anchor.diff:  <5> The client ID of a client registered with the OpenID provider. The client
   must be allowed to redirect to `<master>/oauth2callback/<identityProviderName>`.
   <6> The client secret. This value may also be provided in an
  -link:../install_config/master_node_configuration.html#passwords[environment 
  +link:../install_config/master_node_configuration.html#passwords[environment
   variable, external file, or encrypted file].
   <7> Use the value of the `sub` claim in the returned `id_token` as the user's
   identity.
  
positive.code: ====
  Using GitHub as an identity provider allows any GitHub user to authenticate to your server.
  You can limit authentication to members of specific GitHub organizations with the
  `organizations` config attribute, as shown below.
  ====
  
  .Master Configuration Using *GitHubIdentityProvider*
  
negative.code: ====
  Using Google as an identity provider allows any Google user to authenticate to your server.
  You can limit authentication to members of a specific hosted domain with the
  `hostedDomain` configuration attribute, as shown below.
  ====
  
  .Master Configuration Using *GoogleIdentityProvider*
  