mirror of
https://github.com/coltoneshaw/CS-Repro-Mattermost.git
synced 2025-12-23 18:11:34 +01:00
2522 lines
81 KiB
JSON
2522 lines
81 KiB
JSON
{
|
|
"id": "a97f1e13-04fc-4a0e-829d-b6ba7a426b73",
|
|
"realm": "master",
|
|
"displayName": "Keycloak",
|
|
"displayNameHtml": "<div class=\"kc-logo-text\"><span>Keycloak</span></div>",
|
|
"notBefore": 0,
|
|
"defaultSignatureAlgorithm": "RS256",
|
|
"revokeRefreshToken": false,
|
|
"refreshTokenMaxReuse": 0,
|
|
"accessTokenLifespan": 60,
|
|
"accessTokenLifespanForImplicitFlow": 900,
|
|
"ssoSessionIdleTimeout": 1800,
|
|
"ssoSessionMaxLifespan": 36000,
|
|
"ssoSessionIdleTimeoutRememberMe": 0,
|
|
"ssoSessionMaxLifespanRememberMe": 0,
|
|
"offlineSessionIdleTimeout": 2592000,
|
|
"offlineSessionMaxLifespanEnabled": false,
|
|
"offlineSessionMaxLifespan": 5184000,
|
|
"clientSessionIdleTimeout": 0,
|
|
"clientSessionMaxLifespan": 0,
|
|
"clientOfflineSessionIdleTimeout": 0,
|
|
"clientOfflineSessionMaxLifespan": 0,
|
|
"accessCodeLifespan": 60,
|
|
"accessCodeLifespanUserAction": 300,
|
|
"accessCodeLifespanLogin": 1800,
|
|
"actionTokenGeneratedByAdminLifespan": 43200,
|
|
"actionTokenGeneratedByUserLifespan": 300,
|
|
"oauth2DeviceCodeLifespan": 600,
|
|
"oauth2DevicePollingInterval": 600,
|
|
"enabled": true,
|
|
"sslRequired": "none",
|
|
"registrationAllowed": false,
|
|
"registrationEmailAsUsername": false,
|
|
"rememberMe": false,
|
|
"verifyEmail": false,
|
|
"loginWithEmailAllowed": true,
|
|
"duplicateEmailsAllowed": false,
|
|
"resetPasswordAllowed": false,
|
|
"editUsernameAllowed": false,
|
|
"bruteForceProtected": false,
|
|
"permanentLockout": false,
|
|
"maxFailureWaitSeconds": 900,
|
|
"minimumQuickLoginWaitSeconds": 60,
|
|
"waitIncrementSeconds": 60,
|
|
"quickLoginCheckMilliSeconds": 1000,
|
|
"maxDeltaTimeSeconds": 43200,
|
|
"failureFactor": 30,
|
|
"roles": {
|
|
"realm": [
|
|
{
|
|
"id": "6ceda107-9da4-4045-8598-4c2f5f72f506",
|
|
"name": "offline_access",
|
|
"description": "${role_offline-access}",
|
|
"composite": false,
|
|
"clientRole": false,
|
|
"containerId": "a97f1e13-04fc-4a0e-829d-b6ba7a426b73",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "07ea6201-1dcb-4182-8661-eaa156e15120",
|
|
"name": "admin",
|
|
"description": "${role_admin}",
|
|
"composite": true,
|
|
"composites": {
|
|
"realm": [
|
|
"create-realm"
|
|
],
|
|
"client": {
|
|
"master-realm": [
|
|
"view-identity-providers",
|
|
"create-client",
|
|
"view-events",
|
|
"manage-realm",
|
|
"query-users",
|
|
"view-realm",
|
|
"manage-identity-providers",
|
|
"manage-authorization",
|
|
"query-clients",
|
|
"query-groups",
|
|
"manage-clients",
|
|
"manage-events",
|
|
"query-realms",
|
|
"impersonation",
|
|
"view-users",
|
|
"view-authorization",
|
|
"manage-users",
|
|
"view-clients"
|
|
]
|
|
}
|
|
},
|
|
"clientRole": false,
|
|
"containerId": "a97f1e13-04fc-4a0e-829d-b6ba7a426b73",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "7b305a19-b453-4315-94be-d7d831ee2e31",
|
|
"name": "uma_authorization",
|
|
"description": "${role_uma_authorization}",
|
|
"composite": false,
|
|
"clientRole": false,
|
|
"containerId": "a97f1e13-04fc-4a0e-829d-b6ba7a426b73",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "92580f99-5da1-417c-b48d-1cabef7fc006",
|
|
"name": "create-realm",
|
|
"description": "${role_create-realm}",
|
|
"composite": false,
|
|
"clientRole": false,
|
|
"containerId": "a97f1e13-04fc-4a0e-829d-b6ba7a426b73",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "c95f33a9-eebb-4c7a-96b5-ec28df088b46",
|
|
"name": "default-roles-master",
|
|
"description": "${role_default-roles}",
|
|
"composite": true,
|
|
"composites": {
|
|
"realm": [
|
|
"offline_access",
|
|
"uma_authorization"
|
|
],
|
|
"client": {
|
|
"account": [
|
|
"manage-account",
|
|
"view-profile"
|
|
]
|
|
}
|
|
},
|
|
"clientRole": false,
|
|
"containerId": "a97f1e13-04fc-4a0e-829d-b6ba7a426b73",
|
|
"attributes": {}
|
|
}
|
|
],
|
|
"client": {
|
|
"mattermost": [],
|
|
"security-admin-console": [],
|
|
"admin-cli": [],
|
|
"account-console": [],
|
|
"broker": [
|
|
{
|
|
"id": "d6435a61-4e33-4db3-8e69-8f1fb30b6873",
|
|
"name": "read-token",
|
|
"description": "${role_read-token}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "9210e2c0-6e39-408d-8c28-044b00f75a44",
|
|
"attributes": {}
|
|
}
|
|
],
|
|
"master-realm": [
|
|
{
|
|
"id": "95c7790e-4740-4a32-813f-bcc42e0c2ce7",
|
|
"name": "view-identity-providers",
|
|
"description": "${role_view-identity-providers}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "077473ec-4f55-4b73-8f94-0e1bf88db2c3",
|
|
"name": "create-client",
|
|
"description": "${role_create-client}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "886a497e-00d8-4ccb-bfd5-321800cf4b9d",
|
|
"name": "view-events",
|
|
"description": "${role_view-events}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "7380ae62-f6ef-46c1-be8e-e8ecfb9549b1",
|
|
"name": "manage-realm",
|
|
"description": "${role_manage-realm}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "2fd4abbc-9eac-4701-acfc-3ec1ec00b66d",
|
|
"name": "query-users",
|
|
"description": "${role_query-users}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "5ba5179c-a484-42e7-af2d-defa50bfc4d8",
|
|
"name": "view-realm",
|
|
"description": "${role_view-realm}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "b50363c0-3ac2-410a-aac1-6a5d4b6db4e1",
|
|
"name": "manage-identity-providers",
|
|
"description": "${role_manage-identity-providers}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "b0e4af2b-833a-4591-b971-6f5a8a5b55d5",
|
|
"name": "manage-authorization",
|
|
"description": "${role_manage-authorization}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "43c9c1d8-186f-439b-ab3c-b20bb0b4dcb2",
|
|
"name": "query-clients",
|
|
"description": "${role_query-clients}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "fea03a8f-e7a8-40c8-9642-02a10c0a4320",
|
|
"name": "manage-clients",
|
|
"description": "${role_manage-clients}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "2d14a5c7-e054-4f69-8b97-f7bc9eecdfd8",
|
|
"name": "query-groups",
|
|
"description": "${role_query-groups}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "a577d4ef-342a-4d29-9f6a-20c9dd491067",
|
|
"name": "manage-events",
|
|
"description": "${role_manage-events}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "616ea72c-d23c-41bc-8cad-70aef73a35b2",
|
|
"name": "impersonation",
|
|
"description": "${role_impersonation}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "07223c48-e5d7-4295-99d2-51bc49693a3d",
|
|
"name": "query-realms",
|
|
"description": "${role_query-realms}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "9ce6baa3-3ea4-4f5b-829d-bb704346cdbf",
|
|
"name": "view-users",
|
|
"description": "${role_view-users}",
|
|
"composite": true,
|
|
"composites": {
|
|
"client": {
|
|
"master-realm": [
|
|
"query-groups",
|
|
"query-users"
|
|
]
|
|
}
|
|
},
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "e034b189-5a49-4a82-a2fa-263a1142cf2e",
|
|
"name": "view-authorization",
|
|
"description": "${role_view-authorization}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "94ed2028-7ed5-4183-8c1b-7ccd6e6ad745",
|
|
"name": "manage-users",
|
|
"description": "${role_manage-users}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "09cf429d-67c9-422b-bb95-0a26bb7ce7c2",
|
|
"name": "view-clients",
|
|
"description": "${role_view-clients}",
