You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/raw/project/applications/oidc.md
+33-1Lines changed: 33 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -78,6 +78,27 @@ the user to authenticate via the Descope flow, regardless of the SP's request.
78
78
79
79
80
80
81
+
backchannel_logout_url
82
+
----------------------
83
+
84
+
- Type: `string`
85
+
86
+
The URL that Descope notifies with a logout token when the user's session ends,
87
+
as per the [OIDC Back-Channel Logout](https://openid.net/specs/openid-connect-backchannel-1_0.html)
88
+
specification. Leave empty to disable back-channel logout notifications for this application.
89
+
90
+
91
+
92
+
custom_idp_initiated_login_page_url
93
+
-----------------------------------
94
+
95
+
- Type: `string`
96
+
97
+
A custom login page URL to redirect users to on IdP-initiated login flows,
98
+
instead of the default login page.
99
+
100
+
101
+
81
102
client_id
82
103
---------
83
104
@@ -179,7 +200,18 @@ default_audience
179
200
180
201
- Type: `string`
181
202
182
-
Controls the default `aud` claim of tokens issued for this application. One of `"projectId"` (the project ID only), `"clientId"` (the dedicated client ID only), or `""` (default — both). Only applies to modern apps that set a `client_type`; legacy apps always use the project ID, so the empty default leaves their behavior unchanged.
203
+
Controls the default `aud` claim of tokens issued for this application. One of `"projectId"` (the project ID only), `"clientId"` (the dedicated client ID only), `"appId"` (the application ID only), `"empty"` (no `aud` claim at all), or `""` (default — both the project ID and the client ID). Only applies to modern apps that set a `client_type`; legacy apps always use the project ID, so the empty default leaves their behavior unchanged.
204
+
205
+
206
+
207
+
trusted_apps_audience
208
+
---------------------
209
+
210
+
- Type: `string`
211
+
212
+
Controls the audience values appended to the issued token's `aud` claim for trusted sibling
213
+
applications. One of `"projectId"`, `"clientId"`, `"appId"`, `"empty"` (add none), or `""`
214
+
(default — both the project ID and the client ID). Independent of `default_audience`.
0 commit comments