cdk-test-realm-realm.json 68 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854
  1. {
  2. "id" : "3fad6a24-9b73-4af0-8783-37bbce843cc1",
  3. "realm" : "cdk-test-realm",
  4. "notBefore" : 0,
  5. "defaultSignatureAlgorithm" : "RS256",
  6. "revokeRefreshToken" : false,
  7. "refreshTokenMaxReuse" : 0,
  8. "accessTokenLifespan" : 300,
  9. "accessTokenLifespanForImplicitFlow" : 900,
  10. "ssoSessionIdleTimeout" : 1800,
  11. "ssoSessionMaxLifespan" : 36000,
  12. "ssoSessionIdleTimeoutRememberMe" : 0,
  13. "ssoSessionMaxLifespanRememberMe" : 0,
  14. "offlineSessionIdleTimeout" : 2592000,
  15. "offlineSessionMaxLifespanEnabled" : false,
  16. "offlineSessionMaxLifespan" : 5184000,
  17. "clientSessionIdleTimeout" : 0,
  18. "clientSessionMaxLifespan" : 0,
  19. "clientOfflineSessionIdleTimeout" : 0,
  20. "clientOfflineSessionMaxLifespan" : 0,
  21. "accessCodeLifespan" : 60,
  22. "accessCodeLifespanUserAction" : 300,
  23. "accessCodeLifespanLogin" : 1800,
  24. "actionTokenGeneratedByAdminLifespan" : 43200,
  25. "actionTokenGeneratedByUserLifespan" : 300,
  26. "oauth2DeviceCodeLifespan" : 600,
  27. "oauth2DevicePollingInterval" : 5,
  28. "enabled" : true,
  29. "sslRequired" : "external",
  30. "registrationAllowed" : false,
  31. "registrationEmailAsUsername" : false,
  32. "rememberMe" : false,
  33. "verifyEmail" : false,
  34. "loginWithEmailAllowed" : true,
  35. "duplicateEmailsAllowed" : false,
  36. "resetPasswordAllowed" : false,
  37. "editUsernameAllowed" : false,
  38. "bruteForceProtected" : false,
  39. "permanentLockout" : false,
  40. "maxTemporaryLockouts" : 0,
  41. "maxFailureWaitSeconds" : 900,
  42. "minimumQuickLoginWaitSeconds" : 60,
  43. "waitIncrementSeconds" : 60,
  44. "quickLoginCheckMilliSeconds" : 1000,
  45. "maxDeltaTimeSeconds" : 43200,
  46. "failureFactor" : 30,
  47. "roles" : {
  48. "realm" : [ {
  49. "id" : "bd8f3ff8-e3f6-4ddf-8762-7575bcf0dec3",
  50. "name" : "offline_access",
  51. "description" : "${role_offline-access}",
  52. "composite" : false,
  53. "clientRole" : false,
  54. "containerId" : "3fad6a24-9b73-4af0-8783-37bbce843cc1",
  55. "attributes" : { }
  56. }, {
  57. "id" : "07917cba-c185-4227-9682-f7521eca6b23",
  58. "name" : "uma_authorization",
  59. "description" : "${role_uma_authorization}",
  60. "composite" : false,
  61. "clientRole" : false,
  62. "containerId" : "3fad6a24-9b73-4af0-8783-37bbce843cc1",
  63. "attributes" : { }
  64. }, {
  65. "id" : "9e67104e-f08e-49a1-901f-181806308108",
  66. "name" : "default-roles-cdk-test-realm",
  67. "description" : "${role_default-roles}",
  68. "composite" : true,
  69. "composites" : {
  70. "realm" : [ "offline_access", "uma_authorization" ],
  71. "client" : {
  72. "account" : [ "manage-account", "view-profile" ]
  73. }
  74. },
  75. "clientRole" : false,
  76. "containerId" : "3fad6a24-9b73-4af0-8783-37bbce843cc1",
  77. "attributes" : { }
  78. } ],
  79. "client" : {
  80. "realm-management" : [ {
  81. "id" : "22583a81-4f11-4903-a49a-3b7f81c46964",
  82. "name" : "view-identity-providers",
  83. "description" : "${role_view-identity-providers}",
  84. "composite" : false,
  85. "clientRole" : true,
  86. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  87. "attributes" : { }
  88. }, {
  89. "id" : "00654d4f-7599-4d16-a0cc-3a01f48c62f4",
  90. "name" : "manage-events",
  91. "description" : "${role_manage-events}",
  92. "composite" : false,
  93. "clientRole" : true,
  94. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  95. "attributes" : { }
  96. }, {
  97. "id" : "784423ce-5517-4503-baa4-858ca2e03107",
  98. "name" : "query-groups",
  99. "description" : "${role_query-groups}",
  100. "composite" : false,
  101. "clientRole" : true,
  102. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  103. "attributes" : { }
  104. }, {
  105. "id" : "fe980061-84ea-4e0c-a261-a5a89978ede5",
  106. "name" : "query-clients",
  107. "description" : "${role_query-clients}",
  108. "composite" : false,
  109. "clientRole" : true,
  110. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  111. "attributes" : { }
  112. }, {
  113. "id" : "b93f38a8-3b77-4ac1-98a0-948422385e72",
  114. "name" : "query-users",
  115. "description" : "${role_query-users}",
  116. "composite" : false,
  117. "clientRole" : true,
  118. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  119. "attributes" : { }
  120. }, {
  121. "id" : "dc9d90be-7efe-4e39-b283-5389ad442dea",
  122. "name" : "view-users",
  123. "description" : "${role_view-users}",
  124. "composite" : true,
  125. "composites" : {
  126. "client" : {
  127. "realm-management" : [ "query-groups", "query-users" ]
  128. }
  129. },
  130. "clientRole" : true,
  131. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  132. "attributes" : { }
  133. }, {
  134. "id" : "18623d76-f70d-4783-b54f-a4c3d1e9242b",
  135. "name" : "manage-realm",
  136. "description" : "${role_manage-realm}",
  137. "composite" : false,
  138. "clientRole" : true,
  139. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  140. "attributes" : { }
  141. }, {
  142. "id" : "b34bacbd-1671-4846-bf0a-ac61c05706f2",
  143. "name" : "create-client",
  144. "description" : "${role_create-client}",
  145. "composite" : false,
  146. "clientRole" : true,
  147. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  148. "attributes" : { }
  149. }, {
  150. "id" : "7a262a9b-c813-461b-a65d-28c46ccdeb27",
  151. "name" : "manage-clients",
  152. "description" : "${role_manage-clients}",
  153. "composite" : false,
  154. "clientRole" : true,
  155. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  156. "attributes" : { }
  157. }, {
  158. "id" : "83167a63-06e2-4931-850e-e5a2bae8cfff",
  159. "name" : "view-realm",
  160. "description" : "${role_view-realm}",
  161. "composite" : false,
  162. "clientRole" : true,
  163. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  164. "attributes" : { }
  165. }, {
  166. "id" : "ee6628f5-c363-4f57-b6c0-6799817d9869",
  167. "name" : "manage-authorization",
  168. "description" : "${role_manage-authorization}",
  169. "composite" : false,
  170. "clientRole" : true,
  171. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  172. "attributes" : { }
  173. }, {
  174. "id" : "120a3584-4f41-4610-b172-32fc5c801a27",
  175. "name" : "view-authorization",
  176. "description" : "${role_view-authorization}",
  177. "composite" : false,
  178. "clientRole" : true,
  179. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  180. "attributes" : { }
  181. }, {
  182. "id" : "048d2848-8af8-4be4-a6dc-6118fe122410",
  183. "name" : "realm-admin",
  184. "description" : "${role_realm-admin}",
  185. "composite" : true,
  186. "composites" : {
  187. "client" : {
  188. "realm-management" : [ "view-identity-providers", "manage-events", "query-groups", "view-users", "query-users", "query-clients", "manage-realm", "create-client", "manage-clients", "view-realm", "view-authorization", "manage-authorization", "view-clients", "manage-identity-providers", "manage-users", "query-realms", "impersonation", "view-events" ]
  189. }
  190. },
  191. "clientRole" : true,
  192. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  193. "attributes" : { }
  194. }, {
  195. "id" : "682627b0-30c5-4d22-82b4-7b97ea19a800",
  196. "name" : "view-clients",
  197. "description" : "${role_view-clients}",
  198. "composite" : true,
  199. "composites" : {
  200. "client" : {
  201. "realm-management" : [ "query-clients" ]
  202. }
  203. },
  204. "clientRole" : true,
  205. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  206. "attributes" : { }
  207. }, {
  208. "id" : "26b578d4-5d14-406a-a063-e44467ca086d",
  209. "name" : "manage-identity-providers",
  210. "description" : "${role_manage-identity-providers}",
  211. "composite" : false,
  212. "clientRole" : true,
  213. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  214. "attributes" : { }
  215. }, {
  216. "id" : "7da25b21-4e29-42ee-a907-c37d3cb2bf5e",
  217. "name" : "impersonation",
  218. "description" : "${role_impersonation}",
  219. "composite" : false,
  220. "clientRole" : true,
  221. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  222. "attributes" : { }
  223. }, {
  224. "id" : "713711ac-c49f-42b0-b599-312a5fbaf98c",
  225. "name" : "manage-users",
  226. "description" : "${role_manage-users}",
  227. "composite" : false,
  228. "clientRole" : true,
  229. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  230. "attributes" : { }
  231. }, {
  232. "id" : "c9d16eec-3d99-4047-acc9-d754a5bc3440",
  233. "name" : "query-realms",
  234. "description" : "${role_query-realms}",
