Docs: improve bound_audiences documentation for jwt role (#18265)

This commit is contained in:
Roberto Pommella Alegro
2022-12-07 14:50:09 -03:00
committed by GitHub
parent f80e788129
commit b2354e5aed

View File

@@ -111,7 +111,8 @@ entities attempting to login. At least one of the bound values must be set.
- `name` `(string: <required>)` - Name of the role.
- `role_type` `(string: <optional>)` - Type of role, either "oidc" (default) or "jwt".
- `bound_audiences` `(array: <optional>)` - List of `aud` claims to match against.
Any match is sufficient. Required for "jwt" roles, optional for "oidc" roles.
Any match is sufficient. For "jwt" roles, at least one of `bound_audiences`, `bound_subject`,
`bound_claims` or `token_bound_cidrs` is required. Optional for "oidc" roles.
- `user_claim` `(string: <required>)` - The claim to use to uniquely identify
the user; this will be used as the name for the Identity entity alias created
due to a successful login. The claim value must be a string.