, defaults to the provider type

  • microsoft_tenant_id | string

    The Microsoft tenant_id. To be used only with Microsoft providers.

  • provider | string

    Default: generic

    The provider name, must be one of the following: ["generic", "google", "facebook", "microsoft", "github", "apple", "gitlab", "auth0", "slack", "spotify", "discord", "twitch", "netid", "yandex", "vk", "dingtalk"]. Defaults to "generic"

  • provider_id | string

    The provider's ID to be used in Kratos. The redirect_uri is generated based on this. You must not have 2 providers with the same ID registered in Kratos.

  • scope | string

    Space separated list of allowed scopes for the provider.

  • secret_backend | string

    Default: relation

    The backend to use for passing sensitive information to Kratos.