Created
December 22, 2020 08:45
-
-
Save jonathanvila/ed8c9886dbe0992e041d78227f19da7e to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "id": "mta", | |
| "realm": "mta", | |
| "displayName": "Migration Toolkit for Applications Web Console", | |
| "notBefore": 0, | |
| "revokeRefreshToken": false, | |
| "refreshTokenMaxReuse": 0, | |
| "accessTokenLifespan": 300, | |
| "accessTokenLifespanForImplicitFlow": 900, | |
| "ssoSessionIdleTimeout": 1800, | |
| "ssoSessionMaxLifespan": 36000, | |
| "ssoSessionIdleTimeoutRememberMe": 0, | |
| "ssoSessionMaxLifespanRememberMe": 0, | |
| "offlineSessionIdleTimeout": 2592000, | |
| "offlineSessionMaxLifespanEnabled": false, | |
| "offlineSessionMaxLifespan": 5184000, | |
| "accessCodeLifespan": 60, | |
| "accessCodeLifespanUserAction": 300, | |
| "accessCodeLifespanLogin": 1800, | |
| "actionTokenGeneratedByAdminLifespan": 43200, | |
| "actionTokenGeneratedByUserLifespan": 300, | |
| "enabled": true, | |
| "sslRequired": "none", | |
| "registrationAllowed": false, | |
| "registrationEmailAsUsername": false, | |
| "rememberMe": false, | |
| "verifyEmail": false, | |
| "loginWithEmailAllowed": true, | |
| "duplicateEmailsAllowed": false, | |
| "resetPasswordAllowed": false, | |
| "editUsernameAllowed": false, | |
| "bruteForceProtected": false, | |
| "permanentLockout": false, | |
| "maxFailureWaitSeconds": 900, | |
| "minimumQuickLoginWaitSeconds": 60, | |
| "waitIncrementSeconds": 60, | |
| "quickLoginCheckMilliSeconds": 1000, | |
| "maxDeltaTimeSeconds": 43200, | |
| "failureFactor": 30, | |
| "roles": { | |
| "realm": [ | |
| { | |
| "id": "15fa512b-0cfc-4849-a317-7687695e5c37", | |
| "name": "uma_authorization", | |
| "description": "${role_uma_authorization}", | |
| "composite": false, | |
| "clientRole": false, | |
| "containerId": "mta", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "9a3d3dec-8de3-4fd6-8156-f09c314b9f28", | |
| "name": "user", | |
| "composite": false, | |
| "clientRole": false, | |
| "containerId": "mta", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "780157e4-18d3-4240-b9ab-998480731b57", | |
| "name": "offline_access", | |
| "description": "${role_offline-access}", | |
| "composite": false, | |
| "clientRole": false, | |
| "containerId": "mta", | |
| "attributes": {} | |
| } | |
| ], | |
| "client": { | |
| "realm-management": [ | |
| { | |
| "id": "e844ae76-0cb5-4393-8a07-b9de2626d7d3", | |
| "name": "manage-authorization", | |
| "description": "${role_manage-authorization}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "fd58f8b0-bb9a-443c-9499-f934e41e3f69", | |
| "name": "manage-users", | |
| "description": "${role_manage-users}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "fa10d38a-0ff9-42bd-abc2-aa0183368fb5", | |
| "name": "view-users", | |
| "description": "${role_view-users}", | |
| "composite": true, | |
| "composites": { | |
| "client": { | |
| "realm-management": [ | |
| "query-users", | |
| "query-groups" | |
| ] | |
| } | |
| }, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "94766e81-0a09-4e72-880c-7658f45aaff1", | |
| "name": "manage-realm", | |
| "description": "${role_manage-realm}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "08fd9216-11b8-4677-9bf6-d41629f46b11", | |
| "name": "query-clients", | |
| "description": "${role_query-clients}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "c95e2a2a-1998-45c8-8e8f-59e2340f68f6", | |
| "name": "manage-events", | |
| "description": "${role_manage-events}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "405907ae-4172-4b2e-8583-96764dde19c4", | |
| "name": "view-clients", | |
| "description": "${role_view-clients}", | |
| "composite": true, | |
| "composites": { | |
| "client": { | |
| "realm-management": [ | |
| "query-clients" | |
| ] | |
| } | |
| }, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "f581e062-8d42-4de7-8cb1-330af99d7f4c", | |
| "name": "view-events", | |
| "description": "${role_view-events}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "433631e5-e351-423b-8c28-79621fcb0e1a", | |
| "name": "manage-clients", | |
| "description": "${role_manage-clients}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "52fb61ac-3c1e-4e08-a8e4-e6b9cb5e7565", | |
| "name": "query-realms", | |
| "description": "${role_query-realms}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "9c53facb-bb63-4131-8843-fd5a8b9063ee", | |
| "name": "realm-admin", | |
| "description": "${role_realm-admin}", | |
| "composite": true, | |
| "composites": { | |
| "client": { | |
| "realm-management": [ | |
| "manage-authorization", | |
| "manage-users", | |
| "query-clients", | |
| "manage-realm", | |
| "view-users", | |
| "manage-events", | |
| "view-clients", | |
| "manage-clients", | |
| "query-realms", | |
| "view-events", | |
| "create-client", | |
| "impersonation", | |
| "view-realm", | |
| "query-users", | |
| "manage-identity-providers", | |
| "query-groups", | |
| "view-identity-providers", | |
| "view-authorization" | |
| ] | |
| } | |
| }, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "36b97fea-5902-46e5-b652-764218103ad2", | |
| "name": "create-client", | |
| "description": "${role_create-client}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "bd6d7cb8-74d3-4b92-ad86-266c59af1868", | |
| "name": "impersonation", | |
| "description": "${role_impersonation}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "6ae3a0b1-b2fb-4909-a872-8b7513a58743", | |
| "name": "view-realm", | |
| "description": "${role_view-realm}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "a6a4b219-15ef-4b5d-875a-5c41a448164b", | |
| "name": "manage-identity-providers", | |
| "description": "${role_manage-identity-providers}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "46ffc6af-ecda-41e5-b882-174aebd288f9", | |
| "name": "query-users", | |
| "description": "${role_query-users}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "1024dc36-023a-4955-991c-760fe15344e9", | |
| "name": "query-groups", | |
| "description": "${role_query-groups}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "a7c6e3a9-4b8e-444f-b5aa-af2109e4f6a0", | |
| "name": "view-identity-providers", | |
| "description": "${role_view-identity-providers}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "a3f6a29c-97d9-445b-937e-f4cc98ce1e16", | |
| "name": "view-authorization", | |
| "description": "${role_view-authorization}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "attributes": {} | |
| } | |
| ], | |
| "security-admin-console": [], | |
| "mta-web": [], | |
| "admin-cli": [], | |
| "broker": [ | |
| { | |
| "id": "1959a922-7e48-4e0d-add4-ba4b74831e3c", | |
| "name": "read-token", | |
| "description": "${role_read-token}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "18fc5aaa-acb0-4c20-b555-f9ddf21803df", | |
| "attributes": {} | |
| } | |
| ], | |
