diff --git a/access_service_auth.tf b/access_service_auth.tf index a00ad97..7ab2078 100644 --- a/access_service_auth.tf +++ b/access_service_auth.tf @@ -27,10 +27,10 @@ resource "cloudflare_zero_trust_access_identity_provider" "authentik_oidc" { auth_url = "https://authentik.${local.cloudflare_zone_id}/application/o/authorize/" certs_url = "https://authentik.${local.cloudflare_zone_id}/application/o/cloudflare-access/jwks/" claims = ["given_name", "preferred_username", "nickname", "groups", "role"] - client_id = local.authentik_oidc_client_id - client_secret = local.authentik_oidc_secret + client_id = local.authentik_oidc_client_id_cloudflare + client_secret = local.authentik_oidc_secret_cloudflare email_claim_name = "email" scopes = ["openid", "email", "profile"] token_url = "https://authentik.${local.cloudflare_zone_id}/application/o/token/" } -} \ No newline at end of file +}