---
title: authenticationConfiguration
slug: /main-concepts/metadata-standard/schemas/configuration/authenticationconfiguration
---

# AuthenticationConfiguration

*This schema defines the Authentication Configuration.*

## Properties

- **`clientType`** *(string)*: Client Type. Must be one of: `['public', 'confidential']`. Default: `public`.
- **`provider`**: Refer to *../entity/services/connections/metadata/openMetadataConnection.json#/definitions/authProvider*.
- **`responseType`**: This is used by auth provider provide response as either id_token or code. Refer to *#/definitions/responseType*.
- **`providerName`** *(string)*: Custom OIDC Authentication Provider Name.
- **`publicKeyUrls`** *(array)*: List of Public Key URLs.
  - **Items** *(string)*
- **`tokenValidationAlgorithm`** *(string)*: Token Validation Algorithm to use. Must be one of: `['RS256', 'RS384', 'RS512']`. Default: `RS256`.
- **`authority`** *(string)*: Authentication Authority.
- **`clientId`** *(string)*: Client ID.
- **`callbackUrl`** *(string)*: Callback URL.
- **`jwtPrincipalClaims`** *(array)*: Jwt Principal Claim.
  - **Items** *(string)*
- **`jwtPrincipalClaimsMapping`** *(array)*: Jwt Principal Claim Mapping.
  - **Items** *(string)*
- **`enableSelfSignup`** *(boolean)*: Enable Self Sign Up. Default: `False`.
- **`ldapConfiguration`**: LDAP Configuration in case the Provider is LDAP. Refer to *./ldapConfiguration.json*.
- **`samlConfiguration`**: Saml Configuration that is applicable only when the provider is Saml. Refer to *../security/client/samlSSOClientConfig.json*.
- **`oidcConfiguration`**: Oidc Configuration for Confidential Client Type. Refer to *../security/client/oidcClientConfig.json*.
## Definitions

- **`responseType`** *(string)*: Response Type. Must be one of: `['id_token', 'code']`. Default: `id_token`.


Documentation file automatically generated at 2025-08-12 05:39:47.683420+00:00.