| "account": [ | |
| { | |
| "id": "8374b968-f702-4f23-932e-87314cb9dfa9", | |
| "name": "manage-account-links", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "8ad07d06-b9cf-4905-9267-ddec6a8aa09a", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "0ed010f2-b0f0-4591-93da-26ae0fd89c5f", | |
| "name": "manage-account", | |
| "description": "${role_manage-account}", | |
| "composite": true, | |
| "composites": { | |
| "client": { | |
| "account": [ | |
| "manage-account-links" | |
| ] | |
| } | |
| }, | |
| "clientRole": true, | |
| "containerId": "8ad07d06-b9cf-4905-9267-ddec6a8aa09a", | |
| "attributes": {} | |
| }, | |
| { | |
| "id": "a2854d7e-e1b8-4a64-ba2d-b07cc4584644", | |
| "name": "view-profile", | |
| "description": "${role_view-profile}", | |
| "composite": false, | |
| "clientRole": true, | |
| "containerId": "8ad07d06-b9cf-4905-9267-ddec6a8aa09a", | |
| "attributes": {} | |
| } | |
| ] | |
| } | |
| }, | |
| "groups": [], | |
| "defaultRoles": [ | |
| "uma_authorization", | |
| "offline_access", | |
| "user" | |
| ], | |
| "requiredCredentials": [ | |
| "password" | |
| ], | |
| "otpPolicyType": "totp", | |
| "otpPolicyAlgorithm": "HmacSHA1", | |
| "otpPolicyInitialCounter": 0, | |
| "otpPolicyDigits": 6, | |
| "otpPolicyLookAheadWindow": 1, | |
| "otpPolicyPeriod": 30, | |
| "otpSupportedApplications": [ | |
| "FreeOTP", | |
| "Google Authenticator" | |
| ], | |
| "webAuthnPolicyRpEntityName": "keycloak", | |
| "webAuthnPolicySignatureAlgorithms": [ | |
| "ES256" | |
| ], | |
| "webAuthnPolicyRpId": "", | |
| "webAuthnPolicyAttestationConveyancePreference": "not specified", | |
| "webAuthnPolicyAuthenticatorAttachment": "not specified", | |
| "webAuthnPolicyRequireResidentKey": "not specified", | |
| "webAuthnPolicyUserVerificationRequirement": "not specified", | |
| "webAuthnPolicyCreateTimeout": 0, | |
| "webAuthnPolicyAvoidSameAuthenticatorRegister": false, | |
| "webAuthnPolicyAcceptableAaguids": [], | |
| "scopeMappings": [ | |
| { | |
| "clientScope": "offline_access", | |
| "roles": [ | |
| "offline_access" | |
| ] | |
| } | |
| ], | |
| "clients": [ | |
| { | |
| "id": "9d84ccd5-81ea-468d-9646-73c0078962d7", | |
| "clientId": "security-admin-console", | |
| "name": "${client_security-admin-console}", | |
| "rootUrl": "${authAdminUrl}", | |
| "baseUrl": "/admin/mta/console/", | |
| "surrogateAuthRequired": false, | |
| "enabled": true, | |
| "clientAuthenticatorType": "client-secret", | |
| "secret": "**********", | |
| "redirectUris": [ | |
| "/admin/mta/console/*" | |
| ], | |
| "webOrigins": [ | |
| "+" | |
| ], | |
| "notBefore": 0, | |
| "bearerOnly": false, | |
| "consentRequired": false, | |
| "standardFlowEnabled": true, | |
| "implicitFlowEnabled": false, | |
| "directAccessGrantsEnabled": false, | |
| "serviceAccountsEnabled": false, | |
| "publicClient": true, | |
| "frontchannelLogout": false, | |
| "protocol": "openid-connect", | |
| "attributes": {}, | |
| "authenticationFlowBindingOverrides": {}, | |
| "fullScopeAllowed": false, | |
| "nodeReRegistrationTimeout": 0, | |
| "protocolMappers": [ | |
| { | |
| "id": "f4d35c54-6845-4ad1-b49c-671ed3803d46", | |
| "name": "role list", | |
| "protocol": "saml", | |
| "protocolMapper": "saml-role-list-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "single": "false", | |
| "attribute.nameformat": "Basic", | |
| "attribute.name": "Role" | |
| } | |
| }, | |
| { | |
| "id": "702a51fa-555d-4691-be3a-0656ac78f386", | |
| "name": "username", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "username", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "preferred_username", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "5254b432-4fdf-4e26-834a-1b119add1e68", | |
| "name": "given name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "firstName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "given_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "2f955107-0ed7-4d58-9a47-f45e5f910687", | |
| "name": "email", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "email", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "email", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "532a7ba7-959d-4c15-95b2-37c816e24145", | |
| "name": "family name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "lastName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "family_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "0767b0dd-88de-4f5e-bcc7-4322f545ce74", | |
| "name": "locale", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "locale", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "locale", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "b5f2aa3c-8ff8-4770-b94e-a6eb0a115743", | |
| "name": "full name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-full-name-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "userinfo.token.claim": "true" | |
| } | |
| } | |
| ], | |
| "defaultClientScopes": [ | |
| "web-origins", | |
| "role_list", | |
| "roles", | |
| "profile", | |
| "email" | |
| ], | |
| "optionalClientScopes": [ | |
| "address", | |
| "phone", | |
| "offline_access", | |
| "microprofile-jwt" | |
| ] | |
| }, | |
| { | |
| "id": "8ad07d06-b9cf-4905-9267-ddec6a8aa09a", | |
| "clientId": "account", | |
| "name": "${client_account}", | |
| "rootUrl": "${authBaseUrl}", | |
| "baseUrl": "/realms/mta/account/", | |
| "surrogateAuthRequired": false, | |
| "enabled": true, | |
| "clientAuthenticatorType": "client-secret", | |
| "secret": "**********", | |
| "defaultRoles": [ | |
| "manage-account", | |
| "view-profile" | |
| ], | |
| "redirectUris": [ | |
| "/realms/mta/account/*" | |
| ], | |
| "webOrigins": [], | |
| "notBefore": 0, | |
| "bearerOnly": false, | |
| "consentRequired": false, | |
| "standardFlowEnabled": true, | |
| "implicitFlowEnabled": false, | |
| "directAccessGrantsEnabled": false, | |
| "serviceAccountsEnabled": false, | |
| "publicClient": false, | |
| "frontchannelLogout": false, | |
| "protocol": "openid-connect", | |
| "attributes": {}, | |
| "authenticationFlowBindingOverrides": {}, | |
| "fullScopeAllowed": false, | |
| "nodeReRegistrationTimeout": 0, | |
| "protocolMappers": [ | |
| { | |
| "id": "d988f2cd-7e6a-4f6a-9246-eacfef7a4efd", | |
| "name": "username", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "username", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "preferred_username", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "72a23589-63ca-4d3a-a4fb-f92303cfeaf9", | |
| "name": "family name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "lastName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "family_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "147a9a33-22bb-4d2b-b525-6b0398a4e2c1", | |
| "name": "role list", | |
| "protocol": "saml", | |
| "protocolMapper": "saml-role-list-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "single": "false", | |