|
|
"composite": true,
|
|
"composites": {
|
|
"client": {
|
|
"master-realm": [
|
|
"query-clients"
|
|
]
|
|
}
|
|
},
|
|
"clientRole": true,
|
|
"containerId": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"attributes": {}
|
|
}
|
|
],
|
|
"account": [
|
|
{
|
|
"id": "869fe846-8c14-4cd3-9bbf-e477bcadd1b4",
|
|
"name": "view-applications",
|
|
"description": "${role_view-applications}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "a68e0f49-c5dd-4484-bc13-8032a28a1db3",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "6d914cb9-a27f-4e72-a359-6312bec6fff2",
|
|
"name": "view-consent",
|
|
"description": "${role_view-consent}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "a68e0f49-c5dd-4484-bc13-8032a28a1db3",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "847706e1-5309-4a7b-929f-450395f9d82e",
|
|
"name": "manage-account",
|
|
"description": "${role_manage-account}",
|
|
"composite": true,
|
|
"composites": {
|
|
"client": {
|
|
"account": [
|
|
"manage-account-links"
|
|
]
|
|
}
|
|
},
|
|
"clientRole": true,
|
|
"containerId": "a68e0f49-c5dd-4484-bc13-8032a28a1db3",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "96c95342-d281-4f7b-8e46-bd9d0a6f7d07",
|
|
"name": "manage-consent",
|
|
"description": "${role_manage-consent}",
|
|
"composite": true,
|
|
"composites": {
|
|
"client": {
|
|
"account": [
|
|
"view-consent"
|
|
]
|
|
}
|
|
},
|
|
"clientRole": true,
|
|
"containerId": "a68e0f49-c5dd-4484-bc13-8032a28a1db3",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "416e5096-dfdf-4ad4-892b-29fcc48b0bbd",
|
|
"name": "delete-account",
|
|
"description": "${role_delete-account}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "a68e0f49-c5dd-4484-bc13-8032a28a1db3",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "cbd3b120-bf5b-4239-953d-adacc0c75927",
|
|
"name": "view-profile",
|
|
"description": "${role_view-profile}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "a68e0f49-c5dd-4484-bc13-8032a28a1db3",
|
|
"attributes": {}
|
|
},
|
|
{
|
|
"id": "bc0b6832-4f2e-4616-b52d-57cad36b91e4",
|
|
"name": "manage-account-links",
|
|
"description": "${role_manage-account-links}",
|
|
"composite": false,
|
|
"clientRole": true,
|
|
"containerId": "a68e0f49-c5dd-4484-bc13-8032a28a1db3",
|
|
"attributes": {}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"groups": [],
|
|
"defaultRole": {
|
|
"id": "c95f33a9-eebb-4c7a-96b5-ec28df088b46",
|
|
"name": "default-roles-master",
|
|
"description": "${role_default-roles}",
|
|
"composite": true,
|
|
"clientRole": false,
|
|
"containerId": "a97f1e13-04fc-4a0e-829d-b6ba7a426b73"
|
|
},
|
|
"requiredCredentials": [
|
|
"password"
|
|
],
|
|
"otpPolicyType": "totp",
|
|
"otpPolicyAlgorithm": "HmacSHA1",
|
|
"otpPolicyInitialCounter": 0,
|
|
"otpPolicyDigits": 6,
|
|
"otpPolicyLookAheadWindow": 1,
|
|
"otpPolicyPeriod": 30,
|
|
"otpSupportedApplications": [
|
|
"FreeOTP",
|
|
"Google Authenticator"
|
|
],
|
|
"webAuthnPolicyRpEntityName": "keycloak",
|
|
"webAuthnPolicySignatureAlgorithms": [
|
|
"ES256"
|
|
],
|
|
"webAuthnPolicyRpId": "",
|
|
"webAuthnPolicyAttestationConveyancePreference": "not specified",
|
|
"webAuthnPolicyAuthenticatorAttachment": "not specified",
|
|
"webAuthnPolicyRequireResidentKey": "not specified",
|
|
"webAuthnPolicyUserVerificationRequirement": "not specified",
|
|
"webAuthnPolicyCreateTimeout": 0,
|
|
"webAuthnPolicyAvoidSameAuthenticatorRegister": false,
|
|
"webAuthnPolicyAcceptableAaguids": [],
|
|
"webAuthnPolicyPasswordlessRpEntityName": "keycloak",
|
|
"webAuthnPolicyPasswordlessSignatureAlgorithms": [
|
|
"ES256"
|
|
],
|
|
"webAuthnPolicyPasswordlessRpId": "",
|
|
"webAuthnPolicyPasswordlessAttestationConveyancePreference": "not specified",
|
|
"webAuthnPolicyPasswordlessAuthenticatorAttachment": "not specified",
|
|
"webAuthnPolicyPasswordlessRequireResidentKey": "not specified",
|
|
"webAuthnPolicyPasswordlessUserVerificationRequirement": "not specified",
|
|
"webAuthnPolicyPasswordlessCreateTimeout": 0,
|
|
"webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister": false,
|
|
"webAuthnPolicyPasswordlessAcceptableAaguids": [],
|
|
"scopeMappings": [
|
|
{
|
|
"clientScope": "offline_access",
|
|
"roles": [
|
|
"offline_access"
|
|
]
|
|
}
|
|
],
|
|
"clientScopeMappings": {
|
|
"account": [
|
|
{
|
|
"client": "account-console",
|
|
"roles": [
|
|
"manage-account"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"clients": [
|
|
{
|
|
"id": "a68e0f49-c5dd-4484-bc13-8032a28a1db3",
|
|
"clientId": "account",
|
|
"name": "${client_account}",
|
|
"rootUrl": "${authBaseUrl}",
|
|
"baseUrl": "/realms/master/account/",
|
|
"surrogateAuthRequired": false,
|
|
"enabled": true,
|
|
"alwaysDisplayInConsole": false,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"redirectUris": [
|
|
"/realms/master/account/*"
|
|
],
|
|
"webOrigins": [],
|
|
"notBefore": 0,
|
|
"bearerOnly": false,
|
|
"consentRequired": false,
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"serviceAccountsEnabled": false,
|
|
"publicClient": true,
|
|
"frontchannelLogout": false,
|
|
"protocol": "openid-connect",
|
|
"attributes": {},
|
|
"authenticationFlowBindingOverrides": {},
|
|
"fullScopeAllowed": false,
|
|
"nodeReRegistrationTimeout": 0,
|
|
"defaultClientScopes": [
|
|
"web-origins",
|
|
"acr",
|
|
"profile",
|
|
"roles",
|
|
"email"
|
|
],
|
|
"optionalClientScopes": [
|
|
"address",
|
|
"phone",
|
|
"offline_access",
|
|
"microprofile-jwt"
|
|
]
|
|
},
|
|
{
|
|
"id": "df4abd4c-6513-49f0-87be-f931b68b79f6",
|
|
"clientId": "account-console",
|
|
"name": "${client_account-console}",
|
|
"rootUrl": "${authBaseUrl}",
|
|
"baseUrl": "/realms/master/account/",
|
|
"surrogateAuthRequired": false,
|
|
"enabled": true,
|
|
"alwaysDisplayInConsole": false,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"redirectUris": [
|
|
"/realms/master/account/*"
|
|
],
|
|
"webOrigins": [],
|
|
"notBefore": 0,
|
|
"bearerOnly": false,
|
|
"consentRequired": false,
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"serviceAccountsEnabled": false,
|
|
"publicClient": true,
|
|
"frontchannelLogout": false,
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"pkce.code.challenge.method": "S256"
|
|
},
|
|
"authenticationFlowBindingOverrides": {},
|
|
"fullScopeAllowed": false,
|
|
"nodeReRegistrationTimeout": 0,
|
|
"protocolMappers": [
|
|
{
|
|
"id": "a83246f2-0e8b-47fb-b116-64ecce0b72a6",
|
|
"name": "audience resolve",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-audience-resolve-mapper",
|
|
"consentRequired": false,
|
|
"config": {}
|
|
}
|
|
],
|
|
"defaultClientScopes": [
|
|
"web-origins",
|
|
"acr",
|
|
"profile",
|
|
"roles",
|
|
"email"
|
|
],
|
|
"optionalClientScopes": [
|
|
"address",
|
|
"phone",
|
|
"offline_access",
|
|
"microprofile-jwt"
|
|
]
|
|
},
|
|
{
|
|
"id": "fb2e402e-5848-42e1-a922-74c763adee65",
|
|
"clientId": "admin-cli",
|
|
"name": "${client_admin-cli}",
|
|
"surrogateAuthRequired": false,
|
|
"enabled": true,
|
|
"alwaysDisplayInConsole": false,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"redirectUris": [],
|
|
"webOrigins": [],
|
|
"notBefore": 0,
|
|
"bearerOnly": false,
|
|
"consentRequired": false,
|
|
"standardFlowEnabled": false,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": true,
|
|
"serviceAccountsEnabled": false,
|
|
"publicClient": true,
|
|
"frontchannelLogout": false,
|
|
"protocol": "openid-connect",
