OidcUserinfo#

class OidcUserinfo(iss=None, sub=None, sub_type=None, exp=None, iat=None, email=None, is_email_verified=None, name=None, user_id=None, connector_id=None, groups=None, tenant=None, custom_claims=None, legacy_roles=None, ext_id=None, links=None, tenant_id=None, *args, **kwargs)#

Bases: ExternalizableAbstractModel

IAM OpenID userinfo response.

Parameters:

  • iss – (iss) Base URL of the identity service which it asserts as its issuer identifier.

  • sub – (sub) Subject identifier. A locally unique identifier for the end user.

  • sub_type – (sub_type)

  • exp – (exp) Expiration time for the identity claims in seconds since epoch.

  • iat – (iat) Time at which the identity claims were issued in seconds since epoch.

  • email (max=255 chars) – (email) Email address of the subject.

  • is_email_verified – (is_email_verified) Boolean to indicate if the email address of end user has been verified by IAM.

  • name (min=1 chars, max=255 chars) – (name) Display name of the user including the first and last name.

  • user_id – (user_id) UUID V5 created for the user by IAM.

  • connector_id – (connector_id) UUID V5 of the authentication connector that was used to verify the credentials of the user.

  • groups – (groups) List of groups obtained from the authentication provider for the user.

  • tenant – (tenant)

  • custom_claims – (custom_claims) Any additional user attributes obtained from the authentication provider in the form of key/value pairs.

  • legacy_roles – (legacy_roles) List of legacy Prism roles for the user.

property connector_id#

UUID V5 of the authentication connector that was used to verify the credentials of the user.

Type:

str

property custom_claims#

Any additional user attributes obtained from the authentication provider in the form of key/value pairs.

Type:

dict(str, str)

property email#

Email address of the subject.

Type:

str

property exp#

Expiration time for the identity claims in seconds since epoch.

Type:

int

property groups#

List of groups obtained from the authentication provider for the user.

Type:

list[ Group ]

property iat#

Time at which the identity claims were issued in seconds since epoch.

Type:

int

property is_email_verified#

Boolean to indicate if the email address of end user has been verified by IAM.

Type:

bool

property iss#

Base URL of the identity service which it asserts as its issuer identifier.

Type:

str

property legacy_roles#

List of legacy Prism roles for the user.

Type:

list[ str ]

property name#

Display name of the user including the first and last name.

Type:

str

property sub#

Subject identifier. A locally unique identifier for the end user.

Type:

str

property sub_type#
Type:

OidcSubjectType

property tenant#
Type:

Tenant

to_dict()#

Returns the model properties as a dictionary

to_str()#

Returns the string representation of the model

property user_id#

UUID V5 created for the user by IAM.

Type:

str