| "attribute.nameformat": "Basic", | |
| "attribute.name": "Role" | |
| } | |
| }, | |
| { | |
| "id": "fc120667-19a8-4d09-8d94-c2e6682cf16c", | |
| "name": "given name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "firstName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "given_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "029101ac-3b1d-4870-8124-b04090244b4f", | |
| "name": "full name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-full-name-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "userinfo.token.claim": "true" | |
| } | |
| }, | |
| { | |
| "id": "9d240eaf-e878-425c-8fa5-ae8ecaf4cdbd", | |
| "name": "email", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "email", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "email", | |
| "jsonType.label": "String" | |
| } | |
| } | |
| ], | |
| "defaultClientScopes": [ | |
| "web-origins", | |
| "role_list", | |
| "roles", | |
| "profile", | |
| "email" | |
| ], | |
| "optionalClientScopes": [ | |
| "address", | |
| "phone", | |
| "offline_access", | |
| "microprofile-jwt" | |
| ] | |
| }, | |
| { | |
| "id": "18fc5aaa-acb0-4c20-b555-f9ddf21803df", | |
| "clientId": "broker", | |
| "name": "${client_broker}", | |
| "surrogateAuthRequired": false, | |
| "enabled": true, | |
| "clientAuthenticatorType": "client-secret", | |
| "secret": "**********", | |
| "redirectUris": [], | |
| "webOrigins": [], | |
| "notBefore": 0, | |
| "bearerOnly": false, | |
| "consentRequired": false, | |
| "standardFlowEnabled": true, | |
| "implicitFlowEnabled": false, | |
| "directAccessGrantsEnabled": false, | |
| "serviceAccountsEnabled": false, | |
| "publicClient": false, | |
| "frontchannelLogout": false, | |
| "protocol": "openid-connect", | |
| "attributes": {}, | |
| "authenticationFlowBindingOverrides": {}, | |
| "fullScopeAllowed": false, | |
| "nodeReRegistrationTimeout": 0, | |
| "protocolMappers": [ | |
| { | |
| "id": "84c77f5f-7374-4b5c-88a2-7b374c0d2101", | |
| "name": "full name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-full-name-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "userinfo.token.claim": "true" | |
| } | |
| }, | |
| { | |
| "id": "36a94233-60d6-4ba9-a16b-aed3a68d14e2", | |
| "name": "username", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "username", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "preferred_username", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "c3973c11-4357-4b55-a4a8-4b5b3a43de5e", | |
| "name": "given name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "firstName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "given_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "485cd669-a5d5-4dcc-95db-8fe90ce9fac8", | |
| "name": "role list", | |
| "protocol": "saml", | |
| "protocolMapper": "saml-role-list-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "single": "false", | |
| "attribute.nameformat": "Basic", | |
| "attribute.name": "Role" | |
| } | |
| }, | |
| { | |
| "id": "1f10d4aa-27fb-4a88-96d0-45f92ea17ec5", | |
| "name": "family name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "lastName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "family_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "42f4f8e5-fc75-423d-a468-82453838ec81", | |
| "name": "email", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "email", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "email", | |
| "jsonType.label": "String" | |
| } | |
| } | |
| ], | |
| "defaultClientScopes": [ | |
| "web-origins", | |
| "role_list", | |
| "roles", | |
| "profile", | |
| "email" | |
| ], | |
| "optionalClientScopes": [ | |
| "address", | |
| "phone", | |
| "offline_access", | |
| "microprofile-jwt" | |
| ] | |
| }, | |
| { | |
| "id": "a7fdaaf7-4fbf-44df-8d93-dcfceeee7bd3", | |
| "clientId": "admin-cli", | |
| "name": "${client_admin-cli}", | |
| "surrogateAuthRequired": false, | |
| "enabled": true, | |
| "clientAuthenticatorType": "client-secret", | |
| "secret": "**********", | |
| "redirectUris": [], | |
| "webOrigins": [], | |
| "notBefore": 0, | |
| "bearerOnly": false, | |
| "consentRequired": false, | |
| "standardFlowEnabled": false, | |
| "implicitFlowEnabled": false, | |
| "directAccessGrantsEnabled": true, | |
| "serviceAccountsEnabled": false, | |
| "publicClient": true, | |
| "frontchannelLogout": false, | |
| "protocol": "openid-connect", | |
| "attributes": {}, | |
| "authenticationFlowBindingOverrides": {}, | |
| "fullScopeAllowed": false, | |
| "nodeReRegistrationTimeout": 0, | |
| "protocolMappers": [ | |
| { | |
| "id": "a6b371c3-fa44-4635-997f-ed56a207131d", | |
| "name": "email", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "email", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "email", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "cb3be06c-77e3-412b-b7ff-3df79a06b3ba", | |
| "name": "full name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-full-name-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "userinfo.token.claim": "true" | |
| } | |
| }, | |
| { | |
| "id": "ad30fcdc-cfa0-41ad-aa66-457bdd65896d", | |
| "name": "family name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "lastName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "family_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "ef820883-aadf-4ba3-b72b-ad72b90e441d", | |
| "name": "username", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "username", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "preferred_username", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "fae715f7-947c-469a-ac12-e521bc5fbe41", | |
| "name": "given name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "firstName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "given_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "c2617a4b-78c3-42b6-9d41-f2e62ba38d73", | |
| "name": "role list", | |
| "protocol": "saml", | |
| "protocolMapper": "saml-role-list-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "single": "false", | |
| "attribute.nameformat": "Basic", | |
| "attribute.name": "Role" | |
| } | |
| } | |
| ], | |
| "defaultClientScopes": [ | |
| "web-origins", | |
| "role_list", | |
| "roles", | |
| "profile", | |
| "email" | |
| ], | |
| "optionalClientScopes": [ | |
| "address", | |
| "phone", | |
| "offline_access", | |
| "microprofile-jwt" | |
| ] | |
| }, | |
| { | |
| "id": "739a78cd-ab8d-427a-93f7-4af38f0eab31", | |
| "clientId": "mta-web", | |
| "name": "Migration Toolkit for Applications Web Console", | |
| "adminUrl": "", | |
| "surrogateAuthRequired": false, | |
| "enabled": true, | |
| "clientAuthenticatorType": "client-secret", | |
| "secret": "**********", | |
| "redirectUris": [ | |
| "*" | |
| ], | |
| "webOrigins": [ | |
| "*" | |
| ], | |
| "notBefore": 0, | |
| "bearerOnly": false, | |
| "consentRequired": false, | |