|
|
"attributes": {},
|
|
"authenticationFlowBindingOverrides": {},
|
|
"fullScopeAllowed": false,
|
|
"nodeReRegistrationTimeout": 0,
|
|
"defaultClientScopes": [
|
|
"web-origins",
|
|
"acr",
|
|
"profile",
|
|
"roles",
|
|
"email"
|
|
],
|
|
"optionalClientScopes": [
|
|
"address",
|
|
"phone",
|
|
"offline_access",
|
|
"microprofile-jwt"
|
|
]
|
|
},
|
|
{
|
|
"id": "9210e2c0-6e39-408d-8c28-044b00f75a44",
|
|
"clientId": "broker",
|
|
"name": "${client_broker}",
|
|
"surrogateAuthRequired": false,
|
|
"enabled": true,
|
|
"alwaysDisplayInConsole": false,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"redirectUris": [],
|
|
"webOrigins": [],
|
|
"notBefore": 0,
|
|
"bearerOnly": true,
|
|
"consentRequired": false,
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"serviceAccountsEnabled": false,
|
|
"publicClient": false,
|
|
"frontchannelLogout": false,
|
|
"protocol": "openid-connect",
|
|
"attributes": {},
|
|
"authenticationFlowBindingOverrides": {},
|
|
"fullScopeAllowed": false,
|
|
"nodeReRegistrationTimeout": 0,
|
|
"defaultClientScopes": [
|
|
"web-origins",
|
|
"acr",
|
|
"profile",
|
|
"roles",
|
|
"email"
|
|
],
|
|
"optionalClientScopes": [
|
|
"address",
|
|
"phone",
|
|
"offline_access",
|
|
"microprofile-jwt"
|
|
]
|
|
},
|
|
{
|
|
"id": "30e97ab6-7d99-445f-9744-04328a5e098e",
|
|
"clientId": "master-realm",
|
|
"name": "master Realm",
|
|
"surrogateAuthRequired": false,
|
|
"enabled": true,
|
|
"alwaysDisplayInConsole": false,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"redirectUris": [],
|
|
"webOrigins": [],
|
|
"notBefore": 0,
|
|
"bearerOnly": true,
|
|
"consentRequired": false,
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"serviceAccountsEnabled": false,
|
|
"publicClient": false,
|
|
"frontchannelLogout": false,
|
|
"attributes": {},
|
|
"authenticationFlowBindingOverrides": {},
|
|
"fullScopeAllowed": false,
|
|
"nodeReRegistrationTimeout": 0,
|
|
"defaultClientScopes": [
|
|
"web-origins",
|
|
"acr",
|
|
"profile",
|
|
"roles",
|
|
"email"
|
|
],
|
|
"optionalClientScopes": [
|
|
"address",
|
|
"phone",
|
|
"offline_access",
|
|
"microprofile-jwt"
|
|
]
|
|
},
|
|
{
|
|
"id": "724e3122-78db-4c7d-bacc-04260c6a5ed2",
|
|
"clientId": "mattermost",
|
|
"rootUrl": "http://localhost:8065",
|
|
"baseUrl": "/login/sso/saml",
|
|
"surrogateAuthRequired": false,
|
|
"enabled": true,
|
|
"alwaysDisplayInConsole": false,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "**********",
|
|
"redirectUris": [
|
|
"/login/sso/saml"
|
|
],
|
|
"webOrigins": [],
|
|
"notBefore": 0,
|
|
"bearerOnly": false,
|
|
"consentRequired": false,
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"serviceAccountsEnabled": false,
|
|
"publicClient": false,
|
|
"frontchannelLogout": true,
|
|
"protocol": "saml",
|
|
"attributes": {
|
|
"saml.force.post.binding": "true",
|
|
"saml.multivalued.roles": "false",
|
|
"frontchannel.logout.session.required": "false",
|
|
"oauth2.device.authorization.grant.enabled": "false",
|
|
"backchannel.logout.revoke.offline.tokens": "false",
|
|
"saml.server.signature.keyinfo.ext": "false",
|
|
"use.refresh.tokens": "true",
|
|
"saml.signing.certificate": "MIICozCCAYsCBgGFojx4JDANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDAptYXR0ZXJtb3N0MB4XDTIzMDExMTE5MDczMFoXDTMzMDExMTE5MDkxMFowFTETMBEGA1UEAwwKbWF0dGVybW9zdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKx1RXhDMskLAra9Eyhaadhrxym0t8hDGq+SXby5O0+1kS62YUbKzwLLpedMmvsxXG5CMI8iSU/GxgdgwUQndQPVITVBptovqRvKUZUxQNEZewN2k9pzzcG5jX2eyZSoxZVv4drgoTVKd21xldQgQ2n14qkfrRMFEP3P7WSCxNjVJM25mcgid5/kpiwX1Kx42PNdb53weuZlfveNwdMP8JSxPu1fwg/F8ddpr/MnNKbZMPuxsT67jovZt3X4yANZ3S80DKOc1YKKqOPObvzJ7GmHlCsfS8BAvNPvhRMAI4ItUzyjm3nTpj0XLq0LskM0ixtX9gICGBm1XXFomvMFlq0CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAiIhLE3NaWRkl9ECECf0fQunFgHFJww6PzV4XciYllytPYBnbrUpc+Hsj7litriwwWwj4QmXpasl8iwVKvTQVxJ2XmIUfoNRjrhQ+KZ3VO85FYcC0Qvz7BLdsBOsWa6b/2h2JK04a9gff/CmGhZwkJAx+of/gyTjV3VfI7UFY0+yCQs9acCn0Zf6y2av6HfN9pYA7yPhShMEb3Va6ZDsFra6xG5cpS2ZNMdJw7M5WmBvAt9C0a0/GPmajzENbES0sXrjho4JshJsLjynbNN/g02GlAtC9E132rYf5FNlepsUet61dixRU/VVH+2DaZLF4r7781ZDDhiAHCM1Iq3gFsA==",
|
|
"oidc.ciba.grant.enabled": "false",
|
|
"backchannel.logout.session.required": "false",
|
|
"client_credentials.use_refresh_token": "false",
|
|
"saml.signature.algorithm": "RSA_SHA256",
|
|
"require.pushed.authorization.requests": "false",
|
|
"saml.client.signature": "false",
|
|
"saml.signing.private.key": "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",
|
|
"saml.allow.ecp.flow": "false",
|
|
"id.token.as.detached.signature": "false",
|
|
"saml.assertion.signature": "false",
|
|
"client.secret.creation.time": "1673464207",
|
|
"saml.encryption.private.key": "MIIEpQIBAAKCAQEAy830vuA0ISsrbyLWBywiD+3XNu//z9qRx4uiy+948DXWjlEirLx9GwWJZHuPKtEgFxXHjOD2Eko7W/m+EznTHHVxV0guDYviCLdi5sqpnBRZS5146cr1fJCkOEGUC1HWCxXaQb3LH7JZbXuvIKWAiZnDcDYn//fS8zdz7N9WRqpRntKodGEtBud73tG6PmESi2E5aiHi0zrTmN51RxVtX8bEe5ET3Whl6wG1wnD/GPfuNpYPr+GFs2VK9Fi6vQs8SUo1P1bTH2V1VkJmovOBIT9aalBl60P8ByZ3dX5x1HY01Vy1IIPKBOHu+cLCUNtROLWNQIajJWuobckcxxliTQIDAQABAoIBAAvCDR26B6fmOrJFuz1csXZjzWfQ/tw6CvENQE4tubd6E6/QRITctwcJEb0nV8IroINUcVfSXr/9YmFTDkFDs8dPi0Ny2Z1Udaz1D5KrHI/xqJkxM5mhaPpPyfmo5uakSQoIr7fdQEvK2Vf0q8zhX4IQyfK+XR5qaNQ5XcnLtMmMzYApqgL2rwVoSvO39+BZiXzraEDykSdPRXV4RawaeXSllzqXUZwWy7P2ZwxR4+Vix2H1/m8bBrAcYptetwEi0K/T1mZualrU8P1HsJZEPA76BxNrKORk4U4RKCPaVV6mI73zxxI+1rpR6XooEQFVzHxFtvBWpibwPlu6CFNdCyECgYEA+4Oh/FHIANmmPu6QKt+XnguSzdl5Ar7FS6Gd8ksIHpLdpEfkCTugK5T/s/hpkPZQETcpgk7xqpaOkPNnmqaXfCa8BAQnM7UkhhqEpa4dSdFES/wqaVEZAgbITkoQVlXWZtkaAFV9PacxfQVEEcGn2qNZFb6uLa4bXq3EXbXf/oUCgYEAz3B9X2FzdfigEjbyks1Btq+L/OhrhqW6vkjKFSNyjz/OY9QsC9K08gqTPNkzFipUIBzrNIpXqia4Ew4OJXJXu1obezd5gWd1Jg+eNhemde1TaQ9GZbawG9vGWQmuE02jOzDEF7YcN2IL/6k8U29kXBru+GrruNzHkVF+jDFK0ykCgYEA7yYjoRJ19PD+1TnrVQjTVpC0nwzYtlaErLxYvajAaKnHG8zLtEfArY/4bryWTCMY0LW9v0ynF0ge+Q6oBXG/+mmuPrdgOxdTSjvuwsbCzIyxvvpfrVJSUA346hAcZqspuRNXWNfwxO2z7adTKPsVSpwlObrcTU0Oc0EQxPYJrS0CgYEAyt863fNSlkeHVQkEB2pSIDZi8/7iWhbvIXXSnQXD3jEKyjsQsKdra2PIR7Qr8DuJdraRmRrLTY78azZNw3WmM4aWZdUFMfdabNTNaB2NILvv3UmhEYyvgy9XNnDvG9XME/FHdeEWi1uKXIjIhNjmD+YPXEhFLNBPJOHMn5L9mLECgYEA068BGxGJIVNxGCD8iErF+DUxltbuzX6cw0pkj2W2tA0Z3tgvlSnQuNW/5k8w7D0wlI6XmZfxtx2D3eY7Iany8TLXGEW9NOd8U8FgQzf+hFZA+k4gnfLQOeaRolfzIXn6jDoNNkNdNr2Yt8E9IKFbiZwsVHj6Q/hR+Ds/lEBPH9Q=",
|
|
"saml.encrypt": "false",
|
|
"saml.server.signature": "false",
|
|
"exclude.session.state.from.auth.response": "false",
|
|
"saml.artifact.binding.identifier": "s+FCT7acoISBsDrZ2B6VSIQhmX8=",
|
|
"saml.artifact.binding": "false",
|
|
"saml_force_name_id_format": "true",
|
|
"acr.loa.map": "{}",
|
|
"saml.encryption.certificate": "MIICozCCAYsCBgGFomUJ3zANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDAptYXR0ZXJtb3N0MB4XDTIzMDExMTE5NTE0OFoXDTMzMDExMTE5NTMyOFowFTETMBEGA1UEAwwKbWF0dGVybW9zdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMvN9L7gNCErK28i1gcsIg/t1zbv/8/akceLosvvePA11o5RIqy8fRsFiWR7jyrRIBcVx4zg9hJKO1v5vhM50xx1cVdILg2L4gi3YubKqZwUWUudeOnK9XyQpDhBlAtR1gsV2kG9yx+yWW17ryClgImZw3A2J//30vM3c+zfVkaqUZ7SqHRhLQbne97Ruj5hEothOWoh4tM605jedUcVbV/GxHuRE91oZesBtcJw/xj37jaWD6/hhbNlSvRYur0LPElKNT9W0x9ldVZCZqLzgSE/WmpQZetD/Acmd3V+cdR2NNVctSCDygTh7vnCwlDbUTi1jUCGoyVrqG3JHMcZYk0CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEADYsy/DAPauvcCk2inH20xMjj2Wmf+s9TU+KfGGl7tD+7n4cN/G1sue822Yjqk/3qeIvhvAFZzOjx1BMBinLtuue17KLueV/U0XkBBgZVHy32fCGiYlxaykmK9G+j3bjAluX8Nv4XQ2nksC2hTvkFSJEcdYjYw7IecMjPsnxf3Yrn/jrWHpIPEQuzw/zh+asOhUHga4d1OioLBZbw0aIVW3c4SLD5OIp4irbxMkwCdp3EWEK+xOoFmyboBfhBpv1/uKIe1+6hMINW2lXKwSBn4NoRRVrkrdgrTAICDcEeUK1S91fVo5+y7qSRdGHVtZFdf+kie/BR5oEOiHKz1orLuw==",
