master-realm.json 76 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050
  1. {
  2. "id" : "1d24ffca-4ac4-4768-b0ea-0e903339234f",
  3. "realm" : "master",
  4. "displayName" : "Keycloak",
  5. "displayNameHtml" : "<div class=\"kc-logo-text\"><span>Keycloak</span></div>",
  6. "notBefore" : 0,
  7. "defaultSignatureAlgorithm" : "RS256",
  8. "revokeRefreshToken" : false,
  9. "refreshTokenMaxReuse" : 0,
  10. "accessTokenLifespan" : 60,
  11. "accessTokenLifespanForImplicitFlow" : 900,
  12. "ssoSessionIdleTimeout" : 1800,
  13. "ssoSessionMaxLifespan" : 36000,
  14. "ssoSessionIdleTimeoutRememberMe" : 0,
  15. "ssoSessionMaxLifespanRememberMe" : 0,
  16. "offlineSessionIdleTimeout" : 2592000,
  17. "offlineSessionMaxLifespanEnabled" : false,
  18. "offlineSessionMaxLifespan" : 5184000,
  19. "clientSessionIdleTimeout" : 0,
  20. "clientSessionMaxLifespan" : 0,
  21. "clientOfflineSessionIdleTimeout" : 0,
  22. "clientOfflineSessionMaxLifespan" : 0,
  23. "accessCodeLifespan" : 60,
  24. "accessCodeLifespanUserAction" : 300,
  25. "accessCodeLifespanLogin" : 1800,
  26. "actionTokenGeneratedByAdminLifespan" : 43200,
  27. "actionTokenGeneratedByUserLifespan" : 300,
  28. "oauth2DeviceCodeLifespan" : 600,
  29. "oauth2DevicePollingInterval" : 5,
  30. "enabled" : true,
  31. "sslRequired" : "external",
  32. "registrationAllowed" : false,
  33. "registrationEmailAsUsername" : false,
  34. "rememberMe" : false,
  35. "verifyEmail" : false,
  36. "loginWithEmailAllowed" : true,
  37. "duplicateEmailsAllowed" : false,
  38. "resetPasswordAllowed" : false,
  39. "editUsernameAllowed" : false,
  40. "bruteForceProtected" : false,
  41. "permanentLockout" : false,
  42. "maxTemporaryLockouts" : 0,
  43. "maxFailureWaitSeconds" : 900,
  44. "minimumQuickLoginWaitSeconds" : 60,
  45. "waitIncrementSeconds" : 60,
  46. "quickLoginCheckMilliSeconds" : 1000,
  47. "maxDeltaTimeSeconds" : 43200,
  48. "failureFactor" : 30,
  49. "roles" : {
  50. "realm" : [ {
  51. "id" : "ba93d0e0-2dba-4b26-b4ce-0580c8d69ef3",
  52. "name" : "create-realm",
  53. "description" : "${role_create-realm}",
  54. "composite" : false,
  55. "clientRole" : false,
  56. "containerId" : "1d24ffca-4ac4-4768-b0ea-0e903339234f",
  57. "attributes" : { }
  58. }, {
  59. "id" : "2f5c8fa3-423d-4629-8f56-0ecb7d3b1e54",
  60. "name" : "default-roles-master",
  61. "description" : "${role_default-roles}",
  62. "composite" : true,
  63. "composites" : {
  64. "realm" : [ "offline_access", "uma_authorization" ],
  65. "client" : {
  66. "account" : [ "manage-account", "view-profile" ]
  67. }
  68. },
  69. "clientRole" : false,
  70. "containerId" : "1d24ffca-4ac4-4768-b0ea-0e903339234f",
  71. "attributes" : { }
  72. }, {
  73. "id" : "cd9f8abb-2660-45e8-a324-8e8a7a3c8747",
  74. "name" : "offline_access",
  75. "description" : "${role_offline-access}",
  76. "composite" : false,
  77. "clientRole" : false,
  78. "containerId" : "1d24ffca-4ac4-4768-b0ea-0e903339234f",
  79. "attributes" : { }
  80. }, {
  81. "id" : "38fc9800-640b-435a-bf3c-0e6e2c366419",
  82. "name" : "uma_authorization",
  83. "description" : "${role_uma_authorization}",
  84. "composite" : false,
  85. "clientRole" : false,
  86. "containerId" : "1d24ffca-4ac4-4768-b0ea-0e903339234f",
  87. "attributes" : { }
  88. }, {
  89. "id" : "4113269c-9ee1-4b5d-870b-c60c57207c1a",
  90. "name" : "admin",
  91. "description" : "${role_admin}",
  92. "composite" : true,
  93. "composites" : {
  94. "realm" : [ "create-realm" ],
  95. "client" : {
  96. "cdk-test-realm-realm" : [ "view-identity-providers", "create-client", "manage-authorization", "manage-identity-providers", "impersonation", "view-users", "query-clients", "query-groups", "manage-realm", "query-users", "manage-users", "view-events", "manage-clients", "view-clients", "view-authorization", "view-realm", "query-realms", "manage-events" ],
  97. "master-realm" : [ "view-events", "manage-identity-providers", "manage-users", "query-users", "manage-clients", "query-groups", "view-authorization", "impersonation", "view-identity-providers", "manage-events", "manage-authorization", "create-client", "query-realms", "query-clients", "view-realm", "view-users", "view-clients", "manage-realm" ]
