From a52fe3c761a708d4cf907be24fca44e32ca2fa19 Mon Sep 17 00:00:00 2001
From: Chris Lu <chris.lu@gmail.com>
Date: Wed, 31 Dec 2025 14:03:35 -0800
Subject: [PATCH] docs: add tlsCaCert and tlsInsecureSkipVerify to OIDC config
 example

---
 OIDC-Integration.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/OIDC-Integration.md b/OIDC-Integration.md
index ce745f2..39f3d07 100644
--- a/OIDC-Integration.md
+++ b/OIDC-Integration.md
@@ -85,6 +85,8 @@ The IAM configuration file has these main sections:
         "jwksUri": "https://idp.example.com/.well-known/jwks.json",
         "userInfoUri": "https://idp.example.com/userinfo",
         "scopes": ["openid", "profile", "email", "groups"],
+        "tlsCaCert": "/etc/seaweedfs/certs/ca.pem",
+        "tlsInsecureSkipVerify": false,
         "roleMapping": {
           "rules": [
             { "claim": "groups", "value": "admins", "role": "arn:aws:iam::role/S3AdminRole" }
@@ -97,6 +99,12 @@ The IAM configuration file has these main sections:
 }
 ```
 
+| Field | Description |
+|-------|-------------|
+| `tlsCaCert` | Optional path to a CA certificate file for verifying the provider's TLS certificate. |
+| `tlsInsecureSkipVerify` | Optional boolean to skip TLS verification (default: false). Use only for testing. |
+
+
 ### Policies
 
 ```json