|
|
"tls.client.certificate.bound.access.tokens": "false",
|
|
"saml.authnstatement": "true",
|
|
"display.on.consent.screen": "false",
|
|
"saml_name_id_format": "email",
|
|
"token.response.type.bearer.lower-case": "false",
|
|
"saml.onetimeuse.condition": "false",
|
|
"saml_signature_canonicalization_method": "http://www.w3.org/2001/10/xml-exc-c14n#"
|
|
},
|
|
"authenticationFlowBindingOverrides": {},
|
|
"fullScopeAllowed": true,
|
|
"nodeReRegistrationTimeout": -1,
|
|
"protocolMappers": [
|
|
{
|
|
"id": "39f3946e-63aa-4b58-82a1-2d097bd440b9",
|
|
"name": "X500 email",
|
|
"protocol": "saml",
|
|
"protocolMapper": "saml-user-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"attribute.nameformat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri",
|
|
"user.attribute": "email",
|
|
"friendly.name": "email",
|
|
"attribute.name": "urn:oid:1.2.840.113549.1.9.1"
|
|
}
|
|
},
|
|
{
|
|
"id": "9e4e5aed-a91e-4b4c-b717-e313eb46f962",
|
|
"name": "X500 surname",
|
|
"protocol": "saml",
|
|
"protocolMapper": "saml-user-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"attribute.nameformat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri",
|
|
"user.attribute": "lastName",
|
|
"friendly.name": "surname",
|
|
"attribute.name": "urn:oid:2.5.4.4"
|
|
}
|
|
},
|
|
{
|
|
"id": "2b41551a-1298-45e2-9df3-eea3d3d43ac0",
|
|
"name": "username",
|
|
"protocol": "saml",
|
|
"protocolMapper": "saml-user-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "username",
|
|
"friendly.name": "username",
|
|
"attribute.name": "username"
|
|
}
|
|
},
|
|
{
|
|
"id": "ddbcd91b-ada9-4eab-b96f-d352f0cb8801",
|
|
"name": "X500 givenName",
|
|
"protocol": "saml",
|
|
"protocolMapper": "saml-user-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"attribute.nameformat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri",
|
|
"user.attribute": "firstName",
|
|
"friendly.name": "givenName",
|
|
"attribute.name": "urn:oid:2.5.4.42"
|
|
}
|
|
},
|
|
{
|
|
"id": "a04728c9-0629-490a-9834-eedb67ef2076",
|
|
"name": "id",
|
|
"protocol": "saml",
|
|
"protocolMapper": "saml-user-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "id",
|
|
"friendly.name": "id",
|
|
"attribute.name": "id"
|
|
}
|
|
}
|
|
],
|
|
"defaultClientScopes": [
|
|
"role_list"
|
|
],
|
|
"optionalClientScopes": []
|
|
},
|
|
{
|
|
"id": "6b00dda0-21e9-4521-beae-4827acdbefe6",
|
|
"clientId": "security-admin-console",
|
|
"name": "${client_security-admin-console}",
|
|
"rootUrl": "${authAdminUrl}",
|
|
"baseUrl": "/admin/master/console/",
|
|
"surrogateAuthRequired": false,
|
|
"enabled": true,
|
|
"alwaysDisplayInConsole": false,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"redirectUris": [
|
|
"/admin/master/console/*"
|
|
],
|
|
"webOrigins": [
|
|
"+"
|
|
],
|
|
"notBefore": 0,
|
|
"bearerOnly": false,
|
|
"consentRequired": false,
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"serviceAccountsEnabled": false,
|
|
"publicClient": true,
|
|
"frontchannelLogout": false,
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"pkce.code.challenge.method": "S256"
|
|
},
|
|
"authenticationFlowBindingOverrides": {},
|
|
"fullScopeAllowed": false,
|
|
"nodeReRegistrationTimeout": 0,
|
|
"protocolMappers": [
|
|
{
|
|
"id": "43421e87-b77c-496b-a7da-961317f34d55",
|
|
"name": "locale",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "locale",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "locale",
|
|
"jsonType.label": "String"
|
|
}
|
|
}
|
|
],
|
|
"defaultClientScopes": [
|
|
"web-origins",
|
|
"acr",
|
|
"profile",
|
|
"roles",
|
|
"email"
|
|
],
|
|
"optionalClientScopes": [
|
|
"address",
|
|
"phone",
|
|
"offline_access",
|
|
"microprofile-jwt"
|
|
]
|
|
}
|
|
],
|
|
"clientScopes": [
|
|
{
|
|
"id": "0b9be147-cde5-4fe6-8e4d-43c7f9e52214",
|
|
"name": "address",
|
|
"description": "OpenID Connect built-in scope: address",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"include.in.token.scope": "true",
|
|
"display.on.consent.screen": "true",
|
|
"consent.screen.text": "${addressScopeConsentText}"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"id": "db00df9d-3e41-48f1-aea0-3c8bc32d40ab",
|
|
"name": "address",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-address-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute.formatted": "formatted",
|
|
"user.attribute.country": "country",
|
|
"user.attribute.postal_code": "postal_code",
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute.street": "street",
|
|
"id.token.claim": "true",
|
|
"user.attribute.region": "region",
|
|
"access.token.claim": "true",
|
|
"user.attribute.locality": "locality"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "adb4ab59-af38-4f36-b390-9faab4aff25c",
|
|
"name": "phone",
|
|
"description": "OpenID Connect built-in scope: phone",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"include.in.token.scope": "true",
|
|
"display.on.consent.screen": "true",
|
|
"consent.screen.text": "${phoneScopeConsentText}"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"id": "dcfcbd28-4eb9-4adf-b04d-0f0560926308",
|
|
"name": "phone number",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "phoneNumber",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "phone_number",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "72cf8314-8264-470a-bdc3-6fd9a4a65bbf",
|
|
"name": "phone number verified",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "phoneNumberVerified",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "phone_number_verified",
|
|
"jsonType.label": "boolean"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "e50b48c2-4ed0-4690-926b-230eb08e8da2",
|
|
"name": "email",
|
|
"description": "OpenID Connect built-in scope: email",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"include.in.token.scope": "true",
|
|
"display.on.consent.screen": "true",
|
|
"consent.screen.text": "${emailScopeConsentText}"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"id": "a163d4cf-58ae-42c2-821f-e0b75220cb49",
|
|
"name": "email",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "email",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "email",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "78dfc85b-254b-4aab-aff9-d1f27fbf3779",
|
|
"name": "email verified",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "emailVerified",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "email_verified",
|
|
"jsonType.label": "boolean"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "e5aefa06-e4c7-4097-932a-8b741f2dd594",
|
|
"name": "profile",
|
|
"description": "OpenID Connect built-in scope: profile",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"include.in.token.scope": "true",
|
|
"display.on.consent.screen": "true",
|
|
"consent.screen.text": "${profileScopeConsentText}"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"id": "c2aa336d-487a-4dd2-92c1-91011ee3981e",
|
|
"name": "birthdate",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "birthdate",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "birthdate",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "8af669c8-98b5-45a7-8922-6279be4020c3",
|
|