  98. }
  99. },
  100. "clientRole" : false,
  101. "containerId" : "1d24ffca-4ac4-4768-b0ea-0e903339234f",
  102. "attributes" : { }
  103. } ],
  104. "client" : {
  105. "security-admin-console" : [ ],
  106. "admin-cli" : [ ],
  107. "cdk-test-realm-realm" : [ {
  108. "id" : "aa223cb1-e99d-437d-80f6-2e66df9c54a8",
  109. "name" : "manage-realm",
  110. "description" : "${role_manage-realm}",
  111. "composite" : false,
  112. "clientRole" : true,
  113. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  114. "attributes" : { }
  115. }, {
  116. "id" : "2f2de2f0-5581-4123-ba19-e1c6aafb6d4d",
  117. "name" : "view-identity-providers",
  118. "description" : "${role_view-identity-providers}",
  119. "composite" : false,
  120. "clientRole" : true,
  121. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  122. "attributes" : { }
  123. }, {
  124. "id" : "10643e2c-5cf5-4cea-ae57-9036166671a3",
  125. "name" : "query-users",
  126. "description" : "${role_query-users}",
  127. "composite" : false,
  128. "clientRole" : true,
  129. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  130. "attributes" : { }
  131. }, {
  132. "id" : "0952d2dc-9613-4bd8-9410-6ff0f41c70a2",
  133. "name" : "manage-users",
  134. "description" : "${role_manage-users}",
  135. "composite" : false,
  136. "clientRole" : true,
  137. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  138. "attributes" : { }
  139. }, {
  140. "id" : "669aac9d-6187-48e5-aea5-58323127a5ca",
  141. "name" : "create-client",
  142. "description" : "${role_create-client}",
  143. "composite" : false,
  144. "clientRole" : true,
  145. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  146. "attributes" : { }
  147. }, {
  148. "id" : "b2c66a87-e9e9-409e-ad23-ac1a8d00b543",
  149. "name" : "manage-clients",
  150. "description" : "${role_manage-clients}",
  151. "composite" : false,
  152. "clientRole" : true,
  153. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  154. "attributes" : { }
  155. }, {
  156. "id" : "0ce89f0a-9304-444e-a3a6-69d6951cbed7",
  157. "name" : "view-events",
  158. "description" : "${role_view-events}",
  159. "composite" : false,
  160. "clientRole" : true,
  161. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  162. "attributes" : { }
  163. }, {
  164. "id" : "efd60554-72eb-470f-a522-fe0c20862bb0",
  165. "name" : "manage-authorization",
  166. "description" : "${role_manage-authorization}",
  167. "composite" : false,
  168. "clientRole" : true,
  169. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  170. "attributes" : { }
  171. }, {
  172. "id" : "5312b863-afc8-414f-930a-454e1c8396a6",
  173. "name" : "view-authorization",
  174. "description" : "${role_view-authorization}",
  175. "composite" : false,
  176. "clientRole" : true,
  177. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  178. "attributes" : { }
  179. }, {
  180. "id" : "3c48368a-392a-4b7f-b990-1b893fb8fe8e",
  181. "name" : "view-clients",
  182. "description" : "${role_view-clients}",
  183. "composite" : true,
  184. "composites" : {
  185. "client" : {
  186. "cdk-test-realm-realm" : [ "query-clients" ]
  187. }
  188. },
  189. "clientRole" : true,
  190. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  191. "attributes" : { }
  192. }, {
  193. "id" : "59fcdb27-c8bc-4750-9247-3cd75133cc3a",
  194. "name" : "view-realm",
  195. "description" : "${role_view-realm}",
  196. "composite" : false,
  197. "clientRole" : true,
  198. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  199. "attributes" : { }
  200. }, {
  201. "id" : "e183c19f-facd-4a01-8c2f-10de5f934efb",
  202. "name" : "manage-identity-providers",
  203. "description" : "${role_manage-identity-providers}",
  204. "composite" : false,
  205. "clientRole" : true,
  206. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  207. "attributes" : { }
  208. }, {
  209. "id" : "071401b4-5882-439e-a654-7b898a460352",
  210. "name" : "query-realms",
  211. "description" : "${role_query-realms}",
  212. "composite" : false,
  213. "clientRole" : true,