| "standardFlowEnabled": true, | |
| "implicitFlowEnabled": false, | |
| "directAccessGrantsEnabled": true, | |
| "serviceAccountsEnabled": false, | |
| "publicClient": true, | |
| "frontchannelLogout": false, | |
| "protocol": "openid-connect", | |
| "attributes": { | |
| "saml.assertion.signature": "false", | |
| "saml.force.post.binding": "false", | |
| "saml.multivalued.roles": "false", | |
| "saml.encrypt": "false", | |
| "saml_force_name_id_format": "false", | |
| "saml.client.signature": "false", | |
| "saml.authnstatement": "false", | |
| "saml.server.signature": "false" | |
| }, | |
| "authenticationFlowBindingOverrides": {}, | |
| "fullScopeAllowed": true, | |
| "nodeReRegistrationTimeout": -1, | |
| "protocolMappers": [ | |
| { | |
| "id": "2f1f1cc4-005c-4ec3-bfb5-67e0ad3e6510", | |
| "name": "username", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "username", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "preferred_username", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "2c23345c-b32d-477e-9394-79478c01c4fe", | |
| "name": "role list", | |
| "protocol": "saml", | |
| "protocolMapper": "saml-role-list-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "single": "false", | |
| "attribute.nameformat": "Basic", | |
| "attribute.name": "Role" | |
| } | |
| }, | |
| { | |
| "id": "a6af3203-4f26-4017-a53f-1728033e585a", | |
| "name": "given name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "firstName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "given_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "38e44fc8-632b-4c7c-80b9-d0e6c513a936", | |
| "name": "email", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "email", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "email", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "aa807f3f-479f-477d-b27e-b7e9aee091b6", | |
| "name": "family name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "lastName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "family_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "5369232f-cf0a-44ee-af18-9227635593fb", | |
| "name": "full name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-full-name-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "userinfo.token.claim": "true" | |
| } | |
| } | |
| ], | |
| "defaultClientScopes": [ | |
| "web-origins", | |
| "role_list", | |
| "roles", | |
| "profile", | |
| "email" | |
| ], | |
| "optionalClientScopes": [ | |
| "address", | |
| "phone", | |
| "offline_access", | |
| "microprofile-jwt" | |
| ] | |
| }, | |
| { | |
| "id": "9ea825ad-0fab-4946-bc9a-43d7823e6a32", | |
| "clientId": "realm-management", | |
| "name": "${client_realm-management}", | |
| "surrogateAuthRequired": false, | |
| "enabled": true, | |
| "clientAuthenticatorType": "client-secret", | |
| "secret": "**********", | |
| "redirectUris": [], | |
| "webOrigins": [], | |
| "notBefore": 0, | |
| "bearerOnly": true, | |
| "consentRequired": false, | |
| "standardFlowEnabled": true, | |
| "implicitFlowEnabled": false, | |
| "directAccessGrantsEnabled": false, | |
| "serviceAccountsEnabled": false, | |
| "publicClient": false, | |
| "frontchannelLogout": false, | |
| "protocol": "openid-connect", | |
| "attributes": {}, | |
| "authenticationFlowBindingOverrides": {}, | |
| "fullScopeAllowed": false, | |
| "nodeReRegistrationTimeout": 0, | |
| "protocolMappers": [ | |
| { | |
| "id": "bbff56f2-1ae1-486e-b49e-814cecbab7b6", | |
| "name": "given name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "firstName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "given_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "46728f98-19de-4126-baf4-ec6ad917cd5b", | |
| "name": "full name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-full-name-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "userinfo.token.claim": "true" | |
| } | |
| }, | |
| { | |
| "id": "c1f47d66-d9f2-443d-a5a3-82bcbac4155f", | |
| "name": "family name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "lastName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "family_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "96f41a17-8860-4e9e-9447-210205882c1c", | |
| "name": "username", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "username", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "preferred_username", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "53c51384-9b53-44d1-9511-414fadbcd867", | |
| "name": "role list", | |
| "protocol": "saml", | |
| "protocolMapper": "saml-role-list-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "single": "false", | |
| "attribute.nameformat": "Basic", | |
| "attribute.name": "Role" | |
| } | |
| }, | |
| { | |
| "id": "e4260172-5a3c-429e-bfc0-e9d48168784e", | |
| "name": "email", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "email", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "email", | |
| "jsonType.label": "String" | |
| } | |
| } | |
| ], | |
| "defaultClientScopes": [ | |
| "web-origins", | |
| "role_list", | |
| "roles", | |
| "profile", | |
| "email" | |
| ], | |
| "optionalClientScopes": [ | |
| "address", | |
| "phone", | |
| "offline_access", | |
| "microprofile-jwt" | |
| ] | |
| } | |
| ], | |
| "clientScopes": [ | |
| { | |
| "id": "2c22346b-4c04-47ad-a6dc-9fdfc4300d29", | |
| "name": "address", | |
| "description": "OpenID Connect built-in scope: address", | |
| "protocol": "openid-connect", | |
| "attributes": { | |
| "include.in.token.scope": "true", | |
| "display.on.consent.screen": "true", | |
| "consent.screen.text": "${addressScopeConsentText}" | |
| }, | |
| "protocolMappers": [ | |
| { | |
| "id": "6c09dfe0-c26b-4134-827c-c3f4a8ffbf66", | |
| "name": "address", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-address-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "user.attribute.formatted": "formatted", | |
| "user.attribute.country": "country", | |
| "user.attribute.postal_code": "postal_code", | |
| "userinfo.token.claim": "true", | |
| "user.attribute.street": "street", | |
| "id.token.claim": "true", | |
| "user.attribute.region": "region", | |
| "access.token.claim": "true", | |
| "user.attribute.locality": "locality" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "c7cbf2b0-c3fb-4f7c-b04d-2370283a7325", | |
| "name": "email", | |
| "description": "OpenID Connect built-in scope: email", | |
| "protocol": "openid-connect", | |
| "attributes": { | |
| "include.in.token.scope": "true", | |
| "display.on.consent.screen": "true", | |
| "consent.screen.text": "${emailScopeConsentText}" | |
| }, | |
| "protocolMappers": [ | |
| { | |
| "id": "f7ace748-418c-4eb3-8443-5b8f917571a8", | |
| "name": "email verified", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "emailVerified", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "email_verified", | |
