Skip to content

/AWS1/CL_SSAOIDCJWTUPDATECONF

A structure that describes updated configuration settings for a trusted token issuer that supports OpenID Connect (OIDC) and JSON Web Tokens (JWTs).

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_claimattributepath TYPE /AWS1/SSACLAIMATTRIBUTEPATH /AWS1/SSACLAIMATTRIBUTEPATH

The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by this JMESPath expression is compared against the attribute mapped by IdentityStoreAttributePath when a trusted token issuer token is exchanged for an IAM Identity Center token.

iv_identitystoreattrpath TYPE /AWS1/SSAJMESPATH /AWS1/SSAJMESPATH

The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by ClaimAttributePath when a trusted token issuer token is exchanged for an IAM Identity Center token.

iv_jwksretrievaloption TYPE /AWS1/SSAJWKSRETRIEVALOPTION /AWS1/SSAJWKSRETRIEVALOPTION

The method that the trusted token issuer can use to retrieve the JSON Web Key Set used to verify a JWT.


Queryable Attributes

ClaimAttributePath

The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by this JMESPath expression is compared against the attribute mapped by IdentityStoreAttributePath when a trusted token issuer token is exchanged for an IAM Identity Center token.

Accessible with the following methods

Method Description
GET_CLAIMATTRIBUTEPATH() Getter for CLAIMATTRIBUTEPATH, with configurable default
ASK_CLAIMATTRIBUTEPATH() Getter for CLAIMATTRIBUTEPATH w/ exceptions if field has no
HAS_CLAIMATTRIBUTEPATH() Determine if CLAIMATTRIBUTEPATH has a value

IdentityStoreAttributePath

The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by ClaimAttributePath when a trusted token issuer token is exchanged for an IAM Identity Center token.

Accessible with the following methods

Method Description
GET_IDENTITYSTOREATTRPATH() Getter for IDENTITYSTOREATTRIBUTEPATH, with configurable def
ASK_IDENTITYSTOREATTRPATH() Getter for IDENTITYSTOREATTRIBUTEPATH w/ exceptions if field
HAS_IDENTITYSTOREATTRPATH() Determine if IDENTITYSTOREATTRIBUTEPATH has a value

JwksRetrievalOption

The method that the trusted token issuer can use to retrieve the JSON Web Key Set used to verify a JWT.

Accessible with the following methods

Method Description
GET_JWKSRETRIEVALOPTION() Getter for JWKSRETRIEVALOPTION, with configurable default
ASK_JWKSRETRIEVALOPTION() Getter for JWKSRETRIEVALOPTION w/ exceptions if field has no
HAS_JWKSRETRIEVALOPTION() Determine if JWKSRETRIEVALOPTION has a value