  214. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  215. "attributes" : { }
  216. }, {
  217. "id" : "5edc72d0-f70e-41b0-931f-74b69ed0032e",
  218. "name" : "manage-events",
  219. "description" : "${role_manage-events}",
  220. "composite" : false,
  221. "clientRole" : true,
  222. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  223. "attributes" : { }
  224. }, {
  225. "id" : "bd0ee685-0820-4702-ab07-67aa26d8c885",
  226. "name" : "impersonation",
  227. "description" : "${role_impersonation}",
  228. "composite" : false,
  229. "clientRole" : true,
  230. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  231. "attributes" : { }
  232. }, {
  233. "id" : "76d31321-6672-4891-a323-fe9b49c6b84d",
  234. "name" : "view-users",
  235. "description" : "${role_view-users}",
  236. "composite" : true,
  237. "composites" : {
  238. "client" : {
  239. "cdk-test-realm-realm" : [ "query-users", "query-groups" ]
  240. }
  241. },
  242. "clientRole" : true,
  243. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  244. "attributes" : { }
  245. }, {
  246. "id" : "32bd2047-c722-408d-8de8-93521f26e7e2",
  247. "name" : "query-clients",
  248. "description" : "${role_query-clients}",
  249. "composite" : false,
  250. "clientRole" : true,
  251. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  252. "attributes" : { }
  253. }, {
  254. "id" : "6bb7b7df-a87d-4c11-81f9-1e9c75aca185",
  255. "name" : "query-groups",
  256. "description" : "${role_query-groups}",
  257. "composite" : false,
  258. "clientRole" : true,
  259. "containerId" : "53590271-2c57-4afd-90c5-6eafb383d294",
  260. "attributes" : { }
  261. } ],
  262. "account-console" : [ ],
  263. "broker" : [ {
  264. "id" : "d81ef4f7-fad7-4c88-a554-1e1557df407a",
  265. "name" : "read-token",
  266. "description" : "${role_read-token}",
  267. "composite" : false,
  268. "clientRole" : true,
  269. "containerId" : "cfc4bfe2-8344-420b-9aac-36a6f1885f0a",
  270. "attributes" : { }
  271. } ],
  272. "cashu-client" : [ ],
  273. "master-realm" : [ {
  274. "id" : "1f29e846-52e5-456b-b92c-a18ea91a2431",
  275. "name" : "manage-authorization",
  276. "description" : "${role_manage-authorization}",
  277. "composite" : false,
  278. "clientRole" : true,
  279. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  280. "attributes" : { }
  281. }, {
  282. "id" : "c28af044-2b2f-4fd2-bf30-d4162d90e0ca",
  283. "name" : "manage-identity-providers",
  284. "description" : "${role_manage-identity-providers}",
  285. "composite" : false,
  286. "clientRole" : true,
  287. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  288. "attributes" : { }
  289. }, {
  290. "id" : "786a9ebe-01f4-4425-87e1-a86cc48436f6",
  291. "name" : "view-events",
  292. "description" : "${role_view-events}",
  293. "composite" : false,
  294. "clientRole" : true,
  295. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  296. "attributes" : { }
  297. }, {
  298. "id" : "51e09cb3-fa17-4808-9a8a-6aae5c70852e",
  299. "name" : "manage-users",
  300. "description" : "${role_manage-users}",
  301. "composite" : false,
  302. "clientRole" : true,
  303. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  304. "attributes" : { }
  305. }, {
  306. "id" : "7832307c-d9b6-412e-bd2e-b6dc4d29218f",
  307. "name" : "query-users",
  308. "description" : "${role_query-users}",
  309. "composite" : false,
  310. "clientRole" : true,
  311. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  312. "attributes" : { }
  313. }, {
  314. "id" : "62e8af8e-2d3f-4c4c-9713-2a3900f70f70",
  315. "name" : "create-client",
  316. "description" : "${role_create-client}",
  317. "composite" : false,
  318. "clientRole" : true,
  319. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  320. "attributes" : { }
  321. }, {
  322. "id" : "20228da6-3ec4-4a53-89a4-6e66a093a609",
  323. "name" : "query-realms",
  324. "description" : "${role_query-realms}",
  325. "composite" : false,
  326. "clientRole" : true,
  327. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  328. "attributes" : { }
  329. }, {
  330. "id" : "14c87db1-21a8-479f-b197-bdb5a2edc870",
