ansible-role-sso/templates/hydra-dispatcher-apps.yml.j2

hydra:
  apps:
{% if enable_hydra_passwordless %}
    - id: passwordless
      title: "{{ hydra_passwordless_app_title }}"
      description: "{{ hydra_passwordless_app_description }}"
      login_url: {{ haproxy_public_base_url }}{{ haproxy_hydra_passwordless_base_path }}/login
      consent_url: {{ haproxy_public_base_url }}{{ haproxy_hydra_passwordless_base_path }}/consent
      logout_url: {{ haproxy_public_base_url }}{{ haproxy_hydra_passwordless_base_path }}/logout
      attributes_rewrite_rules:
        email:
          - consent.session.id_token.email
      icon_url: "{{ hydra_passwordless_app_icon_url }}"
{% endif %}
{% if enable_hydra_saml %}
    - id: saml
      title: "{{ hydra_saml_app_title }}"
      description: "{{ hydra_saml_app_description }}"
      login_url: {{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}/login
      consent_url: {{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}/consent
      logout_url: {{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}/logout
      attributes_rewrite_rules:
        email:
          - consent.session.id_token.email
      icon_url: "{{ hydra_saml_app_icon_url }}"
{% endif %}