UpdateOidcConfigurationInput is an input datatype for updating an OIDC configuration. It's used by the updateOIDCIdentityProvider() mutation field.

Table: UpdateOidcConfigurationInput

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results. 
Table last updated: Oct 14, 2026 
JWKSEndpointString  Long-Term A URL to the JWKS endpoint for retrieving keys for validating tokens. Required.
authorizationEndpointStringyes Long-Term A URL to the endpoint a user should be redirected to when authorizing. Required for clients.
clientIDStringyes Long-Term The unique identifier for the client.
clientSecretStringyes Long-Term The client's password or passphrase for the identity provider.
defaultIdpBoolean  Long-Term The default identity provider.
domainsStringyes Long-Term The domains associated with the OIDC configuration.
enableDebugBooleanyes Long-Term Whether to enable debugging.
federatedIdpString  Long-Term The Federated IdP.
groupsClaimString  Long-Term The name of the claim to interpret as the groups in LogScale. The value in the claim must be an array of strings. Optional. Defaults to humio-groups.
humioOwnedBoolean  Long-Term Whether authentication is managed by LogScale.
idStringyes Long-Term The unique identifier for the OpenId Connect (OIDC) configuration to update.
issuerStringyes Long-Term The issuer of the OIDC.
lazyCreateUsersBoolean  Long-Term Whether to wait to create users until necessary.
nameStringyes Long-Term The name of the OIDC identify provider.
registrationEndpointString  Long-Term To use OIDC as a client, PUBLIC_URL must be set, LogScale must be registered as a client with your OpenID provider, and the provider must allow %PUBLIC_URL%/auth/oidc as a valid redirect endpoint for the client.
scopeClaimString  Long-Term The claim or user attributes for the scope.
scopesStringyes Long-Term Comma-separated list of scopes to add in addition to the default requested scopes (openid, email, and profile).
tokenEndpointString  Long-Term A URL to the token endpoint used to exchange a authentication code to an access token. Required for clients.
tokenEndpointAuthMethodStringyes Long-Term The authentication method used to authenticate LogScale against the token endpoint. Can either be client_secret_basic or client_secret_post for placing the client id and secret in either basic auth or post data, respectively. Defaults to client_secret_basic, or client_secret_post if client_secret_basic is not supported as per the discovery endpoint.
userClaimStringyes Long-Term The name of the claim to interpret as username in LogScale. The value in the claim must be a string. Defaults to humio-user. Can be set to email if using emails as usernames.
userInfoEndpointString  Long-Term A URL to the user info endpoint used to retrieve user information from an access token.