# IncludedOauth2TenantEndpoints

Optional tenant OAuth endpoints for IdPs that use CloudFormation `IncludedOauth2ProviderConfig` with issuer and/or endpoints per the IdP’s outbound documentation.

- Source: [`aws-bedrockagentcore/lib/identity/oauth2-credential-provider.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-bedrockagentcore/lib/identity/oauth2-credential-provider.ts#L397)
- Type last changed: v2.255.0 · 19 May 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_bedrockagentcore as bedrockagentcore } from 'aws-cdk-lib';
const includedOauth2TenantEndpoints: bedrockagentcore.IncludedOauth2TenantEndpoints = {
  authorizationEndpoint: 'authorizationEndpoint',
  issuer: 'issuer',
  tokenEndpoint: 'tokenEndpoint',
};
```

## Properties

- `authorizationEndpoint`: string — OAuth2 authorization endpoint for your tenant.

  **Default:** not specified; use when your IdP requires an explicit endpoint

- `issuer`: string — Token issuer URL for your tenant (often the IdP base or issuer URI).

  **Default:** not specified; use when your IdP requires an explicit issuer

- `tokenEndpoint`: string — OAuth2 token endpoint for your tenant.

  **Default:** not specified; use when your IdP requires an explicit endpoint