Authorization endpoint URL.
Client ID issued by the OIDC provider.
Optionalclient_Space-separated list of OIDC scopes requested at login.
Client secret issued by the OIDC provider.
Optionaldefault_If no matching attribute mapping exists for a user, the default template is used when creating the mailbox (not on update). Mailcow expects the template name as configured under "Mailbox templates".
Optionalignore_Skip TLS certificate validation when contacting the auth source.
Optionalimport_Whether new users discovered during a sync should be imported into Mailcow as mailboxes.
OptionalmappersAttribute values used to match a mailbox template. Each element pairs
positionally with templates -- the n-th mappers entry selects the
n-th templates entry.
Optionalperiodic_Whether Mailcow should periodically pull every user from the auth
source. Defaults to false; combine with sync_interval and
import_users to enable scheduled syncs.
Primary redirect URL registered with the provider.
Optionalredirect_Additional accepted redirect URLs.
Optionalsync_Interval, in minutes, between periodic syncs.
OptionaltemplatesMailbox template names. See mappers for how the two arrays are
correlated.
Token endpoint URL.
Userinfo endpoint URL.
Identity provider attributes for an arbitrary OIDC provider that is not Keycloak (Authentik, Auth0, Okta, ...).