| "jsonType.label": "boolean" | |
| } | |
| }, | |
| { | |
| "id": "7a51c25d-b9cc-4b12-9b6f-876daf34e9c3", | |
| "name": "email", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "email", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "email", | |
| "jsonType.label": "String" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "8ed60583-6518-4c93-b2c5-b75a8404734d", | |
| "name": "microprofile-jwt", | |
| "description": "Microprofile - JWT built-in scope", | |
| "protocol": "openid-connect", | |
| "attributes": { | |
| "include.in.token.scope": "true", | |
| "display.on.consent.screen": "false" | |
| }, | |
| "protocolMappers": [ | |
| { | |
| "id": "bf955ab0-8333-4084-91ce-a6a429c8cb06", | |
| "name": "upn", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "username", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "upn", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "fdfeb44a-f31a-4f1e-8c7b-603de6dc7b31", | |
| "name": "groups", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-realm-role-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "multivalued": "true", | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "foo", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "groups", | |
| "jsonType.label": "String" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "04259741-612b-462a-b08d-a6e0e5937779", | |
| "name": "offline_access", | |
| "description": "OpenID Connect built-in scope: offline_access", | |
| "protocol": "openid-connect", | |
| "attributes": { | |
| "consent.screen.text": "${offlineAccessScopeConsentText}", | |
| "display.on.consent.screen": "true" | |
| } | |
| }, | |
| { | |
| "id": "64ca03eb-3445-4af3-b883-914c17b65325", | |
| "name": "phone", | |
| "description": "OpenID Connect built-in scope: phone", | |
| "protocol": "openid-connect", | |
| "attributes": { | |
| "include.in.token.scope": "true", | |
| "display.on.consent.screen": "true", | |
| "consent.screen.text": "${phoneScopeConsentText}" | |
| }, | |
| "protocolMappers": [ | |
| { | |
| "id": "691d00eb-d40d-4c33-a555-8a974a696d73", | |
| "name": "phone number verified", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "phoneNumberVerified", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "phone_number_verified", | |
| "jsonType.label": "boolean" | |
| } | |
| }, | |
| { | |
| "id": "4a2a228e-dd60-4c6c-bdd6-4bd52aede7d2", | |
| "name": "phone number", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "phoneNumber", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "phone_number", | |
| "jsonType.label": "String" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "6bc3cbc3-8633-48af-9222-5f7058d8923b", | |
| "name": "profile", | |
| "description": "OpenID Connect built-in scope: profile", | |
| "protocol": "openid-connect", | |
| "attributes": { | |
| "include.in.token.scope": "true", | |
| "display.on.consent.screen": "true", | |
| "consent.screen.text": "${profileScopeConsentText}" | |
| }, | |
| "protocolMappers": [ | |
| { | |
| "id": "9e5079b9-a8b9-4ad2-bc9a-5f711d87f628", | |
| "name": "birthdate", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "birthdate", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "birthdate", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "1ef96429-bd72-454a-b760-9cc957f67c4c", | |
| "name": "gender", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "gender", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "gender", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "b3861aff-d18c-4592-9f5e-31f03adc2c90", | |
| "name": "nickname", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "nickname", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "nickname", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "cca52326-dc07-4bad-9af1-465754386262", | |
| "name": "family name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "lastName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "family_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "f7603a14-808a-4852-bbce-240b12526981", | |
| "name": "locale", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "locale", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "locale", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "bde435a2-0ac9-482b-aedb-f8bd4f341a8c", | |
| "name": "profile", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "profile", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "profile", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "474efab1-57e1-49b5-add9-5cc9484c83d1", | |
| "name": "username", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "username", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "preferred_username", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "892ab09d-0dfc-4e0e-ae66-1357f5dd5cba", | |
| "name": "middle name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "middleName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "middle_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "03dfd1e0-74cd-4407-8fdf-22c9939b14c0", | |
| "name": "updated at", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "updatedAt", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "updated_at", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "abe96404-9bf7-4c0a-9803-965dd86337a9", | |
| "name": "given name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-property-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "firstName", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "given_name", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "e7719256-97c3-46cb-8c45-7c0459bd5795", | |
| "name": "full name", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-full-name-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "userinfo.token.claim": "true" | |
| } | |
| }, | |
| { | |
| "id": "d69900c0-864a-4ea7-b5ad-577d36d67700", | |
| "name": "picture", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "picture", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "picture", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "78a50d89-82ad-4490-8d1f-e9fd2686112a", | |
| "name": "zoneinfo", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "zoneinfo", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "zoneinfo", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "516a585a-1c84-475e-9c34-c3e388e73117", | |
| "name": "website", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-attribute-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "userinfo.token.claim": "true", | |
| "user.attribute": "website", | |
| "id.token.claim": "true", | |
| "access.token.claim": "true", | |
| "claim.name": "website", | |
| "jsonType.label": "String" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "05fbffbc-5aca-4c84-8c8d-c28c0c043997", | |
| "name": "role_list", | |
| "description": "SAML role list", | |
| "protocol": "saml", | |
