---
idp_tls:
  cert: "{{ cacert_home }}/etc/{{ oidc_urls.idp.host }}.pem"
  key: "{{ cacert_home }}/etc/{{ oidc_urls.idp.host }}-key.pem"
  client_cas: "{{ cacert_home }}/etc/{{ oidc_urls.idp.host }}-client-cas.pem"