"name": "profile",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "profile",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "profile",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "1e284eda-433a-41d5-8ca6-fd32fb985f13",
|
|
"name": "username",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "username",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "preferred_username",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "e27ee864-559b-4e83-a024-9eee6ca6d19a",
|
|
"name": "website",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "website",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "website",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "04a264d7-1b48-41f1-8244-94ca4673aa03",
|
|
"name": "given name",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "firstName",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "given_name",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "15390ea5-36b8-421f-930d-4d6169d730e6",
|
|
"name": "middle name",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "middleName",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "middle_name",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "98c527d6-6e61-4f43-baf5-d6868017b0bf",
|
|
"name": "full name",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-full-name-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"userinfo.token.claim": "true"
|
|
}
|
|
},
|
|
{
|
|
"id": "c5928673-6c4d-4cb0-ad4d-6fc78f3192ba",
|
|
"name": "family name",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "lastName",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "family_name",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "4da03a0b-28bb-48f2-aa13-91b0834d0fb0",
|
|
"name": "locale",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "locale",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "locale",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "5c7db15c-0204-4f73-8a90-2f5d3b15d1ca",
|
|
"name": "zoneinfo",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "zoneinfo",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "zoneinfo",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "22d1dbb7-b268-4fff-a26f-bead3e9bd789",
|
|
"name": "nickname",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "nickname",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "nickname",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "d708c7d4-f41f-4809-817c-7f631bc2be3f",
|
|
"name": "gender",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "gender",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "gender",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "ae205e2b-fa3c-45f7-8c30-4b592fb88316",
|
|
"name": "picture",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "picture",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "picture",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "5826fa81-0936-45ba-ae43-c5c57244b7bb",
|
|
"name": "updated at",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "updatedAt",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "updated_at",
|
|
"jsonType.label": "long"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "0c3c79fc-e6a7-4960-832d-5fef78e603d3",
|
|
"name": "microprofile-jwt",
|
|
"description": "Microprofile - JWT built-in scope",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"include.in.token.scope": "true",
|
|
"display.on.consent.screen": "false"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"id": "498382df-5ac4-4e92-a7d6-2f50d9a26ec3",
|
|
"name": "upn",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-property-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"userinfo.token.claim": "true",
|
|
"user.attribute": "username",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "upn",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"id": "44bfd719-d6bb-4237-b85d-70fb0ebdf586",
|
|
"name": "groups",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-realm-role-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"multivalued": "true",
|
|
"user.attribute": "foo",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "groups",
|
|
"jsonType.label": "String"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "af89bff0-bc2f-49cf-839c-a5beae67144f",
|
|
"name": "offline_access",
|
|
"description": "OpenID Connect built-in scope: offline_access",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"consent.screen.text": "${offlineAccessScopeConsentText}",
|
|
"display.on.consent.screen": "true"
|
|
}
|
|
},
|
|
{
|
|
"id": "cb900b02-3c76-45b3-a3cb-1225ea8ee65d",
|
|
"name": "acr",
|
|
"description": "OpenID Connect scope for add acr (authentication context class reference) to the token",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"include.in.token.scope": "false",
|
|
"display.on.consent.screen": "false"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"id": "7f4cbd4e-7db4-4a69-977e-dc92146b817f",
|
|
"name": "acr loa level",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-acr-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "adcb35fa-535c-4226-944f-9203eed93f98",
|
|
"name": "role_list",
|
|
"description": "SAML role list",
|
|
"protocol": "saml",
|
|
"attributes": {
|
|
"consent.screen.text": "${samlRoleListScopeConsentText}",
|
|
"display.on.consent.screen": "true"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"id": "678d6678-3ad7-4cc7-9503-3b9e99d63113",
|
|
"name": "role list",
|
|
"protocol": "saml",
|
|
"protocolMapper": "saml-role-list-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"single": "false",
|
|
"attribute.nameformat": "Basic",
|
|
"attribute.name": "Role"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "bce21033-9174-4de1-82f1-3d192f4f30c6",
|
|
"name": "roles",
|
|
"description": "OpenID Connect scope for add user roles to the access token",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"include.in.token.scope": "false",
|
|
"display.on.consent.screen": "true",
|
|
"consent.screen.text": "${rolesScopeConsentText}"
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"id": "235ca07c-5857-4c73-9044-cdb809d156a4",
|
|
"name": "client roles",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-client-role-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "foo",
|
|
"access.token.claim": "true",
|
|
"claim.name": "resource_access.${client_id}.roles",
|
|
"jsonType.label": "String",
|
|
"multivalued": "true"
|
|
}
|
|
},
|
|
{
|
|
"id": "edc2ff5b-3f75-428d-87a3-24e26e297346",
|
|
"name": "realm roles",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-realm-role-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "foo",
|
|
"access.token.claim": "true",
|
|
"claim.name": "realm_access.roles",
|
|
"jsonType.label": "String",
|
|
"multivalued": "true"
|
|
}
|
|
},
|
|
{
|
|
"id": "3be2dca2-e00b-4766-a9d8-69f622443f07",
|
|
"name": "audience resolve",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-audience-resolve-mapper",
|
|
"consentRequired": false,
|
|
"config": {}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "fdf5c325-e322-4137-af17-1b7a926b5807",
|
|
"name": "web-origins",
|
|
"description": "OpenID Connect scope for add allowed web origins to the access token",
|
|
"protocol": "openid-connect",
|
|
"attributes": {
|
|
"include.in.token.scope": "false",
|
|
"display.on.consent.screen": "false",
|
|
"consent.screen.text": ""
|
|
},
|
|
"protocolMappers": [
|
|
{
|
|
"id": "1bfc9671-270d-4acf-8287-a6f299356958",
|
|
