aaa authentication oidc client registration

Specifies whether the SSO system dynamically generates a client-id and client secret for the appliance, or whether the client client-id and client secret are manually added to the appliance.

If dynamic registration is set, each user's client-id and client-secret is retrieved from the IAM server dynamically using an API request. By default, dynamic registration is set, and FireEye recommends that you use dynamic registration.

Syntax

[no] aaa authentication oidc client registration { dynamic | static }

Parameters

no

Use the no form of this command to reset the value to the default dynamic value.

dynamic

(default) The client-id, client-secret pair is retrieved from the IAM server dynamically.

static

The client-id, client-secret pair is set manually.

Example

The following example enables dynamic client registration:

hostname (config) # aaa authentication oidc client registration dynamic

The following example enables static client registration:

hostname (config) # aaa authentication oidc client registration static

User role

Admin

Command mode

Config

Supported appliances