client_id="minio-client-app" \
	client_secret="minio-client-app-secret" \
	scopes="openid,groups,email,profile" \
	redirect_uri="http://127.0.0.1:10000/oauth_callback" \
	display_name="Login via dex1" \
	role_policy="consoleAdmin"

./mc admin service restart myminio --json
./mc ready myminio
./mc admin cluster iam import myminio docs/distributed/samples/myminio-iam-info-openid.zip

const (
	ClientID      = "client_id"
	ClientSecret  = "client_secret"
	ConfigURL     = "config_url"
	ClaimName     = "claim_name"
	ClaimUserinfo = "claim_userinfo"
	RolePolicy    = "role_policy"
	DisplayName   = "display_name"

	Scopes             = "scopes"
	RedirectURI        = "redirect_uri"
	RedirectURIDynamic = "redirect_uri_dynamic"
	Vendor             = "vendor"

_verify","value":"off"},{"key":"server_insecure","value":"off"},{"key":"server_starttls","value":"off"},{"key":"lookup_bind_dn","value":""},{"key":"lookup_bind_password","value":""}]},"identity_openid":{"_":[{"key":"enable","value":""},{"key":"display_name","value":""},{"key":"config_url","value":""},{"key":"client_id","value":""},{"key":"client_secret","value":""},{"key":"claim_name","value":"policy"},{"key":"claim_userinfo","value":""},{"key":"role_policy","value":""},{"key":"claim_prefix","va...

                        "id": "displayName",
                        "value": "Listeners"
                     }
                  ]
               },
               {
                  "matcher": {
                     "id": "byName",
                     "options": "rds"
                  },
                  "properties": [
                     {
                        "id": "displayName",

                     "id": "byName",
                     "options": "Value #requests"
                  },
                  "properties": [
                     {
                        "id": "displayName",
                        "value": "Requests"
                     },
                     {
                        "id": "decimals",
                        "value": 2
                     },

        // Query name/unit
        override.byName.new('Value #requests')
        + override.byName.withProperty('displayName', 'Requests')
        + override.byName.withProperty('decimals', 2)
        + override.byName.withProperty('unit', 'reqps'),
        override.byName.new('Value #p50')
        + override.byName.withProperty('displayName', 'P50 Latency')
        + override.byName.withProperty('decimals', 2)

                        "id": "displayName",
                        "value": "Listeners"
                     }
                  ]
               },
               {
                  "matcher": {
                     "id": "byName",
                     "options": "rds"
                  },
                  "properties": [
                     {
                        "id": "displayName",

        this.destinationIndicator = value;
    }

    public String getDisplayName() {
        checkSpecifiedProperty("displayName");
        return convertEmptyToNull(displayName);
    }

    public void setDisplayName(String value) {
        registerModifiedProperty("displayName");
        this.displayName = value;
    }

    public String getEmployeeNumber() {
        checkSpecifiedProperty("employeeNumber");

    public void setDisplayName_Equal(String displayName) {
        setDisplayName_Term(displayName, null);
    }

    public void setDisplayName_Equal(String displayName, ConditionOptionCall<TermQueryBuilder> opLambda) {
        setDisplayName_Term(displayName, opLambda);
    }

    public void setDisplayName_Term(String displayName) {
        setDisplayName_Term(displayName, null);
    }

	RolePolicy         string

	roleArn  arn.ARN
	provider provider.Provider
}

func newProviderCfgFromConfig(getCfgVal func(cfgName string) string) providerCfg {
	return providerCfg{
		DisplayName:        getCfgVal(DisplayName),
		ClaimName:          getCfgVal(ClaimName),
		ClaimUserinfo:      getCfgVal(ClaimUserinfo) == config.EnableOn,
		ClaimPrefix:        getCfgVal(ClaimPrefix),
		RedirectURI:        getCfgVal(RedirectURI),