Table of Contents

Class GetSsoTokenResponse

Namespace
Amazon.Runtime.SharedInterfaces
Assembly
AWSSDK.Core.dll
public class GetSsoTokenResponse
Inheritance
GetSsoTokenResponse
Inherited Members

Constructors

GetSsoTokenResponse()

public GetSsoTokenResponse()

Properties

AccessToken

The SSO login token that can be exchanged for temporary AWS credentials.

public string AccessToken { get; set; }

Property Value

string

ClientId

The client ID generated when performing the registration portion of the OIDC authorization flow. The clientId is used alongside the RefreshToken to refresh the AccessToken.

public string ClientId { get; set; }

Property Value

string

ClientSecret

he client secret generated when performing the registration portion of the OIDC authorization flow. The ClientSecret is used alongside the RefreshToken to refresh the AccessToken.

public string ClientSecret { get; set; }

Property Value

string

ExpiresAt

When AccessToken expires

public DateTime ExpiresAt { get; set; }

Property Value

DateTime

RefreshToken

An opaque string returned by the sso-oidc service.

public string RefreshToken { get; set; }

Property Value

string

Region

The configured sso_region for the profile that credentials are being resolved for. This field is set as a convenience and is not directly used by the token provider but is useful in other contexts. Logic that requires the SSO region as part of the SSO token provider MUST use the SSO region configured on the profile and MUST NOT use the region in the cached token.

public string Region { get; set; }

Property Value

string

RegistrationExpiresAt

The expiration time of the client registration (ClientId and ClientSecret) as an RFC 3339 formatted timestamp.

public string RegistrationExpiresAt { get; set; }

Property Value

string

StartUrl

The configured sso_start_url for the profile that credentials are being resolved for. This field is set as a convenience and is not directly used by the token provider but is useful in other contexts. Logic that requires the SSO start URL as part of the SSO token provider MUST use the SSO start URL configured on the profile and MUST NOT use the SSO start URL in the cached token.

public string StartUrl { get; set; }

Property Value

string