  235. "composite" : false,
  236. "clientRole" : true,
  237. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  238. "attributes" : { }
  239. }, {
  240. "id" : "d1722b7a-d4c6-4bf6-b159-84719d9a722f",
  241. "name" : "view-events",
  242. "description" : "${role_view-events}",
  243. "composite" : false,
  244. "clientRole" : true,
  245. "containerId" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  246. "attributes" : { }
  247. } ],
  248. "security-admin-console" : [ ],
  249. "admin-cli" : [ ],
  250. "account-console" : [ ],
  251. "broker" : [ {
  252. "id" : "35ad0c49-1d97-48e6-a770-1d89e2f5bbc9",
  253. "name" : "read-token",
  254. "description" : "${role_read-token}",
  255. "composite" : false,
  256. "clientRole" : true,
  257. "containerId" : "b3233571-3067-4aa9-9d34-bdff9295afba",
  258. "attributes" : { }
  259. } ],
  260. "cashu-client" : [ ],
  261. "account" : [ {
  262. "id" : "25f3cc8e-9a2d-44eb-a521-6b8f78ca2137",
  263. "name" : "view-groups",
  264. "description" : "${role_view-groups}",
  265. "composite" : false,
  266. "clientRole" : true,
  267. "containerId" : "1c3be8df-5121-41ac-94cb-dfbb44bffd0e",
  268. "attributes" : { }
  269. }, {
  270. "id" : "bd21c4a5-451a-4794-a1cf-aef4a7c6bfd5",
  271. "name" : "manage-account-links",
  272. "description" : "${role_manage-account-links}",
  273. "composite" : false,
  274. "clientRole" : true,
  275. "containerId" : "1c3be8df-5121-41ac-94cb-dfbb44bffd0e",
  276. "attributes" : { }
  277. }, {
  278. "id" : "30024ee4-08be-4ff4-838b-3961069b10fc",
  279. "name" : "delete-account",
  280. "description" : "${role_delete-account}",
  281. "composite" : false,
  282. "clientRole" : true,
  283. "containerId" : "1c3be8df-5121-41ac-94cb-dfbb44bffd0e",
  284. "attributes" : { }
  285. }, {
  286. "id" : "866922c1-1e0a-4095-88b2-e8e4eae31977",
  287. "name" : "view-consent",
  288. "description" : "${role_view-consent}",
  289. "composite" : false,
  290. "clientRole" : true,
  291. "containerId" : "1c3be8df-5121-41ac-94cb-dfbb44bffd0e",
  292. "attributes" : { }
  293. }, {
  294. "id" : "cc791532-1f1a-4b5e-a6e2-153e8278e0fc",
  295. "name" : "manage-account",
  296. "description" : "${role_manage-account}",
  297. "composite" : true,
  298. "composites" : {
  299. "client" : {
  300. "account" : [ "manage-account-links" ]
  301. }
  302. },
  303. "clientRole" : true,
  304. "containerId" : "1c3be8df-5121-41ac-94cb-dfbb44bffd0e",
  305. "attributes" : { }
  306. }, {
  307. "id" : "b8786bf0-1768-4263-bbc8-2d122642e921",
  308. "name" : "view-applications",
  309. "description" : "${role_view-applications}",
  310. "composite" : false,
  311. "clientRole" : true,
  312. "containerId" : "1c3be8df-5121-41ac-94cb-dfbb44bffd0e",
  313. "attributes" : { }
  314. }, {
  315. "id" : "a10906d2-008e-4633-9e45-cc0bb1318d73",
  316. "name" : "manage-consent",
  317. "description" : "${role_manage-consent}",
  318. "composite" : true,
  319. "composites" : {
  320. "client" : {
  321. "account" : [ "view-consent" ]
  322. }
  323. },
  324. "clientRole" : true,
  325. "containerId" : "1c3be8df-5121-41ac-94cb-dfbb44bffd0e",
  326. "attributes" : { }
  327. }, {
  328. "id" : "a8052816-53d5-4902-bb82-c48362fbba93",
  329. "name" : "view-profile",
  330. "description" : "${role_view-profile}",
  331. "composite" : false,
  332. "clientRole" : true,
  333. "containerId" : "1c3be8df-5121-41ac-94cb-dfbb44bffd0e",
  334. "attributes" : { }
  335. } ]
  336. }
  337. },
  338. "groups" : [ ],
  339. "defaultRole" : {
  340. "id" : "9e67104e-f08e-49a1-901f-181806308108",
  341. "name" : "default-roles-cdk-test-realm",
  342. "description" : "${role_default-roles}",
  343. "composite" : true,
  344. "clientRole" : false,
  345. "containerId" : "3fad6a24-9b73-4af0-8783-37bbce843cc1"
  346. },
  347. "requiredCredentials" : [ "password" ],
  348. "otpPolicyType" : "totp",
  349. "otpPolicyAlgorithm" : "HmacSHA1",
  350. "otpPolicyInitialCounter" : 0,
  351. "otpPolicyDigits" : 6,
  352. "otpPolicyLookAheadWindow" : 1,
  353. "otpPolicyPeriod" : 30,
  354. "otpPolicyCodeReusable" : false,
  355. "otpSupportedApplications" : [ "totpAppFreeOTPName", "totpAppGoogleName", "totpAppMicrosoftAuthenticatorName" ],
  356. "localizationTexts" : { },
  357. "webAuthnPolicyRpEntityName" : "keycloak",
  358. "webAuthnPolicySignatureAlgorithms" : [ "ES256" ],
  359. "webAuthnPolicyRpId" : "",
  360. "webAuthnPolicyAttestationConveyancePreference" : "not specified",
  361. "webAuthnPolicyAuthenticatorAttachment" : "not specified",
  362. "webAuthnPolicyRequireResidentKey" : "not specified",
  363. "webAuthnPolicyUserVerificationRequirement" : "not specified",
  364. "webAuthnPolicyCreateTimeout" : 0,
  365. "webAuthnPolicyAvoidSameAuthenticatorRegister" : false,
  366. "webAuthnPolicyAcceptableAaguids" : [ ],
  367. "webAuthnPolicyExtraOrigins" : [ ],
  368. "webAuthnPolicyPasswordlessRpEntityName" : "keycloak",
  369. "webAuthnPolicyPasswordlessSignatureAlgorithms" : [ "ES256" ],
  370. "webAuthnPolicyPasswordlessRpId" : "",
  371. "webAuthnPolicyPasswordlessAttestationConveyancePreference" : "not specified",
  372. "webAuthnPolicyPasswordlessAuthenticatorAttachment" : "not specified",
  373. "webAuthnPolicyPasswordlessRequireResidentKey" : "not specified",
  374. "webAuthnPolicyPasswordlessUserVerificationRequirement" : "not specified",
  375. "webAuthnPolicyPasswordlessCreateTimeout" : 0,
  376. "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister" : false,
  377. "webAuthnPolicyPasswordlessAcceptableAaguids" : [ ],
  378. "webAuthnPolicyPasswordlessExtraOrigins" : [ ],
  379. "scopeMappings" : [ {
  380. "clientScope" : "offline_access",
  381. "roles" : [ "offline_access" ]
  382. } ],
  383. "clientScopeMappings" : {
  384. "account" : [ {
  385. "client" : "account-console",
  386. "roles" : [ "manage-account", "view-groups" ]
  387. } ]
  388. },
  389. "clients" : [ {
  390. "id" : "1c3be8df-5121-41ac-94cb-dfbb44bffd0e",
  391. "clientId" : "account",
  392. "name" : "${client_account}",
  393. "rootUrl" : "${authBaseUrl}",
  394. "baseUrl" : "/realms/cdk-test-realm/account/",
  395. "surrogateAuthRequired" : false,
  396. "enabled" : true,
  397. "alwaysDisplayInConsole" : false,
  398. "clientAuthenticatorType" : "client-secret",
  399. "redirectUris" : [ "/realms/cdk-test-realm/account/*" ],
  400. "webOrigins" : [ ],
  401. "notBefore" : 0,
  402. "bearerOnly" : false,
  403. "consentRequired" : false,
  404. "standardFlowEnabled" : true,
  405. "implicitFlowEnabled" : false,
  406. "directAccessGrantsEnabled" : false,
  407. "serviceAccountsEnabled" : false,
  408. "publicClient" : true,
  409. "frontchannelLogout" : false,
  410. "protocol" : "openid-connect",
  411. "attributes" : {
  412. "post.logout.redirect.uris" : "+"
  413. },
  414. "authenticationFlowBindingOverrides" : { },
  415. "fullScopeAllowed" : false,
  416. "nodeReRegistrationTimeout" : 0,
  417. "defaultClientScopes" : [ "web-origins", "acr", "profile", "roles", "basic", "email" ],
  418. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  419. }, {
  420. "id" : "eab17087-ab47-40b0-b161-6ca73367eb73",
  421. "clientId" : "account-console",
  422. "name" : "${client_account-console}",
  423. "rootUrl" : "${authBaseUrl}",
  424. "baseUrl" : "/realms/cdk-test-realm/account/",
  425. "surrogateAuthRequired" : false,
  426. "enabled" : true,
  427. "alwaysDisplayInConsole" : false,
  428. "clientAuthenticatorType" : "client-secret",
  429. "redirectUris" : [ "/realms/cdk-test-realm/account/*" ],
  430. "webOrigins" : [ ],
  431. "notBefore" : 0,
  432. "bearerOnly" : false,
  433. "consentRequired" : false,
  434. "standardFlowEnabled" : true,
  435. "implicitFlowEnabled" : false,
  436. "directAccessGrantsEnabled" : false,
  437. "serviceAccountsEnabled" : false,
  438. "publicClient" : true,
  439. "frontchannelLogout" : false,
  440. "protocol" : "openid-connect",
  441. "attributes" : {
  442. "post.logout.redirect.uris" : "+",
  443. "pkce.code.challenge.method" : "S256"
  444. },
  445. "authenticationFlowBindingOverrides" : { },
  446. "fullScopeAllowed" : false,
  447. "nodeReRegistrationTimeout" : 0,
  448. "protocolMappers" : [ {
  449. "id" : "0ee18b2b-a731-47d5-9942-30a2a46fd6fc",
  450. "name" : "audience resolve",
  451. "protocol" : "openid-connect",
  452. "protocolMapper" : "oidc-audience-resolve-mapper",
  453. "consentRequired" : false,
  454. "config" : { }
  455. } ],
  456. "defaultClientScopes" : [ "web-origins", "acr", "profile", "roles", "basic", "email" ],
  457. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  458. }, {
  459. "id" : "8deccf4a-34cb-41f6-a891-dfabdf0bf73e",
