| oauth.additionalParameter | Additional request parameters for the access token request. Format: Key=Value,Key=Value,... |
| oauth.anonymous.mode | true: Any user authenticated against an Identity Provider can work with Orchestra. |
| oauth.authorizationEndpoint | Redirect URL to the Identity Provider login page (used only for Authorization Code grant type). |
| oauth.clientId | Client ID of this Orchestra instance. |
| oauth.clientSecret | Client Secret of this Orchestra instance. |
| oauth.grantType | Grant Type for OAuth authentication. |
| oauth.jwtKeyAlgorithm | Algorithm used for the Identity Provider key (certificate). |
| oauth.key | Identity Provider key (certificate). |
| oauth.logoutEndpoint | URL to log out from the Identity Provider. |
| oauth.scope | Scope used to obtain additional user information from the Identity Provider. |
| oauth.timeout | Duration Orchestra will attempt to obtain a token from the Identity Provider. |
| oauth.tokenEndpoint | URL of the Identity Provider’s token endpoint. |