AxMCPEnterpriseManagedAuthorizationOptions
Defined in: https://github.com/ax-llm/ax/blob/e4219a44b7581a55a40d9dd62d2c281062ff078d/src/ax/mcp/oauth/types.ts#L62
Properties
| Property | Type | Description |
|---|---|---|
createIdentityProviderClientAssertion? | (request: Readonly<{ audience: string; clientId: string; method: "client_secret_jwt" | "private_key_jwt"; }>) => string | Promise<string> | Creates an IdP client assertion for secret/private-key JWT auth. |
getAuthorizationGrant? | (context: Readonly<AxMCPEnterpriseAuthorizationContext>) => string | Promise<string> | Supplies an already-issued ID-JAG. Use this when an organization owns the IdP exchange outside Ax. When omitted, Ax performs the RFC 8693 exchange using the identity-provider options below. |
getIdentityAssertion? | (context: Readonly<AxMCPEnterpriseAuthorizationContext>) => | string | Readonly<{ assertion: string; type?: AxMCPEnterpriseIdentityAssertionType; }> | Promise< | string | Readonly<{ assertion: string; type?: AxMCPEnterpriseIdentityAssertionType; }>> | Supplies the ID token or SAML assertion retained from enterprise SSO. |
identityProviderClientId? | string | - |
identityProviderClientSecret? | string | - |
identityProviderParameters? | Readonly<Record<string, string>> | Additional organization-defined RFC 8693 parameters. |
identityProviderTokenEndpoint? | string | IdP token endpoint used to exchange the user’s identity assertion. |
identityProviderTokenEndpointAuthMethod? | AxMCPOAuthTokenEndpointAuthMethod | - |