def METHOD_NAME(self):
    """Ensure all OAuth2-related settings are correct"""
    self.client_type = ClientTypes.CONFIDENTIAL
    self.signing_key = None
    self.include_claims_in_id_token = True
    scopes = ScopeMapping.objects.filter(
        managed__in=[
            "goauthentik.io/providers/oauth2/scope-openid",
            "goauthentik.io/providers/oauth2/scope-profile",
            "goauthentik.io/providers/oauth2/scope-email",
            "goauthentik.io/providers/proxy/scope-proxy",
        ]
    )
    self.property_mappings.add(*list(scopes))
    self.redirect_uris = _get_callback_url(self.external_host)