The OpenID Connect provider ID. The default provider ID is "default".

The authorization code. It is only required for "authorization_code" grant types.

The code verifier. This optional attribute is for "authorization_code" grant types, when public clients are being used.

The redirect URI. It is only required for "authorization_code" grant types.

Username credential. Only required for "password" grant type.

Password credential. Only required for "password" grant type.

Device verification code. Only required for "urn:ietf:params:oauth:grant-type:device_code" grant type.

The refresh token. It is only required for "refresh_token" grant types.

The API client's or OIDC application's client ID that is required when the basic authorization header is not set.

The API client's or OIDC application's client secret that is required when the basic authorization header is not set and the client is not a public client.

Signed and/or encrypted JWT-bearer token. It is only required for "urn:ietf:params:oauth:grant-type:jwt-bearer" grant type.

The JWT assertion being used to authenticate the client.

The format of client assertion. When using client_secret_jwt or private_key_jwt client assertion, the value here must be urn:ietf:params:oauth:client-assertion-type:jwt-bearer.

The grant type. The valid grant types for API clients is: client_credentials. The valid grant types for OIDC applications are: authorization_code, refresh_token, password, urn:ietf:params:oauth:grant-type:device_code and urn:ietf:params:oauth:grant-type:jwt-bearer

A space-delimited list of scopes that are associated with this token.

The basic authorization header that contains a base64-encoded client ID and the client secret. Use this header as an alternative to sending the client ID and secret in the form parameters.