oidc modify

Prev Next

This command modifies an existing OIDC provider.

Usage

oidc modify --id ID
           [--discovery-url URL]
           [--name NAME]
           [--user-jwt-attribute ATTRIBUTE]
           [--enable-verify-peer]
           [--disable-verify-peer]
           [--certificate]

Required Parameters

--id ID

Specifies the ID of the OIDC provider to modify.

Options

--name NAME

Specifies NAME as the new name for the OIDC provider.

--discovery-url URL

Specifies the discovery URL with configuration information for the OIDC provider.

--user-jwt-attribute ATTRIBUTE

Specifies ATTRIBUTE as the the JWT user identifier field in audit logs. Examples: name, email

--enable-verify-peer

Requires certificate verification of OIDC provider (peer). The provider is only trusted to handle requests after the certificate is verified.  Uses the certificate in the --certificate field.

--disable-verify-peer

Disables requirement for certificate verification of the peer. The peer is trusted without certificate verification.

--certificate CERTIFICATE

Specifies CERTIFICATE as the certificate, as a string.

Example

This example modifies the discovery URL for an OIDC provider with ID 1.

vcli: admin> oidc modify --id 1 --discovery-url https://example.com/.well-known/openid-configuration