  460. "clientId" : "admin-cli",
  461. "name" : "${client_admin-cli}",
  462. "surrogateAuthRequired" : false,
  463. "enabled" : true,
  464. "alwaysDisplayInConsole" : false,
  465. "clientAuthenticatorType" : "client-secret",
  466. "redirectUris" : [ ],
  467. "webOrigins" : [ ],
  468. "notBefore" : 0,
  469. "bearerOnly" : false,
  470. "consentRequired" : false,
  471. "standardFlowEnabled" : false,
  472. "implicitFlowEnabled" : false,
  473. "directAccessGrantsEnabled" : true,
  474. "serviceAccountsEnabled" : false,
  475. "publicClient" : true,
  476. "frontchannelLogout" : false,
  477. "protocol" : "openid-connect",
  478. "attributes" : { },
  479. "authenticationFlowBindingOverrides" : { },
  480. "fullScopeAllowed" : false,
  481. "nodeReRegistrationTimeout" : 0,
  482. "defaultClientScopes" : [ "web-origins", "acr", "profile", "roles", "basic", "email" ],
  483. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  484. }, {
  485. "id" : "b3233571-3067-4aa9-9d34-bdff9295afba",
  486. "clientId" : "broker",
  487. "name" : "${client_broker}",
  488. "surrogateAuthRequired" : false,
  489. "enabled" : true,
  490. "alwaysDisplayInConsole" : false,
  491. "clientAuthenticatorType" : "client-secret",
  492. "redirectUris" : [ ],
  493. "webOrigins" : [ ],
  494. "notBefore" : 0,
  495. "bearerOnly" : true,
  496. "consentRequired" : false,
  497. "standardFlowEnabled" : true,
  498. "implicitFlowEnabled" : false,
  499. "directAccessGrantsEnabled" : false,
  500. "serviceAccountsEnabled" : false,
  501. "publicClient" : false,
  502. "frontchannelLogout" : false,
  503. "protocol" : "openid-connect",
  504. "attributes" : { },
  505. "authenticationFlowBindingOverrides" : { },
  506. "fullScopeAllowed" : false,
  507. "nodeReRegistrationTimeout" : 0,
  508. "defaultClientScopes" : [ "web-origins", "acr", "profile", "roles", "basic", "email" ],
  509. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  510. }, {
  511. "id" : "0d2671d1-64e0-41e6-9452-831b9141e760",
  512. "clientId" : "cashu-client",
  513. "name" : "",
  514. "description" : "",
  515. "rootUrl" : "",
  516. "adminUrl" : "",
  517. "baseUrl" : "",
  518. "surrogateAuthRequired" : false,
  519. "enabled" : true,
  520. "alwaysDisplayInConsole" : false,
  521. "clientAuthenticatorType" : "client-secret",
  522. "redirectUris" : [ "http://localhost:33388/callback" ],
  523. "webOrigins" : [ "http://localhost:33388" ],
  524. "notBefore" : 0,
  525. "bearerOnly" : false,
  526. "consentRequired" : false,
  527. "standardFlowEnabled" : true,
  528. "implicitFlowEnabled" : true,
  529. "directAccessGrantsEnabled" : true,
  530. "serviceAccountsEnabled" : false,
  531. "publicClient" : true,
  532. "frontchannelLogout" : true,
  533. "protocol" : "openid-connect",
  534. "attributes" : {
  535. "oidc.ciba.grant.enabled" : "false",
  536. "backchannel.logout.session.required" : "true",
  537. "display.on.consent.screen" : "false",
  538. "oauth2.device.authorization.grant.enabled" : "true",
  539. "backchannel.logout.revoke.offline.tokens" : "false"
  540. },
  541. "authenticationFlowBindingOverrides" : { },
  542. "fullScopeAllowed" : true,
  543. "nodeReRegistrationTimeout" : -1,
  544. "defaultClientScopes" : [ "web-origins", "acr", "profile", "roles", "basic", "email" ],
  545. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  546. }, {
  547. "id" : "045a12eb-239d-49a3-aa94-223445a9cd62",
  548. "clientId" : "realm-management",
  549. "name" : "${client_realm-management}",
  550. "surrogateAuthRequired" : false,
  551. "enabled" : true,
  552. "alwaysDisplayInConsole" : false,
  553. "clientAuthenticatorType" : "client-secret",
  554. "redirectUris" : [ ],
  555. "webOrigins" : [ ],
  556. "notBefore" : 0,
  557. "bearerOnly" : true,
  558. "consentRequired" : false,
  559. "standardFlowEnabled" : true,
  560. "implicitFlowEnabled" : false,
  561. "directAccessGrantsEnabled" : false,
  562. "serviceAccountsEnabled" : false,
  563. "publicClient" : false,
  564. "frontchannelLogout" : false,
  565. "protocol" : "openid-connect",
  566. "attributes" : { },
  567. "authenticationFlowBindingOverrides" : { },
  568. "fullScopeAllowed" : false,
  569. "nodeReRegistrationTimeout" : 0,
  570. "defaultClientScopes" : [ "web-origins", "acr", "profile", "roles", "basic", "email" ],
  571. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  572. }, {
  573. "id" : "a8a6173e-3305-45b6-85b7-9f046a01d002",
  574. "clientId" : "security-admin-console",
  575. "name" : "${client_security-admin-console}",
  576. "rootUrl" : "${authAdminUrl}",
  577. "baseUrl" : "/admin/cdk-test-realm/console/",
  578. "surrogateAuthRequired" : false,
  579. "enabled" : true,
  580. "alwaysDisplayInConsole" : false,
  581. "clientAuthenticatorType" : "client-secret",
  582. "redirectUris" : [ "/admin/cdk-test-realm/console/*" ],
  583. "webOrigins" : [ "+" ],
  584. "notBefore" : 0,
  585. "bearerOnly" : false,
  586. "consentRequired" : false,
  587. "standardFlowEnabled" : true,
  588. "implicitFlowEnabled" : false,
  589. "directAccessGrantsEnabled" : false,
  590. "serviceAccountsEnabled" : false,
  591. "publicClient" : true,
  592. "frontchannelLogout" : false,
  593. "protocol" : "openid-connect",
  594. "attributes" : {
  595. "post.logout.redirect.uris" : "+",
  596. "pkce.code.challenge.method" : "S256"
  597. },
  598. "authenticationFlowBindingOverrides" : { },
  599. "fullScopeAllowed" : false,
  600. "nodeReRegistrationTimeout" : 0,
  601. "protocolMappers" : [ {
  602. "id" : "bda8f436-f225-4d2a-b558-63d45c972c34",
  603. "name" : "locale",
  604. "protocol" : "openid-connect",
  605. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  606. "consentRequired" : false,
  607. "config" : {
  608. "introspection.token.claim" : "true",
  609. "userinfo.token.claim" : "true",
  610. "user.attribute" : "locale",
  611. "id.token.claim" : "true",
  612. "access.token.claim" : "true",
  613. "claim.name" : "locale",
  614. "jsonType.label" : "String"
  615. }
  616. } ],
  617. "defaultClientScopes" : [ "web-origins", "acr", "profile", "roles", "basic", "email" ],
  618. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  619. } ],
  620. "clientScopes" : [ {
  621. "id" : "5f75fc73-73da-4320-90d7-d0af22e30910",
  622. "name" : "profile",
  623. "description" : "OpenID Connect built-in scope: profile",
  624. "protocol" : "openid-connect",
  625. "attributes" : {
  626. "include.in.token.scope" : "true",
  627. "consent.screen.text" : "${profileScopeConsentText}",
  628. "display.on.consent.screen" : "true"
  629. },
  630. "protocolMappers" : [ {
  631. "id" : "69c0828e-c3f4-475b-b88a-2559793aab45",
  632. "name" : "website",
  633. "protocol" : "openid-connect",
  634. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  635. "consentRequired" : false,
  636. "config" : {
  637. "introspection.token.claim" : "true",
  638. "userinfo.token.claim" : "true",
  639. "user.attribute" : "website",
  640. "id.token.claim" : "true",
  641. "access.token.claim" : "true",
  642. "claim.name" : "website",
  643. "jsonType.label" : "String"
  644. }
  645. }, {
  646. "id" : "b70a9bb2-f139-46de-864f-73ddb8f99658",
  647. "name" : "middle name",
  648. "protocol" : "openid-connect",
  649. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  650. "consentRequired" : false,
  651. "config" : {
  652. "introspection.token.claim" : "true",
  653. "userinfo.token.claim" : "true",
  654. "user.attribute" : "middleName",
  655. "id.token.claim" : "true",
  656. "access.token.claim" : "true",
  657. "claim.name" : "middle_name",
  658. "jsonType.label" : "String"
  659. }
  660. }, {
  661. "id" : "8b4ddf79-451f-45e0-8f25-e912adcb3fb5",
  662. "name" : "zoneinfo",
  663. "protocol" : "openid-connect",
  664. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  665. "consentRequired" : false,
  666. "config" : {
  667. "introspection.token.claim" : "true",
  668. "userinfo.token.claim" : "true",
  669. "user.attribute" : "zoneinfo",
  670. "id.token.claim" : "true",
  671. "access.token.claim" : "true",
  672. "claim.name" : "zoneinfo",
  673. "jsonType.label" : "String"
  674. }
  675. }, {
  676. "id" : "6e4d639f-2920-4b4e-bc36-7fad9cef368d",
  677. "name" : "nickname",
  678. "protocol" : "openid-connect",
  679. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  680. "consentRequired" : false,
  681. "config" : {
  682. "introspection.token.claim" : "true",
  683. "userinfo.token.claim" : "true",
  684. "user.attribute" : "nickname",
  685. "id.token.claim" : "true",
  686. "access.token.claim" : "true",
  687. "claim.name" : "nickname",
  688. "jsonType.label" : "String"