| "attributes": { | |
| "consent.screen.text": "${samlRoleListScopeConsentText}", | |
| "display.on.consent.screen": "true" | |
| }, | |
| "protocolMappers": [ | |
| { | |
| "id": "c83d257c-22b6-488e-93c3-9e20eb371cda", | |
| "name": "role list", | |
| "protocol": "saml", | |
| "protocolMapper": "saml-role-list-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "single": "false", | |
| "attribute.nameformat": "Basic", | |
| "attribute.name": "Role" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "5fa14302-8460-45b1-8168-32b78f1f580c", | |
| "name": "roles", | |
| "description": "OpenID Connect scope for add user roles to the access token", | |
| "protocol": "openid-connect", | |
| "attributes": { | |
| "include.in.token.scope": "false", | |
| "display.on.consent.screen": "true", | |
| "consent.screen.text": "${rolesScopeConsentText}" | |
| }, | |
| "protocolMappers": [ | |
| { | |
| "id": "df17df97-ca8e-41a1-84f3-94b765de5666", | |
| "name": "client roles", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-client-role-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "multivalued": "true", | |
| "user.attribute": "foo", | |
| "access.token.claim": "true", | |
| "claim.name": "resource_access.${client_id}.roles", | |
| "jsonType.label": "String" | |
| } | |
| }, | |
| { | |
| "id": "475bce02-f50c-4952-bb4c-3e15317f0325", | |
| "name": "audience resolve", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-audience-resolve-mapper", | |
| "consentRequired": false, | |
| "config": {} | |
| }, | |
| { | |
| "id": "3c77b0b6-35be-4f0c-ae4e-8679dd67c67f", | |
| "name": "realm roles", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-usermodel-realm-role-mapper", | |
| "consentRequired": false, | |
| "config": { | |
| "multivalued": "true", | |
| "user.attribute": "foo", | |
| "access.token.claim": "true", | |
| "claim.name": "realm_access.roles", | |
| "jsonType.label": "String" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "f62fddfc-6d61-463f-a1da-c81f0e726c5a", | |
| "name": "web-origins", | |
| "description": "OpenID Connect scope for add allowed web origins to the access token", | |
| "protocol": "openid-connect", | |
| "attributes": { | |
| "include.in.token.scope": "false", | |
| "display.on.consent.screen": "false", | |
| "consent.screen.text": "" | |
| }, | |
| "protocolMappers": [ | |
| { | |
| "id": "d8296841-1f2a-434a-b728-a6a46afc8a9f", | |
| "name": "allowed web origins", | |
| "protocol": "openid-connect", | |
| "protocolMapper": "oidc-allowed-origins-mapper", | |
| "consentRequired": false, | |
| "config": {} | |
| } | |
| ] | |
| } | |
| ], | |
| "defaultDefaultClientScopes": [ | |
| "role_list", | |
| "roles", | |
| "profile", | |
| "email", | |
| "web-origins" | |
| ], | |
| "defaultOptionalClientScopes": [ | |
| "offline_access", | |
| "address", | |
| "phone", | |
| "microprofile-jwt" | |
| ], | |
| "browserSecurityHeaders": { | |
| "contentSecurityPolicyReportOnly": "", | |
| "xContentTypeOptions": "nosniff", | |
| "xRobotsTag": "none", | |
| "xFrameOptions": "SAMEORIGIN", | |
| "contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';", | |
| "xXSSProtection": "1; mode=block", | |
| "strictTransportSecurity": "max-age=31536000; includeSubDomains" | |
| }, | |
| "smtpServer": {}, | |
| "loginTheme": "mta", | |
| "eventsEnabled": false, | |
| "eventsListeners": [ | |
| "jboss-logging" | |
| ], | |
| "enabledEventTypes": [], | |
| "adminEventsEnabled": false, | |
| "adminEventsDetailsEnabled": false, | |
| "components": { | |
| "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [ | |
| { | |
| "id": "c8dadabe-96df-4191-ae1f-849ed2ff1502", | |
| "name": "Allowed Protocol Mapper Types", | |
| "providerId": "allowed-protocol-mappers", | |
| "subType": "authenticated", | |
| "subComponents": {}, | |
| "config": { | |
| "allowed-protocol-mapper-types": [ | |
| "oidc-sha256-pairwise-sub-mapper", | |
| "oidc-full-name-mapper", | |
| "oidc-address-mapper", | |
| "saml-user-property-mapper", | |
| "saml-role-list-mapper", | |
| "oidc-usermodel-attribute-mapper", | |
| "oidc-usermodel-property-mapper", | |
| "saml-user-attribute-mapper" | |
| ] | |
| } | |
| }, | |
| { | |
| "id": "df19dc27-3264-4617-a8bb-6cbd4b52d00a", | |
| "name": "Consent Required", | |
| "providerId": "consent-required", | |
| "subType": "anonymous", | |
| "subComponents": {}, | |
| "config": {} | |
| }, | |
| { | |
| "id": "f19cf367-fea1-4d53-bd52-b767a67b99f4", | |
| "name": "Full Scope Disabled", | |
| "providerId": "scope", | |
| "subType": "anonymous", | |
| "subComponents": {}, | |
| "config": {} | |
| }, | |
| { | |
| "id": "6303b9a0-6433-4a71-b576-a9dd4bf3fa4c", | |
| "name": "Allowed Client Scopes", | |
| "providerId": "allowed-client-templates", | |
| "subType": "anonymous", | |
| "subComponents": {}, | |
| "config": { | |
| "allow-default-scopes": [ | |
| "true" | |
| ] | |
| } | |
| }, | |
| { | |
| "id": "27d18659-879c-42a9-9ba0-fe204e451ee9", | |
| "name": "Allowed Client Scopes", | |
| "providerId": "allowed-client-templates", | |
| "subType": "authenticated", | |
| "subComponents": {}, | |
| "config": { | |
| "allow-default-scopes": [ | |
| "true" | |
| ] | |
| } | |
| }, | |
| { | |
| "id": "ecff7960-2b35-400a-9be1-9de43c23d516", | |
| "name": "Max Clients Limit", | |
| "providerId": "max-clients", | |
| "subType": "anonymous", | |
| "subComponents": {}, | |
| "config": { | |
| "max-clients": [ | |
| "200" | |
| ] | |
| } | |
| }, | |
| { | |
| "id": "90605c40-8540-4f48-a34c-399974a4b740", | |
| "name": "Allowed Protocol Mapper Types", | |
| "providerId": "allowed-protocol-mappers", | |
| "subType": "anonymous", | |
| "subComponents": {}, | |
| "config": { | |
| "allowed-protocol-mapper-types": [ | |
| "saml-user-attribute-mapper", | |
| "oidc-usermodel-attribute-mapper", | |
| "saml-role-list-mapper", | |
| "saml-user-property-mapper", | |
| "oidc-usermodel-property-mapper", | |
| "oidc-address-mapper", | |
| "oidc-full-name-mapper", | |
| "oidc-sha256-pairwise-sub-mapper" | |
| ] | |
| } | |
| }, | |
| { | |
| "id": "5eeeef32-0255-4413-8f0f-e843b036e32f", | |
| "name": "Trusted Hosts", | |
| "providerId": "trusted-hosts", | |
| "subType": "anonymous", | |
| "subComponents": {}, | |
| "config": { | |
| "host-sending-registration-request-must-match": [ | |
| "true" | |
| ], | |
| "client-uris-must-match": [ | |
| "true" | |
| ] | |
| } | |
| } | |
| ], | |
| "org.keycloak.keys.KeyProvider": [ | |
| { | |
| "id": "449e3358-c7a9-4377-b59c-992bb9c5959f", | |
| "name": "hmac-generated", | |
| "providerId": "hmac-generated", | |
| "subComponents": {}, | |
| "config": { | |
| "priority": [ | |
| "100" | |
| ], | |
| "algorithm": [ | |
| "HS256" | |
| ] | |
| } | |
| }, | |
| { | |
| "id": "137643d3-c044-4d3e-9f7c-3b6f365ab262", | |
| "name": "rsa", | |
| "providerId": "rsa", | |
| "subComponents": {}, | |
