--- # vars file for roles/oidc_idp