AzureActiveDirectoryRegistration Class

The configuration settings of the Azure Active Directory app registration.

Inheritance

Model

AzureActiveDirectoryRegistration

Constructor

AzureActiveDirectoryRegistration(*, open_id_issuer: Optional[str] = None, client_id: Optional[str] = None, client_secret_setting_name: Optional[str] = None, client_secret_certificate_thumbprint: Optional[str] = None, client_secret_certificate_subject_alternative_name: Optional[str] = None, client_secret_certificate_issuer: Optional[str] = None, **kwargs)

Parameters

open_id_issuer

str

Required

The OpenID Connect Issuer URI that represents the entity which issues access tokens for this application. When using Azure Active Directory, this value is the URI of the directory tenant, e.g. https://login.microsoftonline.com/v2.0/{tenant-guid}/. This URI is a case-sensitive identifier for the token issuer. More information on OpenID Connect Discovery: http://openid.net/specs/openid-connect-discovery-1_0.html.

client_id

str

Required

The Client ID of this relying party application, known as the client_id. This setting is required for enabling OpenID Connection authentication with Azure Active Directory or other 3rd party OpenID Connect providers. More information on OpenID Connect: http://openid.net/specs/openid-connect-core-1_0.html.

client_secret_setting_name

str

Required

The app setting name that contains the client secret of the relying party application.

client_secret_certificate_thumbprint

str

Required

An alternative to the client secret, that is the thumbprint of a certificate used for signing purposes. This property acts as a replacement for the Client Secret. It is also optional.

client_secret_certificate_subject_alternative_name

str

Required

An alternative to the client secret thumbprint, that is the subject alternative name of a certificate used for signing purposes. This property acts as a replacement for the Client Secret Certificate Thumbprint. It is also optional.

client_secret_certificate_issuer

str

Required

An alternative to the client secret thumbprint, that is the issuer of a certificate used for signing purposes. This property acts as a replacement for the Client Secret Certificate Thumbprint. It is also optional.