// OAuth2 endpoints.
'authorization_endpoint' => env('OIDC_AUTH_ENDPOINT', null),
- 'token_endpoint' => env('OIDC_TOKEN_ENDPOINT', null),
+ 'token_endpoint' => env('OIDC_TOKEN_ENDPOINT', null),
+
+ // Add extra scopes, upon those required, to the OIDC authentication request
+ // Multiple values can be provided comma seperated.
+ 'additional_scopes' => env('OIDC_ADDITIONAL_SCOPES', null),
+
+ // Group sync options
+ // Enable syncing, upon login, of OIDC groups to BookStack roles
+ 'user_to_groups' => env('OIDC_USER_TO_GROUPS', false),
+ // Attribute, within a OIDC ID token, to find group names within
+ 'groups_claim' => env('OIDC_GROUPS_CLAIM', 'groups'),
+ // When syncing groups, remove any groups that no longer match. Otherwise sync only adds new groups.
+ 'remove_from_groups' => env('OIDC_REMOVE_FROM_GROUPS', false),
];