doc.go 2.4 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. // Code generated by smithy-go-codegen DO NOT EDIT.
  2. // Package ssooidc provides the API client, operations, and parameter types for AWS
  3. // SSO OIDC.
  4. //
  5. // AWS IAM Identity Center (successor to AWS Single Sign-On) OpenID Connect (OIDC)
  6. // is a web service that enables a client (such as AWS CLI or a native application)
  7. // to register with IAM Identity Center. The service also enables the client to
  8. // fetch the user’s access token upon successful authentication and authorization
  9. // with IAM Identity Center. Although AWS Single Sign-On was renamed, the sso and
  10. // identitystore API namespaces will continue to retain their original name for
  11. // backward compatibility purposes. For more information, see IAM Identity Center
  12. // rename
  13. // (https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed).
  14. // Considerations for Using This Guide Before you begin using this guide, we
  15. // recommend that you first review the following important information about how
  16. // the IAM Identity Center OIDC service works.
  17. //
  18. // * The IAM Identity Center OIDC
  19. // service currently implements only the portions of the OAuth 2.0 Device
  20. // Authorization Grant standard (https://tools.ietf.org/html/rfc8628
  21. // (https://tools.ietf.org/html/rfc8628)) that are necessary to enable single
  22. // sign-on authentication with the AWS CLI. Support for other OIDC flows frequently
  23. // needed for native applications, such as Authorization Code Flow (+ PKCE), will
  24. // be addressed in future releases.
  25. //
  26. // * The service emits only OIDC access tokens,
  27. // such that obtaining a new token (For example, token refresh) requires explicit
  28. // user re-authentication.
  29. //
  30. // * The access tokens provided by this service grant
  31. // access to all AWS account entitlements assigned to an IAM Identity Center user,
  32. // not just a particular application.
  33. //
  34. // * The documentation in this guide does not
  35. // describe the mechanism to convert the access token into AWS Auth (“sigv4”)
  36. // credentials for use with IAM-protected AWS service endpoints. For more
  37. // information, see GetRoleCredentials
  38. // (https://docs.aws.amazon.com/singlesignon/latest/PortalAPIReference/API_GetRoleCredentials.html)
  39. // in the IAM Identity Center Portal API Reference Guide.
  40. //
  41. // For general information
  42. // about IAM Identity Center, see What is IAM Identity Center?
  43. // (https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) in the
  44. // IAM Identity Center User Guide.
  45. package ssooidc