Default value: N/A

Example: The expression request.method == "POST" causes the policy to execute only on POST requests.

Select to use an OpenID Connect (OIDC) vendor as the 3rd-party IdP.

Required. The OIDC discovery document URL.

Required. The authorization endpoint for the IdP from the Discovery Document.

The algorithm used to generate the JSON Web Token. The Discovery Document contains an id_token_signing_alg_values_supported element that specifies the supported algorithms.

Default value: RS256

Required. The list of scopes required to get information about a user. The list of scopes becomes a list of roles and your Policy needs to authorize one with the Authorize By Role Policy policy. If the open discovery document doesn't define a role, APIM defaults to the openid role. Click the plus icon to add the name of one or more scopes.

Required. The provider’s access token URL.

Example: https://github.com/login/oauth/access_token

Required. The ID of the SnapLogic application registered with the OAuth2 provider.

Required. The client secret for the SnapLogic application registered with the OAuth2 provider.

Example: https://groundplex.example.com/api/1/rest/oauth2/callback

Required. The number of seconds for which the session is active. Refer to OAuth session management for information on manually closing sessions.

Default value: 86400

Example: 90000

Required. The number of seconds for which the OAuth state is active.

Default value: 300

Example: 1000

Default value: Authorizes requests using specified OAuth service.