Class IdentityProviderConfiguration

    • Method Detail

      • fineGrainedAuthorizationEnabled

        public final Boolean fineGrainedAuthorizationEnabled()

        If you enabled fine-grained authorization when you created the data store.

        Returns:
        If you enabled fine-grained authorization when you created the data store.
      • metadata

        public final String metadata()

        The JSON metadata elements that you want to use in your identity provider configuration. Required elements are listed based on the launch specification of the SMART application. For more information on all possible elements, see Metadata in SMART's App Launch specification.

        authorization_endpoint: The URL to the OAuth2 authorization endpoint.

        grant_types_supported: An array of grant types that are supported at the token endpoint. You must provide at least one grant type option. Valid options are authorization_code and client_credentials.

        token_endpoint: The URL to the OAuth2 token endpoint.

        capabilities: An array of strings of the SMART capabilities that the authorization server supports.

        code_challenge_methods_supported: An array of strings of supported PKCE code challenge methods. You must include the S256 method in the array of PKCE code challenge methods.

        Returns:
        The JSON metadata elements that you want to use in your identity provider configuration. Required elements are listed based on the launch specification of the SMART application. For more information on all possible elements, see Metadata in SMART's App Launch specification.

        authorization_endpoint: The URL to the OAuth2 authorization endpoint.

        grant_types_supported: An array of grant types that are supported at the token endpoint. You must provide at least one grant type option. Valid options are authorization_code and client_credentials.

        token_endpoint: The URL to the OAuth2 token endpoint.

        capabilities: An array of strings of the SMART capabilities that the authorization server supports.

        code_challenge_methods_supported: An array of strings of supported PKCE code challenge methods. You must include the S256 method in the array of PKCE code challenge methods.

      • idpLambdaArn

        public final String idpLambdaArn()

        The Amazon Resource Name (ARN) of the Lambda function that you want to use to decode the access token created by the authorization server.

        Returns:
        The Amazon Resource Name (ARN) of the Lambda function that you want to use to decode the access token created by the authorization server.
      • hashCode

        public final int hashCode()
        Overrides:
        hashCode in class Object
      • equals

        public final boolean equals​(Object obj)
        Overrides:
        equals in class Object
      • toString

        public final String toString()
        Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value.
        Overrides:
        toString in class Object
      • getValueForField

        public final <T> Optional<T> getValueForField​(String fieldName,
                                                      Class<T> clazz)