  689. }
  690. }, {
  691. "id" : "5cc6e80f-0d41-49ae-a7b9-6e76401ebb8b",
  692. "name" : "gender",
  693. "protocol" : "openid-connect",
  694. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  695. "consentRequired" : false,
  696. "config" : {
  697. "introspection.token.claim" : "true",
  698. "userinfo.token.claim" : "true",
  699. "user.attribute" : "gender",
  700. "id.token.claim" : "true",
  701. "access.token.claim" : "true",
  702. "claim.name" : "gender",
  703. "jsonType.label" : "String"
  704. }
  705. }, {
  706. "id" : "e9a69c26-0d4c-4a37-b7d1-8c611ad17596",
  707. "name" : "family name",
  708. "protocol" : "openid-connect",
  709. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  710. "consentRequired" : false,
  711. "config" : {
  712. "introspection.token.claim" : "true",
  713. "userinfo.token.claim" : "true",
  714. "user.attribute" : "lastName",
  715. "id.token.claim" : "true",
  716. "access.token.claim" : "true",
  717. "claim.name" : "family_name",
  718. "jsonType.label" : "String"
  719. }
  720. }, {
  721. "id" : "a646d05c-03bf-4b68-a18e-19cb630e773a",
  722. "name" : "given name",
  723. "protocol" : "openid-connect",
  724. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  725. "consentRequired" : false,
  726. "config" : {
  727. "introspection.token.claim" : "true",
  728. "userinfo.token.claim" : "true",
  729. "user.attribute" : "firstName",
  730. "id.token.claim" : "true",
  731. "access.token.claim" : "true",
  732. "claim.name" : "given_name",
  733. "jsonType.label" : "String"
  734. }
  735. }, {
  736. "id" : "bf87b714-b41e-40ba-a748-7d4619a6add0",
  737. "name" : "birthdate",
  738. "protocol" : "openid-connect",
  739. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  740. "consentRequired" : false,
  741. "config" : {
  742. "introspection.token.claim" : "true",
  743. "userinfo.token.claim" : "true",
  744. "user.attribute" : "birthdate",
  745. "id.token.claim" : "true",
  746. "access.token.claim" : "true",
  747. "claim.name" : "birthdate",
  748. "jsonType.label" : "String"
  749. }
  750. }, {
  751. "id" : "19f5f26d-ba31-48c9-9376-2fc72bb775ee",
  752. "name" : "picture",
  753. "protocol" : "openid-connect",
  754. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  755. "consentRequired" : false,
  756. "config" : {
  757. "introspection.token.claim" : "true",
  758. "userinfo.token.claim" : "true",
  759. "user.attribute" : "picture",
  760. "id.token.claim" : "true",
  761. "access.token.claim" : "true",
  762. "claim.name" : "picture",
  763. "jsonType.label" : "String"
  764. }
  765. }, {
  766. "id" : "ec4c72ca-6b5d-48d0-a0f5-1716d90cbf3e",
  767. "name" : "locale",
  768. "protocol" : "openid-connect",
  769. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  770. "consentRequired" : false,
  771. "config" : {
  772. "introspection.token.claim" : "true",
  773. "userinfo.token.claim" : "true",
  774. "user.attribute" : "locale",
  775. "id.token.claim" : "true",
  776. "access.token.claim" : "true",
  777. "claim.name" : "locale",
  778. "jsonType.label" : "String"
  779. }
  780. }, {
  781. "id" : "cd396fdb-6b22-406c-a9c4-ec2a896b7af7",
  782. "name" : "full name",
  783. "protocol" : "openid-connect",
  784. "protocolMapper" : "oidc-full-name-mapper",
  785. "consentRequired" : false,
  786. "config" : {
  787. "id.token.claim" : "true",
  788. "introspection.token.claim" : "true",
  789. "access.token.claim" : "true",
  790. "userinfo.token.claim" : "true"
  791. }
  792. }, {
  793. "id" : "42fca5db-93a6-4dd4-afe6-2d04c16fc7fe",
  794. "name" : "profile",
  795. "protocol" : "openid-connect",
  796. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  797. "consentRequired" : false,
  798. "config" : {
  799. "introspection.token.claim" : "true",
  800. "userinfo.token.claim" : "true",
  801. "user.attribute" : "profile",
  802. "id.token.claim" : "true",
  803. "access.token.claim" : "true",
  804. "claim.name" : "profile",
  805. "jsonType.label" : "String"
  806. }
  807. }, {
  808. "id" : "9406148d-5b7b-48cc-a97f-3d6d7037144e",
  809. "name" : "updated at",
  810. "protocol" : "openid-connect",
  811. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  812. "consentRequired" : false,
  813. "config" : {
  814. "introspection.token.claim" : "true",
  815. "userinfo.token.claim" : "true",
  816. "user.attribute" : "updatedAt",
  817. "id.token.claim" : "true",
  818. "access.token.claim" : "true",
  819. "claim.name" : "updated_at",
  820. "jsonType.label" : "long"
  821. }
  822. }, {
  823. "id" : "b746da15-c007-450f-a8b7-0e0d60688b34",
  824. "name" : "username",
  825. "protocol" : "openid-connect",
  826. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  827. "consentRequired" : false,
  828. "config" : {
  829. "introspection.token.claim" : "true",
  830. "userinfo.token.claim" : "true",
  831. "user.attribute" : "username",
  832. "id.token.claim" : "true",
  833. "access.token.claim" : "true",
  834. "claim.name" : "preferred_username",
  835. "jsonType.label" : "String"
  836. }
  837. } ]
  838. }, {
  839. "id" : "768deb55-abef-4851-8e8b-d120527bc653",
  840. "name" : "roles",
  841. "description" : "OpenID Connect scope for add user roles to the access token",
  842. "protocol" : "openid-connect",
  843. "attributes" : {
  844. "include.in.token.scope" : "false",
  845. "consent.screen.text" : "${rolesScopeConsentText}",
  846. "display.on.consent.screen" : "true"
  847. },
  848. "protocolMappers" : [ {
  849. "id" : "c78ae6aa-c4aa-4853-afbd-0dbeddd216aa",
  850. "name" : "realm roles",
  851. "protocol" : "openid-connect",
  852. "protocolMapper" : "oidc-usermodel-realm-role-mapper",
  853. "consentRequired" : false,
  854. "config" : {
  855. "user.attribute" : "foo",
  856. "introspection.token.claim" : "true",
  857. "access.token.claim" : "true",
  858. "claim.name" : "realm_access.roles",
  859. "jsonType.label" : "String",
  860. "multivalued" : "true"
  861. }
  862. }, {
  863. "id" : "e64996ed-2368-4329-912c-8876f1b62854",
  864. "name" : "audience resolve",
  865. "protocol" : "openid-connect",
  866. "protocolMapper" : "oidc-audience-resolve-mapper",
  867. "consentRequired" : false,
  868. "config" : {
  869. "introspection.token.claim" : "true",
  870. "access.token.claim" : "true"
  871. }
  872. }, {
  873. "id" : "19b4bc03-0f43-499e-8942-b2555a3fa078",
  874. "name" : "client roles",
  875. "protocol" : "openid-connect",
  876. "protocolMapper" : "oidc-usermodel-client-role-mapper",
  877. "consentRequired" : false,
  878. "config" : {
  879. "user.attribute" : "foo",
  880. "introspection.token.claim" : "true",
  881. "access.token.claim" : "true",
  882. "claim.name" : "resource_access.${client_id}.roles",
  883. "jsonType.label" : "String",
  884. "multivalued" : "true"
  885. }
  886. } ]
  887. }, {
  888. "id" : "4cba0f6d-9b91-4069-88aa-22233ba828e6",
  889. "name" : "basic",
  890. "description" : "OpenID Connect scope for add all basic claims to the token",
  891. "protocol" : "openid-connect",
  892. "attributes" : {
  893. "include.in.token.scope" : "false",
  894. "display.on.consent.screen" : "false"
  895. },
  896. "protocolMappers" : [ {
  897. "id" : "62149b93-b257-471e-8472-a60af4faff5f",
  898. "name" : "sub",
  899. "protocol" : "openid-connect",
  900. "protocolMapper" : "oidc-sub-mapper",
  901. "consentRequired" : false,
  902. "config" : {
  903. "introspection.token.claim" : "true",
  904. "access.token.claim" : "true"
  905. }
  906. }, {
  907. "id" : "7942d037-3c0a-4fc2-843c-f6396ddad8a4",
  908. "name" : "auth_time",
  909. "protocol" : "openid-connect",
  910. "protocolMapper" : "oidc-usersessionmodel-note-mapper",
  911. "consentRequired" : false,
  912. "config" : {
  913. "user.session.note" : "AUTH_TIME",
  914. "id.token.claim" : "true",
  915. "introspection.token.claim" : "true",
  916. "access.token.claim" : "true",
  917. "claim.name" : "auth_time",
  918. "jsonType.label" : "long"
  919. }
  920. } ]
  921. }, {
  922. "id" : "d7a691ca-1c47-4be2-a4b1-8d536cbb8c5b",
  923. "name" : "role_list",
  924. "description" : "SAML role list",
  925. "protocol" : "saml",
  926. "attributes" : {
  927. "consent.screen.text" : "${samlRoleListScopeConsentText}",
  928. "display.on.consent.screen" : "true"
  929. },
  930. "protocolMappers" : [ {
  931. "id" : "eaec748e-ab09-4d6d-a357-6e26ddf17813",
  932. "name" : "role list",
  933. "protocol" : "saml",
  934. "protocolMapper" : "saml-role-list-mapper",
  935. "consentRequired" : false,
  936. "config" : {
  937. "single" : "false",
  938. "attribute.nameformat" : "Basic",
  939. "attribute.name" : "Role"
  940. }
  941. } ]