"name": "allowed web origins",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-allowed-origins-mapper",
|
|
"consentRequired": false,
|
|
"config": {}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"defaultDefaultClientScopes": [
|
|
"role_list",
|
|
"profile",
|
|
"email",
|
|
"roles",
|
|
"web-origins",
|
|
"acr"
|
|
],
|
|
"defaultOptionalClientScopes": [
|
|
"offline_access",
|
|
"address",
|
|
"phone",
|
|
"microprofile-jwt"
|
|
],
|
|
"browserSecurityHeaders": {
|
|
"contentSecurityPolicyReportOnly": "",
|
|
"xContentTypeOptions": "nosniff",
|
|
"xRobotsTag": "none",
|
|
"xFrameOptions": "SAMEORIGIN",
|
|
"contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
|
|
"xXSSProtection": "1; mode=block",
|
|
"strictTransportSecurity": "max-age=31536000; includeSubDomains"
|
|
},
|
|
"smtpServer": {},
|
|
"eventsEnabled": false,
|
|
"eventsListeners": [
|
|
"jboss-logging"
|
|
],
|
|
"enabledEventTypes": [],
|
|
"adminEventsEnabled": false,
|
|
"adminEventsDetailsEnabled": false,
|
|
"identityProviders": [],
|
|
"identityProviderMappers": [],
|
|
"components": {
|
|
"org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [
|
|
{
|
|
"id": "9731efc3-409d-4bd7-a070-b30205d1c6c6",
|
|
"name": "Max Clients Limit",
|
|
"providerId": "max-clients",
|
|
"subType": "anonymous",
|
|
"subComponents": {},
|
|
"config": {
|
|
"max-clients": [
|
|
"200"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "969c619f-3aca-498f-a76c-acc771e8aaa4",
|
|
"name": "Consent Required",
|
|
"providerId": "consent-required",
|
|
"subType": "anonymous",
|
|
"subComponents": {},
|
|
"config": {}
|
|
},
|
|
{
|
|
"id": "ef75051d-4f0c-4aeb-a507-42b2895e7800",
|
|
"name": "Allowed Protocol Mapper Types",
|
|
"providerId": "allowed-protocol-mappers",
|
|
"subType": "authenticated",
|
|
"subComponents": {},
|
|
"config": {
|
|
"allowed-protocol-mapper-types": [
|
|
"oidc-address-mapper",
|
|
"oidc-usermodel-property-mapper",
|
|
"saml-user-property-mapper",
|
|
"oidc-full-name-mapper",
|
|
"saml-role-list-mapper",
|
|
"saml-user-attribute-mapper",
|
|
"oidc-usermodel-attribute-mapper",
|
|
"oidc-sha256-pairwise-sub-mapper"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "c304a0e4-e91a-4f70-8523-3bed05cdea94",
|
|
"name": "Allowed Client Scopes",
|
|
"providerId": "allowed-client-templates",
|
|
"subType": "authenticated",
|
|
"subComponents": {},
|
|
"config": {
|
|
"allow-default-scopes": [
|
|
"true"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "fd5b586f-87d8-4ca5-a405-84756cf64c19",
|
|
"name": "Full Scope Disabled",
|
|
"providerId": "scope",
|
|
"subType": "anonymous",
|
|
"subComponents": {},
|
|
"config": {}
|
|
},
|
|
{
|
|
"id": "71ab8320-4120-4a71-a595-387b48bceacc",
|
|
"name": "Allowed Client Scopes",
|
|
"providerId": "allowed-client-templates",
|
|
"subType": "anonymous",
|
|
"subComponents": {},
|
|
"config": {
|
|
"allow-default-scopes": [
|
|
"true"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "ee32b607-4a98-4829-9dcb-a7665fa0f039",
|
|
"name": "Trusted Hosts",
|
|
"providerId": "trusted-hosts",
|
|
"subType": "anonymous",
|
|
"subComponents": {},
|
|
"config": {
|
|
"host-sending-registration-request-must-match": [
|
|
"true"
|
|
],
|
|
"client-uris-must-match": [
|
|
"true"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "7381caa4-293f-43fc-9657-d3f90950c202",
|
|
"name": "Allowed Protocol Mapper Types",
|
|
"providerId": "allowed-protocol-mappers",
|
|
"subType": "anonymous",
|
|
"subComponents": {},
|
|
"config": {
|
|
"allowed-protocol-mapper-types": [
|
|
"oidc-usermodel-property-mapper",
|
|
"oidc-usermodel-attribute-mapper",
|
|
"oidc-sha256-pairwise-sub-mapper",
|
|
"oidc-address-mapper",
|
|
"saml-role-list-mapper",
|
|
"saml-user-attribute-mapper",
|
|
"saml-user-property-mapper",
|
|
"oidc-full-name-mapper"
|
|
]
|
|
}
|
|
}
|
|
],
|
|
"org.keycloak.storage.UserStorageProvider": [
|
|
{
|
|
"id": "4890375a-caa2-47a4-ac7a-20bc7bad0c37",
|
|
"name": "ldap",
|
|
"providerId": "ldap",
|
|
"subComponents": {
|
|
"org.keycloak.storage.ldap.mappers.LDAPStorageMapper": [
|
|
{
|
|
"id": "b28871f8-2321-4b04-89cd-2e73ae2a7820",
|
|
"name": "username",
|
|
"providerId": "user-attribute-ldap-mapper",
|
|
"subComponents": {},
|
|
"config": {
|
|
"ldap.attribute": [
|
|
"uid"
|
|
],
|
|
"is.mandatory.in.ldap": [
|
|
"true"
|
|
],
|
|
"read.only": [
|
|
"true"
|
|
],
|
|
"always.read.value.from.ldap": [
|
|
"false"
|
|
],
|
|
"user.model.attribute": [
|
|
"username"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "35e78211-433c-46d9-95c3-1b7ff54fa3b8",
|
|
"name": "last name",
|
|
"providerId": "user-attribute-ldap-mapper",
|
|
"subComponents": {},
|
|
"config": {
|
|
"ldap.attribute": [
|
|
"sn"
|
|
],
|
|
"is.mandatory.in.ldap": [
|
|
"true"
|
|
],
|
|
"read.only": [
|
|
"true"
|
|
],
|
|
"always.read.value.from.ldap": [
|
|
"true"
|
|
],
|
|
"user.model.attribute": [
|
|
"lastName"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "7c97faa2-6980-4004-8817-1917f5eca754",
|
|
"name": "email",
|
|
"providerId": "user-attribute-ldap-mapper",
|
|
"subComponents": {},
|
|
"config": {
|
|
"ldap.attribute": [
|
|
"mail"
|
|
],
|
|
"is.mandatory.in.ldap": [
|
|
"false"
|
|
],
|
|
"read.only": [
|
|
"true"
|
|
],
|
|
"always.read.value.from.ldap": [
|
|
"false"
|
|
],
|
|
"user.model.attribute": [
|
|
"email"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "ffc9c879-3d36-4114-a202-56f62ff4463a",
|
|
"name": "creation date",
|
|
"providerId": "user-attribute-ldap-mapper",
|
|
"subComponents": {},
|
|
"config": {
|
|
"ldap.attribute": [
|
|
"createTimestamp"
|
|
],
|
|
"is.mandatory.in.ldap": [
|
|
"false"
|
|
],
|
|
"read.only": [
|
|
"true"
|
|
],
|
|
"always.read.value.from.ldap": [
|
|
"true"
|
|
],
|
|
"user.model.attribute": [
|
|
"createTimestamp"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "81f9fd0c-463e-47be-85f5-2a12431a705e",
|
|
"name": "first name",
|
|
"providerId": "user-attribute-ldap-mapper",
|
|
"subComponents": {},
|
|
"config": {
|
|
"ldap.attribute": [
|
|
"cn"
|
|
],
|
|
"is.mandatory.in.ldap": [
|
|
"true"
|
|
],
|
|
"always.read.value.from.ldap": [
|
|
"true"
|
|
],
|
|
"read.only": [
|
|
"true"
|
|
],
|
|
"user.model.attribute": [
|
|
"firstName"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "09b38c95-67be-441b-b3e8-61dcfc174225",
|
|
"name": "modify date",
|
|
"providerId": "user-attribute-ldap-mapper",
|
|
"subComponents": {},
|
|
"config": {
|
|
"ldap.attribute": [
|
|
"modifyTimestamp"
|
|
],
|
|
"is.mandatory.in.ldap": [
|
|
"false"
|
|
],
|
|
"always.read.value.from.ldap": [
|
|
"true"
|
|
],
|
|
"read.only": [
|
|
"true"
|
|
],
|
|
"user.model.attribute": [
|
|
"modifyTimestamp"
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"config": {
|
|
"fullSyncPeriod": [
|
|
"604800"
|
|
],
|
|
"pagination": [
|
|
"true"
|
|
],
|
|
"connectionPooling": [
|
|
"true"
|
|
],
|
|
"usersDn": [
|
|
"dc=planetexpress,dc=com"
|
|
],
|
|
"cachePolicy": [
|
|
"DEFAULT"
|
|
],
|
|
"useKerberosForPasswordAuthentication": [
|
|
"false"
|
|
],
|
|
"importEnabled": [
|
|
"true"
|
|
],
|
|
"enabled": [
|
|
"true"
|
|
],
|
|
"bindDn": [
|
|
"cn=admin,dc=planetexpress,dc=com"
|
|
],
|
|
"bindCredential": [
|
|
"**********"
|
|
],
|
|
"changedSyncPeriod": [
|
|
"-1"
|
|
],
|
|
"usernameLDAPAttribute": [
|
|
"uid"
|
|
],
|
|
"lastSync": [
|
|
"1674570921"
|
|
],
|
|
"vendor": [
|
|
"other"
|
|
],
|
|
"uuidLDAPAttribute": [
|
|
"uid"
|
|
],
