oidc_settings: |
  {
    "scope": "openid email profile",
    "client-id": "{{ oidc.client.id }}",
    "discover-url": "{{ oidc.client.discovery_document }}",
    "client-secret": "{{ oidc.client.secret }}",
    "mail-property": "email",
    "auth-display-name": "{{ oidc.button_text }}",
    "username-property": "{{ oidc.attributes.username }}",
    "signature-algorithm": "RS256",
    "display-name-property": "{{ oidc.attributes.username }}"
  }