OIDC

Issuer*

URL using the https scheme with no query or fragment components that the OP asserts as its Issuer Identifier

https://develop.veridium-dev.com

Subject attribute

Subject source attribute

userPrincipleName

ID Token Lifetime*

Lifetime of ID token

PT1H

Access Token Lifetime*

Lifetime of access token.

PT10M

Authorization Code Lifetime*

Lifetime of authorization code

PT5M

Refresh token default timeout*

The refresh token & token chain timeout

PT1H

Force PKCE

Whether client is required to use PKCE

Turned off

Allow PKCE plain

Whether client is allowed to use PKCE code challenge method "plain"

Turned off

Encode consent in tokens

Whether to embed consent decision(s) in access/refresh tokens and authorization code to allow for client-side consent storage

Turned off

Use Request Objects

Whether to enforce use of request objects

Turned off

Sign Request Object

Whether to enforce signing of request objects if they’re used.

Turned off

Encrypt Request Object

Whether to enforce encryption of request objects if they’re used.

Turned off

Subject salt*

The salt used in generating the subject

secret