  942. }, {
  943. "id" : "7728ba47-f334-47d7-9d9e-34c3c4e3347f",
  944. "name" : "acr",
  945. "description" : "OpenID Connect scope for add acr (authentication context class reference) to the token",
  946. "protocol" : "openid-connect",
  947. "attributes" : {
  948. "include.in.token.scope" : "false",
  949. "display.on.consent.screen" : "false"
  950. },
  951. "protocolMappers" : [ {
  952. "id" : "db0001ac-aae9-4658-8fbc-d1b188cf9a8c",
  953. "name" : "acr loa level",
  954. "protocol" : "openid-connect",
  955. "protocolMapper" : "oidc-acr-mapper",
  956. "consentRequired" : false,
  957. "config" : {
  958. "id.token.claim" : "true",
  959. "introspection.token.claim" : "true",
  960. "access.token.claim" : "true"
  961. }
  962. } ]
  963. }, {
  964. "id" : "c6db8233-847f-465b-9aa0-e71d84e30598",
  965. "name" : "microprofile-jwt",
  966. "description" : "Microprofile - JWT built-in scope",
  967. "protocol" : "openid-connect",
  968. "attributes" : {
  969. "include.in.token.scope" : "true",
  970. "display.on.consent.screen" : "false"
  971. },
  972. "protocolMappers" : [ {
  973. "id" : "ebf379c0-afcb-41e5-9dc3-f94a05d2e7d8",
  974. "name" : "groups",
  975. "protocol" : "openid-connect",
  976. "protocolMapper" : "oidc-usermodel-realm-role-mapper",
  977. "consentRequired" : false,
  978. "config" : {
  979. "introspection.token.claim" : "true",
  980. "multivalued" : "true",
  981. "user.attribute" : "foo",
  982. "id.token.claim" : "true",
  983. "access.token.claim" : "true",
  984. "claim.name" : "groups",
  985. "jsonType.label" : "String"
  986. }
  987. }, {
  988. "id" : "ee6b260e-d926-4594-8774-0b3e141a9a4d",
  989. "name" : "upn",
  990. "protocol" : "openid-connect",
  991. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  992. "consentRequired" : false,
  993. "config" : {
  994. "introspection.token.claim" : "true",
  995. "userinfo.token.claim" : "true",
  996. "user.attribute" : "username",
  997. "id.token.claim" : "true",
  998. "access.token.claim" : "true",
  999. "claim.name" : "upn",
  1000. "jsonType.label" : "String"
  1001. }
  1002. } ]
  1003. }, {
  1004. "id" : "52cd53e2-6596-4b1c-93cd-52043912edb2",
  1005. "name" : "address",
  1006. "description" : "OpenID Connect built-in scope: address",
  1007. "protocol" : "openid-connect",
  1008. "attributes" : {
  1009. "include.in.token.scope" : "true",
  1010. "consent.screen.text" : "${addressScopeConsentText}",
  1011. "display.on.consent.screen" : "true"
  1012. },
  1013. "protocolMappers" : [ {
  1014. "id" : "c00d29d6-f183-4719-8fb7-f128ab51c6da",
  1015. "name" : "address",
  1016. "protocol" : "openid-connect",
  1017. "protocolMapper" : "oidc-address-mapper",
  1018. "consentRequired" : false,
  1019. "config" : {
  1020. "user.attribute.formatted" : "formatted",
  1021. "user.attribute.country" : "country",
  1022. "introspection.token.claim" : "true",
  1023. "user.attribute.postal_code" : "postal_code",
  1024. "userinfo.token.claim" : "true",
  1025. "user.attribute.street" : "street",
  1026. "id.token.claim" : "true",
  1027. "user.attribute.region" : "region",
  1028. "access.token.claim" : "true",
  1029. "user.attribute.locality" : "locality"
  1030. }
  1031. } ]
  1032. }, {
  1033. "id" : "08c05fd2-21f5-4dff-be80-1b5414e60fac",
  1034. "name" : "phone",
  1035. "description" : "OpenID Connect built-in scope: phone",
  1036. "protocol" : "openid-connect",
  1037. "attributes" : {
  1038. "include.in.token.scope" : "true",
  1039. "consent.screen.text" : "${phoneScopeConsentText}",
  1040. "display.on.consent.screen" : "true"
  1041. },
  1042. "protocolMappers" : [ {
  1043. "id" : "02493dac-b5de-4c9e-9619-a29c539cfb76",
  1044. "name" : "phone number verified",
  1045. "protocol" : "openid-connect",
  1046. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1047. "consentRequired" : false,
  1048. "config" : {
  1049. "introspection.token.claim" : "true",
  1050. "userinfo.token.claim" : "true",
  1051. "user.attribute" : "phoneNumberVerified",
  1052. "id.token.claim" : "true",
  1053. "access.token.claim" : "true",
  1054. "claim.name" : "phone_number_verified",
  1055. "jsonType.label" : "boolean"
  1056. }
  1057. }, {
  1058. "id" : "3472ce05-651d-4dee-ac06-23e51d813666",
  1059. "name" : "phone number",
  1060. "protocol" : "openid-connect",
  1061. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1062. "consentRequired" : false,
  1063. "config" : {
  1064. "introspection.token.claim" : "true",
  1065. "userinfo.token.claim" : "true",
  1066. "user.attribute" : "phoneNumber",
  1067. "id.token.claim" : "true",
  1068. "access.token.claim" : "true",
  1069. "claim.name" : "phone_number",
  1070. "jsonType.label" : "String"
  1071. }
  1072. } ]
  1073. }, {
  1074. "id" : "cc47edbe-7278-4fea-a5be-5bcb38dd5767",
  1075. "name" : "offline_access",
  1076. "description" : "OpenID Connect built-in scope: offline_access",
  1077. "protocol" : "openid-connect",
  1078. "attributes" : {
  1079. "consent.screen.text" : "${offlineAccessScopeConsentText}",
  1080. "display.on.consent.screen" : "true"
  1081. }
  1082. }, {
  1083. "id" : "618f9380-73fd-49c0-b5e1-e6952b586afe",
  1084. "name" : "email",
  1085. "description" : "OpenID Connect built-in scope: email",
  1086. "protocol" : "openid-connect",
  1087. "attributes" : {
  1088. "include.in.token.scope" : "true",
  1089. "consent.screen.text" : "${emailScopeConsentText}",
  1090. "display.on.consent.screen" : "true"
  1091. },
  1092. "protocolMappers" : [ {
  1093. "id" : "a3b226e3-0bb1-456a-ace7-d8c53f7d7917",
  1094. "name" : "email",
  1095. "protocol" : "openid-connect",
  1096. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1097. "consentRequired" : false,
  1098. "config" : {
  1099. "introspection.token.claim" : "true",
  1100. "userinfo.token.claim" : "true",
  1101. "user.attribute" : "email",
  1102. "id.token.claim" : "true",
  1103. "access.token.claim" : "true",
  1104. "claim.name" : "email",
  1105. "jsonType.label" : "String"
  1106. }
  1107. }, {
  1108. "id" : "3a8eb1c8-9e8e-4d3b-a44e-f40e3ff95414",
  1109. "name" : "email verified",
  1110. "protocol" : "openid-connect",
  1111. "protocolMapper" : "oidc-usermodel-property-mapper",
  1112. "consentRequired" : false,
  1113. "config" : {
  1114. "introspection.token.claim" : "true",
  1115. "userinfo.token.claim" : "true",
  1116. "user.attribute" : "emailVerified",
  1117. "id.token.claim" : "true",
  1118. "access.token.claim" : "true",
  1119. "claim.name" : "email_verified",
  1120. "jsonType.label" : "boolean"
  1121. }
  1122. } ]
  1123. }, {
  1124. "id" : "c299c8f8-c61e-421e-abfc-d75e9f0bbf0b",
  1125. "name" : "web-origins",
  1126. "description" : "OpenID Connect scope for add allowed web origins to the access token",
  1127. "protocol" : "openid-connect",
  1128. "attributes" : {
  1129. "include.in.token.scope" : "false",
  1130. "consent.screen.text" : "",
  1131. "display.on.consent.screen" : "false"
  1132. },
  1133. "protocolMappers" : [ {
  1134. "id" : "7dbe8157-0542-431a-896a-67e2820e7502",
  1135. "name" : "allowed web origins",
  1136. "protocol" : "openid-connect",
  1137. "protocolMapper" : "oidc-allowed-origins-mapper",
  1138. "consentRequired" : false,
  1139. "config" : {
  1140. "introspection.token.claim" : "true",
  1141. "access.token.claim" : "true"
  1142. }
  1143. } ]
  1144. } ],
  1145. "defaultDefaultClientScopes" : [ "role_list", "profile", "email", "roles", "web-origins", "acr", "basic" ],
  1146. "defaultOptionalClientScopes" : [ "offline_access", "address", "phone", "microprofile-jwt" ],
  1147. "browserSecurityHeaders" : {
  1148. "contentSecurityPolicyReportOnly" : "",
  1149. "xContentTypeOptions" : "nosniff",
  1150. "referrerPolicy" : "no-referrer",
  1151. "xRobotsTag" : "none",
  1152. "xFrameOptions" : "SAMEORIGIN",
  1153. "contentSecurityPolicy" : "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
  1154. "xXSSProtection" : "1; mode=block",
  1155. "strictTransportSecurity" : "max-age=31536000; includeSubDomains"
  1156. },
  1157. "smtpServer" : { },
  1158. "eventsEnabled" : false,
  1159. "eventsListeners" : [ "jboss-logging" ],
  1160. "enabledEventTypes" : [ ],
  1161. "adminEventsEnabled" : false,
  1162. "adminEventsDetailsEnabled" : false,
  1163. "identityProviders" : [ ],
  1164. "identityProviderMappers" : [ ],
  1165. "components" : {
  1166. "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy" : [ {
  1167. "id" : "5927428e-6b23-487a-b923-d033a677e54c",
  1168. "name" : "Consent Required",
  1169. "providerId" : "consent-required",
  1170. "subType" : "anonymous",
  1171. "subComponents" : { },
  1172. "config" : { }
