# OidcResourceServerAuthenticationModuleType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

OpenID Connect resource server.

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
jwt | container JwtOidcResourceServerType | [0,1] | Define that resource server expect token in format JWT.
opaqueToken | container OpaqueTokenOidcResourceServerType | [0,1] | Define that resource server expect opaque token, which have to be verified by user info endpoint.
realm | property string | [0,1] | Realm which Midpoint use for WWW-Authentication header Deprecated use attribute in token definition instead
issuerUri | property string | [0,1] | Issuer identifier uri for the OpenID Connect provider.
jwkSetUri | property string | [0,1] | Uri for the JSON Web Key (JWK) Set endpoint.
nameOfUsernameClaim | property string | [0,1] | Name of claim in jwt, which value define name of user in Midpoint.
singleSymmetricKey | property ProtectedStringType | [0,1] | Trusting a Single Asymmetric Key.
trustedAlgorithm | property string | [0,1] | Trusted Algorithms.
trustingAsymmetricCertificate | property ProtectedStringType | [0,1] | Certificate of trusting a single asymmetric RSA public key.
keyStoreTrustingAsymmetricKey | container AbstractKeyStoreKeyType | [0,1] | Key store with trusting a single asymmetric RSA public key.

- ### Items

  - #### jwt

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Define that resource server expect token in format JWT.

  - #### opaqueToken

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Define that resource server expect opaque token, which have to be verified by user info endpoint.

  - #### realm

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Realm which Midpoint use for WWW-Authentication header

    Deprecated use attribute in token definition instead

  - #### issuerUri

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Issuer identifier uri for the OpenID Connect provider.

    Deprecated use attribute in token definition instead

  - #### jwkSetUri

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Uri for the JSON Web Key (JWK) Set endpoint.

    Deprecated use attribute in token definition instead

  - #### nameOfUsernameClaim

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Name of claim in jwt, which value define name of user in Midpoint.

    Deprecated use attribute in token definition instead

  - #### singleSymmetricKey

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Trusting a Single Asymmetric Key.

    Deprecated use attribute in token definition instead

  - #### trustedAlgorithm

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Trusted Algorithms. (RFC7518 section-3.1).

    Deprecated use attribute in token definition instead

  - #### trustingAsymmetricCertificate

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Certificate of trusting a single asymmetric RSA public key.

    Deprecated use attribute in token definition instead

  - #### keyStoreTrustingAsymmetricKey

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Display order:

    Key store with trusting a single asymmetric RSA public key.

    Deprecated use attribute in token definition instead