| "config": { | |
| "privateKey": [ | |
| "**********" | |
| ], | |
| "certificate": [ | |
| "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" | |
| ], | |
| "priority": [ | |
| "100" | |
| ] | |
| } | |
| }, | |
| { | |
| "id": "f1dbbed7-76c2-43af-9525-e35e33ba10d7", | |
| "name": "aes-generated", | |
| "providerId": "aes-generated", | |
| "subComponents": {}, | |
| "config": { | |
| "priority": [ | |
| "100" | |
| ] | |
| } | |
| } | |
| ] | |
| }, | |
| "internationalizationEnabled": false, | |
| "supportedLocales": [], | |
| "authenticationFlows": [ | |
| { | |
| "id": "51125bfa-2e07-4ebf-88e7-f12c8e92b4ec", | |
| "alias": "Handle Existing Account", | |
| "description": "Handle what to do if there is existing account with same email/username like authenticated identity provider", | |
| "providerId": "basic-flow", | |
| "topLevel": false, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "idp-confirm-link", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "idp-email-verification", | |
| "requirement": "ALTERNATIVE", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "requirement": "ALTERNATIVE", | |
| "priority": 30, | |
| "flowAlias": "Verify Existing Account by Re-authentication", | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": true | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "94fd83da-f3d7-47d6-9e71-a0b47b7cbba8", | |
| "alias": "Verify Existing Account by Re-authentication", | |
| "description": "Reauthentication of existing account", | |
| "providerId": "basic-flow", | |
| "topLevel": false, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "idp-username-password-form", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "requirement": "CONDITIONAL", | |
| "priority": 20, | |
| "flowAlias": "Verify Existing Account by Re-authentication - auth-otp-form - Conditional", | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": true | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "4a6b9acd-7cd4-40eb-af5f-003206f082d8", | |
| "alias": "Verify Existing Account by Re-authentication - auth-otp-form - Conditional", | |
| "description": "Flow to determine if the auth-otp-form authenticator should be used or not.", | |
| "providerId": "basic-flow", | |
| "topLevel": false, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "conditional-user-configured", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "auth-otp-form", | |
| "requirement": "REQUIRED", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "7712a81d-1fbe-4edd-831f-84f8f26f4249", | |
| "alias": "browser", | |
| "description": "browser based authentication", | |
| "providerId": "basic-flow", | |
| "topLevel": true, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "auth-cookie", | |
| "requirement": "ALTERNATIVE", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "auth-spnego", | |
| "requirement": "DISABLED", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "identity-provider-redirector", | |
| "requirement": "ALTERNATIVE", | |
| "priority": 25, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "requirement": "ALTERNATIVE", | |
| "priority": 30, | |
| "flowAlias": "forms", | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": true | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "cfe9d425-5260-4e5e-9f75-5fa32b4817b9", | |
| "alias": "clients", | |
| "description": "Base authentication for clients", | |
| "providerId": "client-flow", | |
| "topLevel": true, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "client-secret", | |
| "requirement": "ALTERNATIVE", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "client-jwt", | |
| "requirement": "ALTERNATIVE", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "308537e3-722c-4eaa-943d-17a874e330f5", | |
| "alias": "direct grant", | |
| "description": "OpenID Connect Resource Owner Grant", | |
| "providerId": "basic-flow", | |
| "topLevel": true, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "direct-grant-validate-username", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "direct-grant-validate-password", | |
| "requirement": "REQUIRED", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "requirement": "CONDITIONAL", | |
| "priority": 30, | |
| "flowAlias": "direct grant - direct-grant-validate-otp - Conditional", | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": true | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "ebedab90-5683-4b17-ae7d-f75aefb43447", | |
| "alias": "direct grant - direct-grant-validate-otp - Conditional", | |
| "description": "Flow to determine if the direct-grant-validate-otp authenticator should be used or not.", | |
| "providerId": "basic-flow", | |
| "topLevel": false, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "conditional-user-configured", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "direct-grant-validate-otp", | |
| "requirement": "REQUIRED", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "42d5d0a4-b16e-43ea-8660-a51c094c7c29", | |
| "alias": "docker auth", | |
| "description": "Used by Docker clients to authenticate against the IDP", | |
| "providerId": "basic-flow", | |
| "topLevel": true, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "docker-http-basic-authenticator", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "87dcbe32-62fa-43b6-a5e8-e05242e162ed", | |
| "alias": "first broker login", | |
| "description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account", | |
| "providerId": "basic-flow", | |
| "topLevel": true, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticatorConfig": "review profile config", | |
| "authenticator": "idp-review-profile", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticatorConfig": "create unique user config", | |
| "authenticator": "idp-create-user-if-unique", | |
| "requirement": "ALTERNATIVE", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "requirement": "ALTERNATIVE", | |
| "priority": 30, | |
| "flowAlias": "Handle Existing Account", | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": true | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "576c3b2c-95d8-45ba-b69e-63090b4ad7de", | |
| "alias": "forms", | |
| "description": "Username, password, otp and other auth forms.", | |
| "providerId": "basic-flow", | |
| "topLevel": false, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "auth-username-password-form", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "requirement": "CONDITIONAL", | |
| "priority": 20, | |
| "flowAlias": "forms - auth-otp-form - Conditional", | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": true | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "ad871a5b-5c4a-40d6-be43-a0cec0408c08", | |
| "alias": "forms - auth-otp-form - Conditional", | |
| "description": "Flow to determine if the auth-otp-form authenticator should be used or not.", | |
| "providerId": "basic-flow", | |