  1173. }, {
  1174. "id" : "71cf7845-b1fe-4a7f-bfa7-e9091474a7a5",
  1175. "name" : "Allowed Protocol Mapper Types",
  1176. "providerId" : "allowed-protocol-mappers",
  1177. "subType" : "authenticated",
  1178. "subComponents" : { },
  1179. "config" : {
  1180. "allowed-protocol-mapper-types" : [ "saml-user-attribute-mapper", "oidc-usermodel-property-mapper", "oidc-full-name-mapper", "saml-role-list-mapper", "oidc-usermodel-attribute-mapper", "saml-user-property-mapper", "oidc-sha256-pairwise-sub-mapper", "oidc-address-mapper" ]
  1181. }
  1182. }, {
  1183. "id" : "df1baed8-b756-4721-b84b-78d651dcdd7c",
  1184. "name" : "Allowed Client Scopes",
  1185. "providerId" : "allowed-client-templates",
  1186. "subType" : "anonymous",
  1187. "subComponents" : { },
  1188. "config" : {
  1189. "allow-default-scopes" : [ "true" ]
  1190. }
  1191. }, {
  1192. "id" : "b80d8432-4258-4949-9a96-d9e226b51a38",
  1193. "name" : "Max Clients Limit",
  1194. "providerId" : "max-clients",
  1195. "subType" : "anonymous",
  1196. "subComponents" : { },
  1197. "config" : {
  1198. "max-clients" : [ "200" ]
  1199. }
  1200. }, {
  1201. "id" : "31d123c3-fd98-4b5c-ac62-bb2bfb28b128",
  1202. "name" : "Full Scope Disabled",
  1203. "providerId" : "scope",
  1204. "subType" : "anonymous",
  1205. "subComponents" : { },
  1206. "config" : { }
  1207. }, {
  1208. "id" : "16863582-ef20-439b-ac3a-113c16ab0220",
  1209. "name" : "Trusted Hosts",
  1210. "providerId" : "trusted-hosts",
  1211. "subType" : "anonymous",
  1212. "subComponents" : { },
  1213. "config" : {
  1214. "host-sending-registration-request-must-match" : [ "true" ],
  1215. "client-uris-must-match" : [ "true" ]
  1216. }
  1217. }, {
  1218. "id" : "5ef4e1e3-1f9b-4ff0-813b-ebe5e70ce3a1",
  1219. "name" : "Allowed Protocol Mapper Types",
  1220. "providerId" : "allowed-protocol-mappers",
  1221. "subType" : "anonymous",
  1222. "subComponents" : { },
  1223. "config" : {
  1224. "allowed-protocol-mapper-types" : [ "oidc-usermodel-attribute-mapper", "saml-user-property-mapper", "oidc-full-name-mapper", "oidc-sha256-pairwise-sub-mapper", "oidc-address-mapper", "saml-role-list-mapper", "oidc-usermodel-property-mapper", "saml-user-attribute-mapper" ]
  1225. }
  1226. }, {
  1227. "id" : "7678b862-a5e0-4cda-b1a9-378e6751e3c4",
  1228. "name" : "Allowed Client Scopes",
  1229. "providerId" : "allowed-client-templates",
  1230. "subType" : "authenticated",
  1231. "subComponents" : { },
  1232. "config" : {
  1233. "allow-default-scopes" : [ "true" ]
  1234. }
  1235. } ],
  1236. "org.keycloak.keys.KeyProvider" : [ {
  1237. "id" : "e5f25529-37d9-43aa-af07-678b142d6105",
  1238. "name" : "hmac-generated-hs512",
  1239. "providerId" : "hmac-generated",
  1240. "subComponents" : { },
  1241. "config" : {
  1242. "kid" : [ "11c078c4-a4b6-4c29-b0ce-3bdcac91dd26" ],
  1243. "secret" : [ "_kU_uMAI7-LAKpReKVCngWOQxzpUZWFFF1QbLI3TNny-2zQTeB8kD2WiFOdt3pH_TEVR7nAgiVuvcASjYoqXDYmX8BJQlX9cA39TmAkGOSkViZXU_ufWRGam6M7svHvKTr2GwYQ7WrdmO4mOQogUOYFm9F8-RGXW01d2ACIg4g8" ],
  1244. "priority" : [ "100" ],
  1245. "algorithm" : [ "HS512" ]
  1246. }
  1247. }, {
  1248. "id" : "5ba40a03-42dc-4caf-87df-ba7125e16d16",
  1249. "name" : "rsa-generated",
  1250. "providerId" : "rsa-generated",
  1251. "subComponents" : { },
  1252. "config" : {
  1253. "privateKey" : [ "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" ],
  1254. "keyUse" : [ "SIG" ],
  1255. "certificate" : [ "MIICqzCCAZMCBgGVPfL13jANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDDA5jZGstdGVzdC1yZWFsbTAeFw0yNTAyMjUxNjI5NDdaFw0zNTAyMjUxNjMxMjdaMBkxFzAVBgNVBAMMDmNkay10ZXN0LXJlYWxtMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0fLOomgHoAuBIuz1+jT6jij76az4U0o4xZRZRL+w9CrubLWVdXNyMrMtiRUgcqJU2/qV2CHi2NVRLLGvsBHOzvlFJ7vNSRH1r2GyzQwD3En2x3y/AB0L/e0qBl5irUYcPDG+4+VFqv9jms1E1pIvCsEDmw6EPUqM29C7oRCOEDw91EvxvE76VCKhEMdX/9FWe3b91bYXwyHolkpa+unlDmzO47AAtTpL6KJsggDyKXuI3+en7KcVdj/Vu19q2MaN8XVep2sUi5oYhcqS6e5+2bTyBN4u3PjKujx/AJEMzSWsVBP3Sb7zWq1LKNHeunKVkawP/ZZCHyK+L+FigZIUQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBWJkgfpCMyRZkvThzWs0mEFQ572cm1GIOZlva9UrwYgZvPIeCvaNw5s5Q6/ADjIE295nKAbeTOjnkxuIFkBRLe5HSP/czd39LuKkXjizP9hbB9xkaHLo83bqfPGS2Mbop5n5gp/sLwlpZDBGE4C5pm8aHZdaV8s+FL05OGgr7B7rqYHYs26yXhJA4zjtICoCcnU3xcB3REfCdYXf+7MmwSVMjMETW96xiPLHJdA1qDiwy9y7etdmV7Za/MeljdY+1elXCpNRjZ3GJiESPmvF8JO/kTuUU7UA2L8rDQedgDWoeiW0DkDA1oqMy/Dhb0HQTxuW+GKuERW6sY7+jOQvIv" ],
  1256. "priority" : [ "100" ]
  1257. }
  1258. }, {
  1259. "id" : "fe944a30-eef4-49a3-b1e7-82a0a8ca1822",
  1260. "name" : "aes-generated",
  1261. "providerId" : "aes-generated",
  1262. "subComponents" : { },
  1263. "config" : {
  1264. "kid" : [ "ca8804c7-3bf5-406d-866e-6aacbba3fc94" ],
  1265. "secret" : [ "FUDfyi-KXgTZCKLuhhXPfA" ],
  1266. "priority" : [ "100" ]
  1267. }
  1268. }, {
  1269. "id" : "1afe86b0-0c6b-4427-a4b4-523026e022e3",
  1270. "name" : "rsa-enc-generated",
  1271. "providerId" : "rsa-enc-generated",
  1272. "subComponents" : { },
  1273. "config" : {
  1274. "privateKey" : [ "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" ],
  1275. "keyUse" : [ "ENC" ],
  1276. "certificate" : [ "MIICqzCCAZMCBgGVPfL2NTANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDDA5jZGstdGVzdC1yZWFsbTAeFw0yNTAyMjUxNjI5NDdaFw0zNTAyMjUxNjMxMjdaMBkxFzAVBgNVBAMMDmNkay10ZXN0LXJlYWxtMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tYf9EEyMysT5TY7Z3sXpoGGPXWY1gTclRMtYk1PfjPZbzKmgSk8ihux+RGzuX3SRPCCju1XC0nRqi3HAOO3K5T/tIj/PX9/qw3MjJl6ivcYOUQMvjDIFmAG0dpJ+RM9nmCF6lMWB0G3ABik/yg0jf9nPwZ3rSsII7A+a+T4ZbBeznNJ1QWSmzqBRoc2a00jhg2PkQrKt6oFCGe0/SRcynbmu9RD0IuEsqn7uCXO9JRXSb2FohjfY3M2jqTgFlnl7UWKlChViSZAT5Z9iXpvr5ePmazqbKYSPjyeDHKiDkU1tLVO/jaooS+bQ1OfseHGpcRj7xZJNzQkz3JiQhyopwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQCh+63CKoldKib1t7OtymWCxvMiWRzfDd3Rj1iTno5ViGA3P6WWbN8jOQpdfM3BO5p2ZG29vtfH/8090evKROl8gR1zy6UPOaE/20yOlfFffPJJ6QfxueFiZe9s4UdcvY7UVLSyF/v/mu83yvvCE+53RH386k+y/xjEvQUMR4eR4sZlCQ05bc+wDDm4pZ4JWIbHTgni2birb38jXaNJklqE+ues7rhecME+F6Uz5mD3oGZtE4BxH3uVM7e2H0zzLXfe5Oa7IIk4BqU61Et5yHYgSfOolgOmMQ2gLzeTioeUWvyvcutEjgHHWIKGBMSCguX9kvwC7dxRQTTaRTNFKKm5" ],
  1277. "priority" : [ "100" ],
  1278. "algorithm" : [ "RSA-OAEP" ]
  1279. }
  1280. } ]
  1281. },
  1282. "internationalizationEnabled" : false,
  1283. "supportedLocales" : [ ],
  1284. "authenticationFlows" : [ {
  1285. "id" : "2b1f3f9a-af81-49a2-b062-92929926b0f2",
  1286. "alias" : "Account verification options",
  1287. "description" : "Method with which to verity the existing account",
  1288. "providerId" : "basic-flow",
  1289. "topLevel" : false,
  1290. "builtIn" : true,
  1291. "authenticationExecutions" : [ {
  1292. "authenticator" : "idp-email-verification",
  1293. "authenticatorFlow" : false,
  1294. "requirement" : "ALTERNATIVE",
  1295. "priority" : 10,
  1296. "autheticatorFlow" : false,
  1297. "userSetupAllowed" : false
  1298. }, {
  1299. "authenticatorFlow" : true,
  1300. "requirement" : "ALTERNATIVE",
  1301. "priority" : 20,
  1302. "autheticatorFlow" : true,
  1303. "flowAlias" : "Verify Existing Account by Re-authentication",
  1304. "userSetupAllowed" : false
  1305. } ]
  1306. }, {
  1307. "id" : "f87548dd-66ee-4065-8669-c219c02da73b",
  1308. "alias" : "Browser - Conditional OTP",
  1309. "description" : "Flow to determine if the OTP is required for the authentication",
  1310. "providerId" : "basic-flow",
  1311. "topLevel" : false,
  1312. "builtIn" : true,
  1313. "authenticationExecutions" : [ {
  1314. "authenticator" : "conditional-user-configured",
  1315. "authenticatorFlow" : false,
  1316. "requirement" : "REQUIRED",
  1317. "priority" : 10,
  1318. "autheticatorFlow" : false,
  1319. "userSetupAllowed" : false
  1320. }, {
  1321. "authenticator" : "auth-otp-form",
  1322. "authenticatorFlow" : false,
  1323. "requirement" : "REQUIRED",
  1324. "priority" : 20,
  1325. "autheticatorFlow" : false,
  1326. "userSetupAllowed" : false
  1327. } ]
  1328. }, {
  1329. "id" : "6d7c77a0-c2f5-4ea1-8c7d-44d1b55fafa0",
  1330. "alias" : "Direct Grant - Conditional OTP",
  1331. "description" : "Flow to determine if the OTP is required for the authentication",
  1332. "providerId" : "basic-flow",
  1333. "topLevel" : false,
  1334. "builtIn" : true,
  1335. "authenticationExecutions" : [ {
  1336. "authenticator" : "conditional-user-configured",
  1337. "authenticatorFlow" : false,
  1338. "requirement" : "REQUIRED",
  1339. "priority" : 10,
  1340. "autheticatorFlow" : false,
  1341. "userSetupAllowed" : false
  1342. }, {
  1343. "authenticator" : "direct-grant-validate-otp",
  1344. "authenticatorFlow" : false,
  1345. "requirement" : "REQUIRED",
