Generic MANDATORY true true MANDATORY MANDATORY openid token client_secret_post jwks_uri idToken true credentials id_token email email