|
|
"allowKerberosAuthentication": [
|
|
"false"
|
|
],
|
|
"connectionUrl": [
|
|
"ldap://openldap:10389"
|
|
],
|
|
"syncRegistrations": [
|
|
"false"
|
|
],
|
|
"authType": [
|
|
"simple"
|
|
],
|
|
"debug": [
|
|
"false"
|
|
],
|
|
"searchScope": [
|
|
"2"
|
|
],
|
|
"useTruststoreSpi": [
|
|
"ldapsOnly"
|
|
],
|
|
"priority": [
|
|
"0"
|
|
],
|
|
"trustEmail": [
|
|
"true"
|
|
],
|
|
"userObjectClasses": [
|
|
"inetOrgPerson, organizationalPerson"
|
|
],
|
|
"rdnLDAPAttribute": [
|
|
"uid"
|
|
],
|
|
"editMode": [
|
|
"READ_ONLY"
|
|
],
|
|
"validatePasswordPolicy": [
|
|
"false"
|
|
],
|
|
"batchSizeForSync": [
|
|
"1000"
|
|
]
|
|
}
|
|
}
|
|
],
|
|
"org.keycloak.userprofile.UserProfileProvider": [
|
|
{
|
|
"id": "5663ef5f-89c6-4b85-a9c4-0399186f827e",
|
|
"providerId": "declarative-user-profile",
|
|
"subComponents": {},
|
|
"config": {}
|
|
}
|
|
],
|
|
"org.keycloak.keys.KeyProvider": [
|
|
{
|
|
"id": "cd098442-bc1c-4f71-9ce0-70ad34eede30",
|
|
"name": "aes-generated",
|
|
"providerId": "aes-generated",
|
|
"subComponents": {},
|
|
"config": {
|
|
"priority": [
|
|
"100"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "25036e94-5292-4796-856a-8af3c6562c40",
|
|
"name": "rsa-enc-generated",
|
|
"providerId": "rsa-enc-generated",
|
|
"subComponents": {},
|
|
"config": {
|
|
"priority": [
|
|
"100"
|
|
],
|
|
"algorithm": [
|
|
"RSA-OAEP"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "6c0b803c-af16-434f-bc4b-f9d466cfa9e5",
|
|
"name": "rsa-generated",
|
|
"providerId": "rsa-generated",
|
|
"subComponents": {},
|
|
"config": {
|
|
"priority": [
|
|
"100"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "24929f7c-a7ca-4068-b69f-8114b6e2c6f8",
|
|
"name": "hmac-generated",
|
|
"providerId": "hmac-generated",
|
|
"subComponents": {},
|
|
"config": {
|
|
"priority": [
|
|
"100"
|
|
],
|
|
"algorithm": [
|
|
"HS256"
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"internationalizationEnabled": false,
|
|
"supportedLocales": [],
|
|
"authenticationFlows": [
|
|
{
|
|
"id": "89b86bdf-8cba-45b9-98e3-053b428ed39f",
|
|
"alias": "Account verification options",
|
|
"description": "Method with which to verity the existing account",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "idp-email-verification",
|
|
"authenticatorFlow": false,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 20,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "Verify Existing Account by Re-authentication",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "cf30bef0-83aa-4c92-be72-f890e60b2194",
|
|
"alias": "Authentication Options",
|
|
"description": "Authentication options.",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "basic-auth",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "basic-auth-otp",
|
|
"authenticatorFlow": false,
|
|
"requirement": "DISABLED",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "auth-spnego",
|
|
"authenticatorFlow": false,
|
|
"requirement": "DISABLED",
|
|
"priority": 30,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "43c895bc-f168-4468-811f-48c77a7bbc8e",
|
|
"alias": "Browser - Conditional OTP",
|
|
"description": "Flow to determine if the OTP is required for the authentication",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "conditional-user-configured",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "auth-otp-form",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "0c8e0db9-3b84-4ec5-ba0f-6bef737de71d",
|
|
"alias": "Direct Grant - Conditional OTP",
|
|
"description": "Flow to determine if the OTP is required for the authentication",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "conditional-user-configured",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "direct-grant-validate-otp",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "c3213544-7683-4943-be57-7c8e9252a5fd",
|
|
"alias": "First broker login - Conditional OTP",
|
|
"description": "Flow to determine if the OTP is required for the authentication",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "conditional-user-configured",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "auth-otp-form",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "7e1f5efa-239d-48e2-babe-b00bbe633ffd",
|
|
"alias": "Handle Existing Account",
|
|
"description": "Handle what to do if there is existing account with same email/username like authenticated identity provider",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "idp-confirm-link",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "Account verification options",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "f7d755a1-f5a5-4465-8638-f86cf5bbfe18",
|
|
"alias": "Reset - Conditional OTP",
|
|
"description": "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "conditional-user-configured",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "reset-otp",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "55014247-6121-4801-bd9a-c989402e909b",
|
|
"alias": "User creation or linking",
|
|
"description": "Flow for the existing/non-existing user alternatives",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticatorConfig": "create unique user config",
|
|
"authenticator": "idp-create-user-if-unique",
|
|
"authenticatorFlow": false,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 20,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "Handle Existing Account",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "21ca8d82-f936-4445-9aa9-cd9036a5c174",
|
|
"alias": "Verify Existing Account by Re-authentication",
|
|
"description": "Reauthentication of existing account",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "idp-username-password-form",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "CONDITIONAL",
|
|
"priority": 20,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "First broker login - Conditional OTP",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "1bbea613-90d3-43a6-8ee0-adf4d5175b9e",
|
|
"alias": "browser",
|
|
"description": "browser based authentication",
|
|
"providerId": "basic-flow",
|
|
"topLevel": true,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "auth-cookie",
|
|
"authenticatorFlow": false,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "auth-spnego",
|
|
"authenticatorFlow": false,
|
|
"requirement": "DISABLED",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "identity-provider-redirector",
|
|
"authenticatorFlow": false,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 25,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 30,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "forms",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "83f9077f-8712-4cf7-813a-18c7852e8cca",
|
|
"alias": "clients",
|
|
"description": "Base authentication for clients",
|
|
"providerId": "client-flow",
|
|
"topLevel": true,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "client-secret",
|
|
"authenticatorFlow": false,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "client-jwt",
|
|
"authenticatorFlow": false,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "client-secret-jwt",
|
|
"authenticatorFlow": false,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 30,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "client-x509",
|
|
"authenticatorFlow": false,
|
|
"requirement": "ALTERNATIVE",
|
|
"priority": 40,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "1b400595-d710-4a78-8657-46296ea71c01",
|
|