  1346. "priority" : 20,
  1347. "autheticatorFlow" : false,
  1348. "userSetupAllowed" : false
  1349. } ]
  1350. }, {
  1351. "id" : "36a10553-2dc6-4e6d-8597-238b9768099d",
  1352. "alias" : "First broker login - Conditional OTP",
  1353. "description" : "Flow to determine if the OTP is required for the authentication",
  1354. "providerId" : "basic-flow",
  1355. "topLevel" : false,
  1356. "builtIn" : true,
  1357. "authenticationExecutions" : [ {
  1358. "authenticator" : "conditional-user-configured",
  1359. "authenticatorFlow" : false,
  1360. "requirement" : "REQUIRED",
  1361. "priority" : 10,
  1362. "autheticatorFlow" : false,
  1363. "userSetupAllowed" : false
  1364. }, {
  1365. "authenticator" : "auth-otp-form",
  1366. "authenticatorFlow" : false,
  1367. "requirement" : "REQUIRED",
  1368. "priority" : 20,
  1369. "autheticatorFlow" : false,
  1370. "userSetupAllowed" : false
  1371. } ]
  1372. }, {
  1373. "id" : "344d9fdc-f191-4483-a27c-8df79be6a1cf",
  1374. "alias" : "Handle Existing Account",
  1375. "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider",
  1376. "providerId" : "basic-flow",
  1377. "topLevel" : false,
  1378. "builtIn" : true,
  1379. "authenticationExecutions" : [ {
  1380. "authenticator" : "idp-confirm-link",
  1381. "authenticatorFlow" : false,
  1382. "requirement" : "REQUIRED",
  1383. "priority" : 10,
  1384. "autheticatorFlow" : false,
  1385. "userSetupAllowed" : false
  1386. }, {
  1387. "authenticatorFlow" : true,
  1388. "requirement" : "REQUIRED",
  1389. "priority" : 20,
  1390. "autheticatorFlow" : true,
  1391. "flowAlias" : "Account verification options",
  1392. "userSetupAllowed" : false
  1393. } ]
  1394. }, {
  1395. "id" : "b800bab8-cd17-460e-8ebb-8e3964735a30",
  1396. "alias" : "Reset - Conditional OTP",
  1397. "description" : "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.",
  1398. "providerId" : "basic-flow",
  1399. "topLevel" : false,
  1400. "builtIn" : true,
  1401. "authenticationExecutions" : [ {
  1402. "authenticator" : "conditional-user-configured",
  1403. "authenticatorFlow" : false,
  1404. "requirement" : "REQUIRED",
  1405. "priority" : 10,
  1406. "autheticatorFlow" : false,
  1407. "userSetupAllowed" : false
  1408. }, {
  1409. "authenticator" : "reset-otp",
  1410. "authenticatorFlow" : false,
  1411. "requirement" : "REQUIRED",
  1412. "priority" : 20,
  1413. "autheticatorFlow" : false,
  1414. "userSetupAllowed" : false
  1415. } ]
  1416. }, {
  1417. "id" : "2df3c9b7-5bce-4d3e-87e1-a79b4a62b4de",
  1418. "alias" : "User creation or linking",
  1419. "description" : "Flow for the existing/non-existing user alternatives",
  1420. "providerId" : "basic-flow",
  1421. "topLevel" : false,
  1422. "builtIn" : true,
  1423. "authenticationExecutions" : [ {
  1424. "authenticatorConfig" : "create unique user config",
  1425. "authenticator" : "idp-create-user-if-unique",
  1426. "authenticatorFlow" : false,
  1427. "requirement" : "ALTERNATIVE",
  1428. "priority" : 10,
  1429. "autheticatorFlow" : false,
  1430. "userSetupAllowed" : false
  1431. }, {
  1432. "authenticatorFlow" : true,
  1433. "requirement" : "ALTERNATIVE",
  1434. "priority" : 20,
  1435. "autheticatorFlow" : true,
  1436. "flowAlias" : "Handle Existing Account",
  1437. "userSetupAllowed" : false
  1438. } ]
  1439. }, {
  1440. "id" : "f053a708-f95b-4218-9f93-e158bf39e418",
  1441. "alias" : "Verify Existing Account by Re-authentication",
  1442. "description" : "Reauthentication of existing account",
  1443. "providerId" : "basic-flow",
  1444. "topLevel" : false,
  1445. "builtIn" : true,
  1446. "authenticationExecutions" : [ {
  1447. "authenticator" : "idp-username-password-form",
  1448. "authenticatorFlow" : false,
  1449. "requirement" : "REQUIRED",
  1450. "priority" : 10,
  1451. "autheticatorFlow" : false,
  1452. "userSetupAllowed" : false
  1453. }, {
  1454. "authenticatorFlow" : true,
  1455. "requirement" : "CONDITIONAL",
  1456. "priority" : 20,
  1457. "autheticatorFlow" : true,
  1458. "flowAlias" : "First broker login - Conditional OTP",
  1459. "userSetupAllowed" : false
  1460. } ]
  1461. }, {
  1462. "id" : "33b4938d-4f6e-460d-98a2-d23882f1069a",
  1463. "alias" : "browser",
  1464. "description" : "browser based authentication",
  1465. "providerId" : "basic-flow",
  1466. "topLevel" : true,
  1467. "builtIn" : true,
  1468. "authenticationExecutions" : [ {
  1469. "authenticator" : "auth-cookie",
  1470. "authenticatorFlow" : false,
  1471. "requirement" : "ALTERNATIVE",
  1472. "priority" : 10,
  1473. "autheticatorFlow" : false,
  1474. "userSetupAllowed" : false
  1475. }, {
  1476. "authenticator" : "auth-spnego",
  1477. "authenticatorFlow" : false,
  1478. "requirement" : "DISABLED",
  1479. "priority" : 20,
  1480. "autheticatorFlow" : false,
  1481. "userSetupAllowed" : false
  1482. }, {
  1483. "authenticator" : "identity-provider-redirector",
  1484. "authenticatorFlow" : false,
  1485. "requirement" : "ALTERNATIVE",
  1486. "priority" : 25,
  1487. "autheticatorFlow" : false,
  1488. "userSetupAllowed" : false
  1489. }, {
  1490. "authenticatorFlow" : true,
  1491. "requirement" : "ALTERNATIVE",
  1492. "priority" : 30,
  1493. "autheticatorFlow" : true,
  1494. "flowAlias" : "forms",
  1495. "userSetupAllowed" : false
  1496. } ]
  1497. }, {
  1498. "id" : "e5379328-3061-4e3f-a3d8-97574e978fcf",
  1499. "alias" : "clients",
  1500. "description" : "Base authentication for clients",
  1501. "providerId" : "client-flow",
  1502. "topLevel" : true,
  1503. "builtIn" : true,
  1504. "authenticationExecutions" : [ {
  1505. "authenticator" : "client-secret",
  1506. "authenticatorFlow" : false,
  1507. "requirement" : "ALTERNATIVE",
  1508. "priority" : 10,
  1509. "autheticatorFlow" : false,
  1510. "userSetupAllowed" : false
  1511. }, {
  1512. "authenticator" : "client-jwt",
  1513. "authenticatorFlow" : false,
  1514. "requirement" : "ALTERNATIVE",
  1515. "priority" : 20,
  1516. "autheticatorFlow" : false,
  1517. "userSetupAllowed" : false
  1518. }, {
  1519. "authenticator" : "client-secret-jwt",
  1520. "authenticatorFlow" : false,
  1521. "requirement" : "ALTERNATIVE",
  1522. "priority" : 30,
  1523. "autheticatorFlow" : false,
  1524. "userSetupAllowed" : false
  1525. }, {
  1526. "authenticator" : "client-x509",
  1527. "authenticatorFlow" : false,
  1528. "requirement" : "ALTERNATIVE",
  1529. "priority" : 40,
  1530. "autheticatorFlow" : false,
  1531. "userSetupAllowed" : false
  1532. } ]
  1533. }, {
  1534. "id" : "58bf5c22-1e62-49c3-810c-f3b8735ff42a",
  1535. "alias" : "direct grant",
  1536. "description" : "OpenID Connect Resource Owner Grant",
  1537. "providerId" : "basic-flow",
  1538. "topLevel" : true,
  1539. "builtIn" : true,
  1540. "authenticationExecutions" : [ {
  1541. "authenticator" : "direct-grant-validate-username",
  1542. "authenticatorFlow" : false,
  1543. "requirement" : "REQUIRED",
  1544. "priority" : 10,
  1545. "autheticatorFlow" : false,
  1546. "userSetupAllowed" : false
  1547. }, {
  1548. "authenticator" : "direct-grant-validate-password",
  1549. "authenticatorFlow" : false,
  1550. "requirement" : "REQUIRED",
  1551. "priority" : 20,
  1552. "autheticatorFlow" : false,
  1553. "userSetupAllowed" : false
  1554. }, {
  1555. "authenticatorFlow" : true,
  1556. "requirement" : "CONDITIONAL",
  1557. "priority" : 30,
  1558. "autheticatorFlow" : true,
  1559. "flowAlias" : "Direct Grant - Conditional OTP",
  1560. "userSetupAllowed" : false
  1561. } ]
  1562. }, {
  1563. "id" : "f21f983f-970c-47b6-b905-1e6a903b5830",
  1564. "alias" : "docker auth",
  1565. "description" : "Used by Docker clients to authenticate against the IDP",
  1566. "providerId" : "basic-flow",
  1567. "topLevel" : true,
  1568. "builtIn" : true,
  1569. "authenticationExecutions" : [ {
  1570. "authenticator" : "docker-http-basic-authenticator",
  1571. "authenticatorFlow" : false,
  1572. "requirement" : "REQUIRED",
  1573. "priority" : 10,
  1574. "autheticatorFlow" : false,
  1575. "userSetupAllowed" : false
  1576. } ]
  1577. }, {
  1578. "id" : "ed3a3811-89ce-4457-8c06-9faeab2fb49d",
  1579. "alias" : "first broker login",
  1580. "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
  1581. "providerId" : "basic-flow",
  1582. "topLevel" : true,
  1583. "builtIn" : true,
  1584. "authenticationExecutions" : [ {
  1585. "authenticatorConfig" : "review profile config",
  1586. "authenticator" : "idp-review-profile",
  1587. "authenticatorFlow" : false,
  1588. "requirement" : "REQUIRED",
  1589. "priority" : 10,
  1590. "autheticatorFlow" : false,
  1591. "userSetupAllowed" : false
  1592. }, {
