| Name | Type | Description | Notes |
|---|---|---|---|
| AllowedRedirectURIs | List<string> | Allowed redirect URIs after the authentication | [optional] |
| AuthorizedGwClusterName | string | AuthorizedGwClusterName binds the access method to a single GW cluster. When empty (or whitespace-only), GW-driven auth is disabled. | [optional] |
| BoundAttributes | List<SAMLAttribute> | The attributes that login is restricted to. | [optional] |
| IdpMetadataUrl | string | IDP metadata url | [optional] |
| IdpMetadataXml | string | IDP metadata XML | [optional] |
| UniqueIdentifier | string | A unique identifier to distinguish different users | [optional] |
| UseDedicatedSamlUrls | bool | When true, the login AuthnRequest is signed with this access method's dedicated SP identity (Entity ID https://<sp>/saml/sp/{access_id} and ACS https://<sp>/saml/acs/{access_id}) instead of the shared global identity. Default false keeps the legacy global identity for backward compatibility. | [optional] |