doc.go 2.7 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849
  1. // Code generated by smithy-go-codegen DO NOT EDIT.
  2. // Package ssooidc provides the API client, operations, and parameter types for
  3. // AWS SSO OIDC.
  4. //
  5. // IAM Identity Center OpenID Connect (OIDC) is a web service that enables a
  6. // client (such as CLI or a native application) to register with IAM Identity
  7. // Center. The service also enables the client to fetch the user’s access token
  8. // upon successful authentication and authorization with IAM Identity Center.
  9. //
  10. // # API namespaces
  11. //
  12. // IAM Identity Center uses the sso and identitystore API namespaces. IAM Identity
  13. // Center OpenID Connect uses the sso-oauth namespace.
  14. //
  15. // # Considerations for using this guide
  16. //
  17. // Before you begin using this guide, we recommend that you first review the
  18. // following important information about how the IAM Identity Center OIDC service
  19. // works.
  20. //
  21. // - The IAM Identity Center OIDC service currently implements only the portions
  22. // of the OAuth 2.0 Device Authorization Grant standard ([https://tools.ietf.org/html/rfc8628] ) that are necessary to
  23. // enable single sign-on authentication with the CLI.
  24. //
  25. // - With older versions of the CLI, the service only emits OIDC access tokens,
  26. // so to obtain a new token, users must explicitly re-authenticate. To access the
  27. // OIDC flow that supports token refresh and doesn’t require re-authentication,
  28. // update to the latest CLI version (1.27.10 for CLI V1 and 2.9.0 for CLI V2) with
  29. // support for OIDC token refresh and configurable IAM Identity Center session
  30. // durations. For more information, see [Configure Amazon Web Services access portal session duration].
  31. //
  32. // - The access tokens provided by this service grant access to all Amazon Web
  33. // Services account entitlements assigned to an IAM Identity Center user, not just
  34. // a particular application.
  35. //
  36. // - The documentation in this guide does not describe the mechanism to convert
  37. // the access token into Amazon Web Services Auth (“sigv4”) credentials for use
  38. // with IAM-protected Amazon Web Services service endpoints. For more information,
  39. // see [GetRoleCredentials]in the IAM Identity Center Portal API Reference Guide.
  40. //
  41. // For general information about IAM Identity Center, see [What is IAM Identity Center?] in the IAM Identity
  42. // Center User Guide.
  43. //
  44. // [Configure Amazon Web Services access portal session duration]: https://docs.aws.amazon.com/singlesignon/latest/userguide/configure-user-session.html
  45. // [GetRoleCredentials]: https://docs.aws.amazon.com/singlesignon/latest/PortalAPIReference/API_GetRoleCredentials.html
  46. // [https://tools.ietf.org/html/rfc8628]: https://tools.ietf.org/html/rfc8628
  47. // [What is IAM Identity Center?]: https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html
  48. package ssooidc