  1593. "authenticatorFlow" : true,
  1594. "requirement" : "REQUIRED",
  1595. "priority" : 20,
  1596. "autheticatorFlow" : true,
  1597. "flowAlias" : "User creation or linking",
  1598. "userSetupAllowed" : false
  1599. } ]
  1600. }, {
  1601. "id" : "0d26acef-121f-44ad-a5f3-b85bf4d1fc05",
  1602. "alias" : "forms",
  1603. "description" : "Username, password, otp and other auth forms.",
  1604. "providerId" : "basic-flow",
  1605. "topLevel" : false,
  1606. "builtIn" : true,
  1607. "authenticationExecutions" : [ {
  1608. "authenticator" : "auth-username-password-form",
  1609. "authenticatorFlow" : false,
  1610. "requirement" : "REQUIRED",
  1611. "priority" : 10,
  1612. "autheticatorFlow" : false,
  1613. "userSetupAllowed" : false
  1614. }, {
  1615. "authenticatorFlow" : true,
  1616. "requirement" : "CONDITIONAL",
  1617. "priority" : 20,
  1618. "autheticatorFlow" : true,
  1619. "flowAlias" : "Browser - Conditional OTP",
  1620. "userSetupAllowed" : false
  1621. } ]
  1622. }, {
  1623. "id" : "2c99b761-f61d-4423-8c9f-cb8fec5a9c00",
  1624. "alias" : "registration",
  1625. "description" : "registration flow",
  1626. "providerId" : "basic-flow",
  1627. "topLevel" : true,
  1628. "builtIn" : true,
  1629. "authenticationExecutions" : [ {
  1630. "authenticator" : "registration-page-form",
  1631. "authenticatorFlow" : true,
  1632. "requirement" : "REQUIRED",
  1633. "priority" : 10,
  1634. "autheticatorFlow" : true,
  1635. "flowAlias" : "registration form",
  1636. "userSetupAllowed" : false
  1637. } ]
  1638. }, {
  1639. "id" : "1ca08d0c-58f1-471c-90ac-2a24781a27cf",
  1640. "alias" : "registration form",
  1641. "description" : "registration form",
  1642. "providerId" : "form-flow",
  1643. "topLevel" : false,
  1644. "builtIn" : true,
  1645. "authenticationExecutions" : [ {
  1646. "authenticator" : "registration-user-creation",
  1647. "authenticatorFlow" : false,
  1648. "requirement" : "REQUIRED",
  1649. "priority" : 20,
  1650. "autheticatorFlow" : false,
  1651. "userSetupAllowed" : false
  1652. }, {
  1653. "authenticator" : "registration-password-action",
  1654. "authenticatorFlow" : false,
  1655. "requirement" : "REQUIRED",
  1656. "priority" : 50,
  1657. "autheticatorFlow" : false,
  1658. "userSetupAllowed" : false
  1659. }, {
  1660. "authenticator" : "registration-recaptcha-action",
  1661. "authenticatorFlow" : false,
  1662. "requirement" : "DISABLED",
  1663. "priority" : 60,
  1664. "autheticatorFlow" : false,
  1665. "userSetupAllowed" : false
  1666. }, {
  1667. "authenticator" : "registration-terms-and-conditions",
  1668. "authenticatorFlow" : false,
  1669. "requirement" : "DISABLED",
  1670. "priority" : 70,
  1671. "autheticatorFlow" : false,
  1672. "userSetupAllowed" : false
  1673. } ]
  1674. }, {
  1675. "id" : "69c9375d-f37d-4729-8d37-027c573b301e",
  1676. "alias" : "reset credentials",
  1677. "description" : "Reset credentials for a user if they forgot their password or something",
  1678. "providerId" : "basic-flow",
  1679. "topLevel" : true,
  1680. "builtIn" : true,
  1681. "authenticationExecutions" : [ {
  1682. "authenticator" : "reset-credentials-choose-user",
  1683. "authenticatorFlow" : false,
  1684. "requirement" : "REQUIRED",
  1685. "priority" : 10,
  1686. "autheticatorFlow" : false,
  1687. "userSetupAllowed" : false
  1688. }, {
  1689. "authenticator" : "reset-credential-email",
  1690. "authenticatorFlow" : false,
  1691. "requirement" : "REQUIRED",
  1692. "priority" : 20,
  1693. "autheticatorFlow" : false,
  1694. "userSetupAllowed" : false
  1695. }, {
  1696. "authenticator" : "reset-password",
  1697. "authenticatorFlow" : false,
  1698. "requirement" : "REQUIRED",
  1699. "priority" : 30,
  1700. "autheticatorFlow" : false,
  1701. "userSetupAllowed" : false
  1702. }, {
  1703. "authenticatorFlow" : true,
  1704. "requirement" : "CONDITIONAL",
  1705. "priority" : 40,
  1706. "autheticatorFlow" : true,
  1707. "flowAlias" : "Reset - Conditional OTP",
  1708. "userSetupAllowed" : false
  1709. } ]
  1710. }, {
  1711. "id" : "9319132c-d8c2-4c09-92ec-f539c1f303e3",
  1712. "alias" : "saml ecp",
  1713. "description" : "SAML ECP Profile Authentication Flow",
  1714. "providerId" : "basic-flow",
  1715. "topLevel" : true,
  1716. "builtIn" : true,
  1717. "authenticationExecutions" : [ {
  1718. "authenticator" : "http-basic-authenticator",
  1719. "authenticatorFlow" : false,
  1720. "requirement" : "REQUIRED",
  1721. "priority" : 10,
  1722. "autheticatorFlow" : false,
  1723. "userSetupAllowed" : false
  1724. } ]
  1725. } ],
  1726. "authenticatorConfig" : [ {
  1727. "id" : "cd3eef58-dca1-43e2-aac4-a20f508aa0f4",
  1728. "alias" : "create unique user config",
  1729. "config" : {
  1730. "require.password.update.after.registration" : "false"
  1731. }
  1732. }, {
  1733. "id" : "89a3a7e5-a8b5-4914-93bf-eae451e64507",
  1734. "alias" : "review profile config",
  1735. "config" : {
  1736. "update.profile.on.first.login" : "missing"
  1737. }
  1738. } ],
  1739. "requiredActions" : [ {
  1740. "alias" : "CONFIGURE_TOTP",
  1741. "name" : "Configure OTP",
  1742. "providerId" : "CONFIGURE_TOTP",
  1743. "enabled" : true,
  1744. "defaultAction" : false,
  1745. "priority" : 10,
  1746. "config" : { }
  1747. }, {
  1748. "alias" : "TERMS_AND_CONDITIONS",
  1749. "name" : "Terms and Conditions",
  1750. "providerId" : "TERMS_AND_CONDITIONS",
  1751. "enabled" : false,
  1752. "defaultAction" : false,
  1753. "priority" : 20,
  1754. "config" : { }
  1755. }, {
  1756. "alias" : "UPDATE_PASSWORD",
  1757. "name" : "Update Password",
  1758. "providerId" : "UPDATE_PASSWORD",
  1759. "enabled" : true,
  1760. "defaultAction" : false,
  1761. "priority" : 30,
  1762. "config" : { }
  1763. }, {
  1764. "alias" : "UPDATE_PROFILE",
  1765. "name" : "Update Profile",
  1766. "providerId" : "UPDATE_PROFILE",
  1767. "enabled" : true,
  1768. "defaultAction" : false,
  1769. "priority" : 40,
  1770. "config" : { }
  1771. }, {
  1772. "alias" : "VERIFY_EMAIL",
  1773. "name" : "Verify Email",
  1774. "providerId" : "VERIFY_EMAIL",
  1775. "enabled" : true,
  1776. "defaultAction" : false,
  1777. "priority" : 50,
  1778. "config" : { }
  1779. }, {
  1780. "alias" : "delete_account",
  1781. "name" : "Delete Account",
  1782. "providerId" : "delete_account",
  1783. "enabled" : false,
  1784. "defaultAction" : false,
  1785. "priority" : 60,
  1786. "config" : { }
  1787. }, {
  1788. "alias" : "webauthn-register",
  1789. "name" : "Webauthn Register",
  1790. "providerId" : "webauthn-register",
  1791. "enabled" : true,
  1792. "defaultAction" : false,
  1793. "priority" : 70,
  1794. "config" : { }
  1795. }, {
  1796. "alias" : "webauthn-register-passwordless",
  1797. "name" : "Webauthn Register Passwordless",
  1798. "providerId" : "webauthn-register-passwordless",
  1799. "enabled" : true,
  1800. "defaultAction" : false,
  1801. "priority" : 80,
  1802. "config" : { }
  1803. }, {
  1804. "alias" : "VERIFY_PROFILE",
  1805. "name" : "Verify Profile",
  1806. "providerId" : "VERIFY_PROFILE",
  1807. "enabled" : true,
  1808. "defaultAction" : false,
  1809. "priority" : 90,
  1810. "config" : { }
  1811. }, {
  1812. "alias" : "delete_credential",
  1813. "name" : "Delete Credential",
  1814. "providerId" : "delete_credential",
  1815. "enabled" : true,
  1816. "defaultAction" : false,
  1817. "priority" : 100,
  1818. "config" : { }
  1819. }, {
  1820. "alias" : "update_user_locale",
  1821. "name" : "Update User Locale",
  1822. "providerId" : "update_user_locale",
  1823. "enabled" : true,
  1824. "defaultAction" : false,
  1825. "priority" : 1000,
  1826. "config" : { }
  1827. } ],
  1828. "browserFlow" : "browser",
  1829. "registrationFlow" : "registration",
  1830. "directGrantFlow" : "direct grant",
  1831. "resetCredentialsFlow" : "reset credentials",
  1832. "clientAuthenticationFlow" : "clients",
  1833. "dockerAuthenticationFlow" : "docker auth",
  1834. "firstBrokerLoginFlow" : "first broker login",
  1835. "attributes" : {
  1836. "cibaBackchannelTokenDeliveryMode" : "poll",
  1837. "cibaExpiresIn" : "120",
  1838. "cibaAuthRequestedUserHint" : "login_hint",
  1839. "oauth2DeviceCodeLifespan" : "600",
  1840. "oauth2DevicePollingInterval" : "5",
  1841. "parRequestUriLifespan" : "60",
  1842. "cibaInterval" : "5",
  1843. "realmReusableOtpCode" : "false"
  1844. },
  1845. "keycloakVersion" : "25.0.6",
  1846. "userManagedAccessAllowed" : false,
  1847. "organizationsEnabled" : false,
  1848. "clientProfiles" : {
  1849. "profiles" : [ ]
  1850. },
  1851. "clientPolicies" : {
  1852. "policies" : [ ]
  1853. }
  1854. }