"alias": "direct grant",
|
|
"description": "OpenID Connect Resource Owner Grant",
|
|
"providerId": "basic-flow",
|
|
"topLevel": true,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "direct-grant-validate-username",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "direct-grant-validate-password",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "CONDITIONAL",
|
|
"priority": 30,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "Direct Grant - Conditional OTP",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "f446b7d4-f533-40d0-bfee-e7b97ead7c40",
|
|
"alias": "docker auth",
|
|
"description": "Used by Docker clients to authenticate against the IDP",
|
|
"providerId": "basic-flow",
|
|
"topLevel": true,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "docker-http-basic-authenticator",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "3dc40147-fca9-4fe3-8c9d-3c1e845871f8",
|
|
"alias": "first broker login",
|
|
"description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
|
|
"providerId": "basic-flow",
|
|
"topLevel": true,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticatorConfig": "review profile config",
|
|
"authenticator": "idp-review-profile",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "User creation or linking",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "43aba87d-7609-4f70-a36a-3ac292b6cb81",
|
|
"alias": "forms",
|
|
"description": "Username, password, otp and other auth forms.",
|
|
"providerId": "basic-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "auth-username-password-form",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "CONDITIONAL",
|
|
"priority": 20,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "Browser - Conditional OTP",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "095709c2-dae9-4672-af50-8f55385c16b9",
|
|
"alias": "http challenge",
|
|
"description": "An authentication flow based on challenge-response HTTP Authentication Schemes",
|
|
"providerId": "basic-flow",
|
|
"topLevel": true,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "no-cookie-redirect",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "Authentication Options",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "909e38f9-7dfa-4b90-8dee-7ee2640ec14a",
|
|
"alias": "registration",
|
|
"description": "registration flow",
|
|
"providerId": "basic-flow",
|
|
"topLevel": true,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "registration-page-form",
|
|
"authenticatorFlow": true,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "registration form",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "c0d38c00-69be-4237-89f6-0f7925c2dd9d",
|
|
"alias": "registration form",
|
|
"description": "registration form",
|
|
"providerId": "form-flow",
|
|
"topLevel": false,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "registration-user-creation",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "registration-profile-action",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 40,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "registration-password-action",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 50,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "registration-recaptcha-action",
|
|
"authenticatorFlow": false,
|
|
"requirement": "DISABLED",
|
|
"priority": 60,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "1da1cf8a-fcbb-4310-9c14-19f3fe5bd47a",
|
|
"alias": "reset credentials",
|
|
"description": "Reset credentials for a user if they forgot their password or something",
|
|
"providerId": "basic-flow",
|
|
"topLevel": true,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "reset-credentials-choose-user",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "reset-credential-email",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 20,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticator": "reset-password",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 30,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
},
|
|
{
|
|
"authenticatorFlow": true,
|
|
"requirement": "CONDITIONAL",
|
|
"priority": 40,
|
|
"autheticatorFlow": true,
|
|
"flowAlias": "Reset - Conditional OTP",
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "979bc57d-5fcd-49cc-b706-9f4608b3d85e",
|
|
"alias": "saml ecp",
|
|
"description": "SAML ECP Profile Authentication Flow",
|
|
"providerId": "basic-flow",
|
|
"topLevel": true,
|
|
"builtIn": true,
|
|
"authenticationExecutions": [
|
|
{
|
|
"authenticator": "http-basic-authenticator",
|
|
"authenticatorFlow": false,
|
|
"requirement": "REQUIRED",
|
|
"priority": 10,
|
|
"autheticatorFlow": false,
|
|
"userSetupAllowed": false
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"authenticatorConfig": [
|
|
{
|
|
"id": "61d24622-2f7e-49b6-b790-ef7ff64a86cf",
|
|
"alias": "create unique user config",
|
|
"config": {
|
|
"require.password.update.after.registration": "false"
|
|
}
|
|
},
|
|
{
|
|
"id": "dae8f9d2-99f0-4aa8-98a0-45311605e4d6",
|
|
"alias": "review profile config",
|
|
"config": {
|
|
"update.profile.on.first.login": "missing"
|
|
}
|
|
}
|
|
],
|
|
"requiredActions": [
|
|
{
|
|
"alias": "CONFIGURE_TOTP",
|
|
"name": "Configure OTP",
|
|
"providerId": "CONFIGURE_TOTP",
|
|
"enabled": true,
|
|
"defaultAction": false,
|
|
"priority": 10,
|
|
"config": {}
|
|
},
|
|
{
|
|
"alias": "terms_and_conditions",
|
|
"name": "Terms and Conditions",
|
|
"providerId": "terms_and_conditions",
|
|
"enabled": false,
|
|
"defaultAction": false,
|
|
"priority": 20,
|
|
"config": {}
|
|
},
|
|
{
|
|
"alias": "UPDATE_PASSWORD",
|
|
"name": "Update Password",
|
|
"providerId": "UPDATE_PASSWORD",
|
|
"enabled": true,
|
|
"defaultAction": false,
|
|
"priority": 30,
|
|
"config": {}
|
|
},
|
|
{
|
|
"alias": "UPDATE_PROFILE",
|
|
"name": "Update Profile",
|
|
"providerId": "UPDATE_PROFILE",
|
|
"enabled": true,
|
|
"defaultAction": false,
|
|
"priority": 40,
|
|
"config": {}
|
|
},
|
|
{
|
|
"alias": "VERIFY_EMAIL",
|
|
"name": "Verify Email",
|
|
"providerId": "VERIFY_EMAIL",
|
|
"enabled": true,
|
|
"defaultAction": false,
|
|
"priority": 50,
|
|
"config": {}
|
|
},
|
|
{
|
|
"alias": "delete_account",
|
|
"name": "Delete Account",
|
|
"providerId": "delete_account",
|
|
"enabled": false,
|
|
"defaultAction": false,
|
|
"priority": 60,
|
|
"config": {}
|
|
},
|
|
{
|
|
"alias": "update_user_locale",
|
|
"name": "Update User Locale",
|
|
"providerId": "update_user_locale",
|
|
"enabled": true,
|
|
"defaultAction": false,
|
|
"priority": 1000,
|
|
"config": {}
|
|
}
|
|
],
|
|
"browserFlow": "browser",
|
|
"registrationFlow": "registration",
|
|
"directGrantFlow": "direct grant",
|
|
"resetCredentialsFlow": "reset credentials",
|
|
"clientAuthenticationFlow": "clients",
|
|
"dockerAuthenticationFlow": "docker auth",
|
|
"attributes": {
|
|
"cibaBackchannelTokenDeliveryMode": "poll",
|
|
"cibaExpiresIn": "120",
|
|
"cibaAuthRequestedUserHint": "login_hint",
|
|
"oauth2DeviceCodeLifespan": "600",
|
|
"oauth2DevicePollingInterval": "600",
|
|
"clientOfflineSessionMaxLifespan": "0",
|
|
"clientSessionIdleTimeout": "0",
|
|
"parRequestUriLifespan": "60",
|
|
"clientSessionMaxLifespan": "0",
|
|
"clientOfflineSessionIdleTimeout": "0",
|
|
"cibaInterval": "5"
|
|
},
|
|
"keycloakVersion": "18.0.0",
|
|
"userManagedAccessAllowed": false,
|
|
"clientProfiles": {
|
|
"profiles": []
|
|
},
|
|
"clientPolicies": {
|
|
"policies": []
|
|
}
|
|
} |