| "topLevel": false, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "conditional-user-configured", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "auth-otp-form", | |
| "requirement": "REQUIRED", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "0a1a8df4-5624-4d26-bdea-f93aad958da7", | |
| "alias": "registration", | |
| "description": "registration flow", | |
| "providerId": "basic-flow", | |
| "topLevel": true, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "registration-page-form", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "flowAlias": "registration form", | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": true | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "9b48012c-6973-4dd5-b539-949ff10c2b8d", | |
| "alias": "registration form", | |
| "description": "registration form", | |
| "providerId": "form-flow", | |
| "topLevel": false, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "registration-user-creation", | |
| "requirement": "REQUIRED", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "registration-profile-action", | |
| "requirement": "REQUIRED", | |
| "priority": 40, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "registration-password-action", | |
| "requirement": "REQUIRED", | |
| "priority": 50, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "registration-recaptcha-action", | |
| "requirement": "DISABLED", | |
| "priority": 60, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "cfab9c2a-ec4b-44e6-bd06-cc38d0b184b5", | |
| "alias": "reset credentials", | |
| "description": "Reset credentials for a user if they forgot their password or something", | |
| "providerId": "basic-flow", | |
| "topLevel": true, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "reset-credentials-choose-user", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "reset-credential-email", | |
| "requirement": "REQUIRED", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "reset-password", | |
| "requirement": "REQUIRED", | |
| "priority": 30, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "requirement": "CONDITIONAL", | |
| "priority": 40, | |
| "flowAlias": "reset credentials - reset-otp - Conditional", | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": true | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "b6120672-c316-44df-9aab-2a8502b920fd", | |
| "alias": "reset credentials - reset-otp - Conditional", | |
| "description": "Flow to determine if the reset-otp authenticator should be used or not.", | |
| "providerId": "basic-flow", | |
| "topLevel": false, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "conditional-user-configured", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| }, | |
| { | |
| "authenticator": "reset-otp", | |
| "requirement": "REQUIRED", | |
| "priority": 20, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| } | |
| ] | |
| }, | |
| { | |
| "id": "9ef48d4c-c17b-4542-bd36-57a480ef7c80", | |
| "alias": "saml ecp", | |
| "description": "SAML ECP Profile Authentication Flow", | |
| "providerId": "basic-flow", | |
| "topLevel": true, | |
| "builtIn": true, | |
| "authenticationExecutions": [ | |
| { | |
| "authenticator": "http-basic-authenticator", | |
| "requirement": "REQUIRED", | |
| "priority": 10, | |
| "userSetupAllowed": false, | |
| "autheticatorFlow": false | |
| } | |
| ] | |
| } | |
| ], | |
| "authenticatorConfig": [ | |
| { | |
| "id": "5b53483e-8ac4-47be-ac17-c69aadc80ac6", | |
| "alias": "create unique user config", | |
| "config": { | |
| "require.password.update.after.registration": "false" | |
| } | |
| }, | |
| { | |
| "id": "fe018fc6-71bd-4746-8fc3-aacb14c6d96a", | |
| "alias": "review profile config", | |
| "config": { | |
| "update.profile.on.first.login": "missing" | |
| } | |
| } | |
| ], | |
| "requiredActions": [ | |
| { | |
| "alias": "CONFIGURE_TOTP", | |
| "name": "Configure OTP", | |
| "providerId": "CONFIGURE_TOTP", | |
| "enabled": true, | |
| "defaultAction": false, | |
| "priority": 10, | |
| "config": {} | |
| }, | |
| { | |
| "alias": "terms_and_conditions", | |
| "name": "Terms and Conditions", | |
| "providerId": "terms_and_conditions", | |
| "enabled": false, | |
| "defaultAction": false, | |
| "priority": 20, | |
| "config": {} | |
| }, | |
| { | |
| "alias": "UPDATE_PASSWORD", | |
| "name": "Update Password", | |
| "providerId": "UPDATE_PASSWORD", | |
| "enabled": true, | |
| "defaultAction": false, | |
| "priority": 30, | |
| "config": {} | |
| }, | |
| { | |
| "alias": "UPDATE_PROFILE", | |
| "name": "Update Profile", | |
| "providerId": "UPDATE_PROFILE", | |
| "enabled": true, | |
| "defaultAction": false, | |
| "priority": 40, | |
| "config": {} | |
| }, | |
| { | |
| "alias": "VERIFY_EMAIL", | |
| "name": "Verify Email", | |
| "providerId": "VERIFY_EMAIL", | |
| "enabled": true, | |
| "defaultAction": false, | |
| "priority": 50, | |
| "config": {} | |
| } | |
| ], | |
| "browserFlow": "browser", | |
| "registrationFlow": "registration", | |
| "directGrantFlow": "direct grant", | |
| "resetCredentialsFlow": "reset credentials", | |
| "clientAuthenticationFlow": "clients", | |
| "dockerAuthenticationFlow": "docker auth", | |
| "attributes": { | |
| "displayName": "Migration Toolkit for Applications Web Console", | |
| "webAuthnPolicyAuthenticatorAttachment": "not specified", | |
| "_browser_header.xRobotsTag": "none", | |
| "webAuthnPolicyRpEntityName": "keycloak", | |
| "failureFactor": "30", | |
| "actionTokenGeneratedByUserLifespan": "300", | |
| "maxDeltaTimeSeconds": "43200", | |
| "webAuthnPolicySignatureAlgorithms": "ES256", | |
| "offlineSessionMaxLifespan": "5184000", | |
| "_browser_header.contentSecurityPolicyReportOnly": "", | |
| "bruteForceProtected": "false", | |
| "_browser_header.contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';", | |
| "_browser_header.xXSSProtection": "1; mode=block", | |
| "_browser_header.xFrameOptions": "SAMEORIGIN", | |
| "_browser_header.strictTransportSecurity": "max-age=31536000; includeSubDomains", | |
| "webAuthnPolicyUserVerificationRequirement": "not specified", | |
| "permanentLockout": "false", | |
| "quickLoginCheckMilliSeconds": "1000", | |
| "webAuthnPolicyCreateTimeout": "0", | |
| "webAuthnPolicyRequireResidentKey": "not specified", | |
| "webAuthnPolicyRpId": "", | |
| "webAuthnPolicyAttestationConveyancePreference": "not specified", | |
| "maxFailureWaitSeconds": "900", | |
| "minimumQuickLoginWaitSeconds": "60", | |
| "webAuthnPolicyAvoidSameAuthenticatorRegister": "false", | |
| "_browser_header.xContentTypeOptions": "nosniff", | |
| "actionTokenGeneratedByAdminLifespan": "43200", | |
| "waitIncrementSeconds": "60", | |
| "offlineSessionMaxLifespanEnabled": "false" | |
| }, | |
| "keycloakVersion": "8.0.1", | |
| "userManagedAccessAllowed": false | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment