Struct SsoConfig 

pub struct SsoConfig {
    pub provider: SsoProvider,
    pub issuer: String,
    pub client_id: String,
    pub client_secret: Option<String>,
    pub redirect_uri: String,
    pub scopes: Vec<String>,
    pub identity_claim: String,
    pub groups_claim: String,
    pub required: bool,
}

SSO configuration in [sso] config section.

Fields

provider: SsoProvider

SSO provider type

issuer: String

OIDC issuer URL (e.g. “https://myorg.okta.com”, “https://accounts.google.com”)

client_id: String

OIDC client ID

client_secret: Option<String>

OIDC client secret (optional, for confidential clients)

redirect_uri: String

Redirect URI for the device/local auth flow

scopes: Vec<String>

OIDC scopes to request

identity_claim: String

Claim to use as the identity (default: “email”)

groups_claim: String

Claim to use for group/team membership (default: “groups”)

required: bool

Whether SSO is required (if false, falls back to local identity)

Trait Implementations

impl Clone for SsoConfig

fn clone(&self) -> SsoConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SsoConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SsoConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SsoConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.