# NormalizedProjectRevisionThirdPartyProvider
## Properties
Name | Type | Description | Notes
------------ | ------------- | ------------- | -------------
**aal2_acr_values** | Option<**Vec<String>**> | AAL2ACRValues lists upstream OIDC `acr` claim values that should elevate the resulting Kratos session to AAL2. Empty means the upstream `acr` claim is ignored when deciding session AAL. | [optional]
**aal2_amr_values** | Option<**Vec<String>**> | AAL2AMRValues lists upstream OIDC `amr` claim values that should elevate the resulting Kratos session to AAL2 when any of them appears in the upstream `amr` array. Empty means the upstream `amr` claim is ignored when deciding session AAL. | [optional]
**account_linking_mode** | Option<**String**> | AccountLinkingMode controls how account conflicts are resolved for this provider. Possible values are `confirm_with_existing_credential` (default) and `automatic`. `automatic` silently links accounts when the provider verifies email ownership. Only supported for `apple` and `google` providers. automatic AccountLinkingModeAutomatic AccountLinkingModeAutomatic silently links accounts if the provider verifies email ownership. confirm_with_existing_credential AccountLinkingModeConfirmWithExistingCredential AccountLinkingModeConfirmWithExistingCredential requires the user to confirm the account linking by providing an existing credential. | [optional]
**additional_id_token_audiences** | Option<**Vec<String>**> | AdditionalIDTokenAudiences is a list of additional audiences allowed in the ID Token. This is only relevant in OIDC flows that submit an IDToken instead of using the callback from the OIDC provider. | [optional]
**apple_private_key** | Option<**String**> | | [optional]
**apple_private_key_id** | Option<**String**> | Apple Private Key Identifier Sign In with Apple Private Key Identifier needed for generating a JWT token for client secret | [optional]
**apple_team_id** | Option<**String**> | Apple Developer Team ID Apple Developer Team ID needed for generating a JWT token for client secret | [optional]
**auth_url** | Option<**String**> | AuthURL is the authorize url, typically something like: https://example.org/oauth2/auth Should only be used when the OAuth2 / OpenID Connect server is not supporting OpenID Connect Discovery and when `provider` is set to `generic`. | [optional]
**azure_tenant** | Option<**String**> | Tenant is the Azure AD Tenant to use for authentication, and must be set when `provider` is set to `microsoft`. Can be either `common`, `organizations`, `consumers` for a multitenant application or a specific tenant like `8eaef023-2b34-4da1-9baa-8bc8c9d6a490` or `contoso.onmicrosoft.com`. | [optional]
**claims_source** | Option<**String**> | | [optional]
**client_id** | Option<**String**> | ClientID is the application's Client ID. | [optional]
**client_secret** | Option<**String**> | | [optional]
**created_at** | Option<**String**> | The Project's Revision Creation Date | [optional][readonly]
**fedcm_config_url** | Option<**String**> | | [optional]
**id** | Option<**String**> | | [optional]
**issuer_url** | Option<**String**> | IssuerURL is the OpenID Connect Server URL. You can leave this empty if `provider` is not set to `generic`. If set, neither `auth_url` nor `token_url` are required. | [optional]
**label** | Option<**String**> | Label represents an optional label which can be used in the UI generation. | [optional]
**mapper_url** | Option<**String**> | Mapper specifies the JSONNet code snippet which uses the OpenID Connect Provider's data (e.g. GitHub or Google profile information) to hydrate the identity's data. | [optional]
**net_id_token_origin_header** | Option<**String**> | | [optional]
**organization_id** | Option<**String**> | | [optional]
**pkce** | Option<**String**> | | [optional]
**project_revision_id** | Option<**String**> | The Revision's ID this provider belongs to | [optional]
**provider** | Option<**String**> | Provider is either \"generic\" for a generic OAuth 2.0 / OpenID Connect Provider or one of: generic google github gitlab microsoft discord slack facebook vk yandex apple | [optional]
**provider_id** | Option<**String**> | ID is the provider's ID | [optional]
**proxy_oidc_redirect_url** | Option<**String**> | Proxy OIDC Redirect URL if overriding with a customer-controlled URL | [optional][readonly]
**requested_claims** | Option<[**serde_json::Value**](.md)> | | [optional]
**scope** | Option<**Vec<String>**> | Scope specifies optional requested permissions. | [optional]
**state** | Option<**String**> | State indicates the state of the provider Only providers with state `enabled` will be used for authentication enabled ThirdPartyProviderStateEnabled disabled ThirdPartyProviderStateDisabled | [optional]
**subject_source** | Option<**String**> | | [optional]
**token_url** | Option<**String**> | TokenURL is the token url, typically something like: https://example.org/oauth2/token Should only be used when the OAuth2 / OpenID Connect server is not supporting OpenID Connect Discovery and when `provider` is set to `generic`. | [optional]
**update_identity_on_login** | Option<**String**> | UpdateIdentityOnLogin controls whether the identity is updated from OIDC claims on each login. Possible values are \"never\" (default) and \"automatic\". never UpdateIdentityOnLoginNever UpdateIdentityOnLoginNever disables identity updates on login (default). automatic UpdateIdentityOnLoginAutomatic UpdateIdentityOnLoginAutomatic re-runs the Jsonnet claims mapper on every OIDC login and updates the identity's traits and metadata automatically. | [optional]
**updated_at** | Option<**String**> | Last Time Project's Revision was Updated | [optional][readonly]
[[Back to Model list]](../README.md#documentation-for-models) [[Back to API list]](../README.md#documentation-for-api-endpoints) [[Back to README]](../README.md)