atlas federatedAuthentication federationSettings identityProvider create oidc

--associatedDomain

strings

false

List of domains associated with the Identity Provider.

--audience

string

true

Identifier of the intended recipient of the token.

--authorizationType

string

true

Type of authorization. Valid values are GROUP or USER.

--clientId

string

false

Client identifier that is assigned to an application by the Identity Provider.

--desc

string

true

Description of the Identity Provider.

--federationSettingsId

string

true

Unique 24-hexadecimal digit string that identifies the federation settings.

--groupsClaim

string

true

Identifier of the claim which contains IdP Group IDs in the token.

-h, --help

false

help for oidc

--idpType

string

true

Type of Identity Provider. Valid values are WORKFORCE or WORKLOAD.

--issuerUri

string

true

Unique string that identifies the issuer of the OIDC metadata/discovery document URL.

-o, --output

string

false

Output format. Valid values are json, json-path, go-template, or go-template-file. To see the full output, use the -o json option.

--requestedScope

strings

false

Scopes that MongoDB applications will request from the authorization endpoint.

--userClaim

string

true

Identifier of the claim which contains the user ID in the token.