  331. "name" : "query-clients",
  332. "description" : "${role_query-clients}",
  333. "composite" : false,
  334. "clientRole" : true,
  335. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  336. "attributes" : { }
  337. }, {
  338. "id" : "3cf2521e-81a7-4d9c-95ac-56de1dd53bac",
  339. "name" : "manage-clients",
  340. "description" : "${role_manage-clients}",
  341. "composite" : false,
  342. "clientRole" : true,
  343. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  344. "attributes" : { }
  345. }, {
  346. "id" : "7d86de80-ad92-4dd0-9fc6-347d09dfabd4",
  347. "name" : "query-groups",
  348. "description" : "${role_query-groups}",
  349. "composite" : false,
  350. "clientRole" : true,
  351. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  352. "attributes" : { }
  353. }, {
  354. "id" : "9da4107a-373e-4a56-a01b-c8176425f791",
  355. "name" : "view-clients",
  356. "description" : "${role_view-clients}",
  357. "composite" : true,
  358. "composites" : {
  359. "client" : {
  360. "master-realm" : [ "query-clients" ]
  361. }
  362. },
  363. "clientRole" : true,
  364. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  365. "attributes" : { }
  366. }, {
  367. "id" : "8b4ea93c-f15e-49bc-9028-71be0c6ad5e5",
  368. "name" : "view-realm",
  369. "description" : "${role_view-realm}",
  370. "composite" : false,
  371. "clientRole" : true,
  372. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  373. "attributes" : { }
  374. }, {
  375. "id" : "9cd7c487-d13f-46ae-bee9-d1be1dc26793",
  376. "name" : "view-users",
  377. "description" : "${role_view-users}",
  378. "composite" : true,
  379. "composites" : {
  380. "client" : {
  381. "master-realm" : [ "query-users", "query-groups" ]
  382. }
  383. },
  384. "clientRole" : true,
  385. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  386. "attributes" : { }
  387. }, {
  388. "id" : "ce09ee0a-f11f-4c0b-925d-42f58ea7fbe8",
  389. "name" : "view-authorization",
  390. "description" : "${role_view-authorization}",
  391. "composite" : false,
  392. "clientRole" : true,
  393. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  394. "attributes" : { }
  395. }, {
  396. "id" : "2e216db9-47db-4531-b1bb-0046ea3b1a5d",
  397. "name" : "impersonation",
  398. "description" : "${role_impersonation}",
  399. "composite" : false,
  400. "clientRole" : true,
  401. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  402. "attributes" : { }
  403. }, {
  404. "id" : "f576a77b-f195-49c7-9a01-9a40fd156ddc",
  405. "name" : "view-identity-providers",
  406. "description" : "${role_view-identity-providers}",
  407. "composite" : false,
  408. "clientRole" : true,
  409. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  410. "attributes" : { }
  411. }, {
  412. "id" : "9c397d9d-12d2-4e50-9a54-153cf445120a",
  413. "name" : "manage-realm",
  414. "description" : "${role_manage-realm}",
  415. "composite" : false,
  416. "clientRole" : true,
  417. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  418. "attributes" : { }
  419. }, {
  420. "id" : "0f4e14a6-c645-4de5-93cb-b4014d723018",
  421. "name" : "manage-events",
  422. "description" : "${role_manage-events}",
  423. "composite" : false,
  424. "clientRole" : true,
  425. "containerId" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  426. "attributes" : { }
  427. } ],
  428. "account" : [ {
  429. "id" : "ed7aeb74-0fbe-431a-af3e-8cf4e57c0d31",
  430. "name" : "delete-account",
  431. "description" : "${role_delete-account}",
  432. "composite" : false,
  433. "clientRole" : true,
  434. "containerId" : "c55c5e95-1dc4-4839-a3a9-69131ebf2d6b",
  435. "attributes" : { }
  436. }, {
  437. "id" : "c4e4ef21-b25e-4eb0-a152-9dfe7fb4ae36",
  438. "name" : "view-applications",
  439. "description" : "${role_view-applications}",
  440. "composite" : false,
  441. "clientRole" : true,
  442. "containerId" : "c55c5e95-1dc4-4839-a3a9-69131ebf2d6b",
  443. "attributes" : { }
  444. }, {
  445. "id" : "dab80d57-efe9-4cbe-b4f1-2917a514858e",
  446. "name" : "view-consent",
  447. "description" : "${role_view-consent}",
  448. "composite" : false,
  449. "clientRole" : true,
  450. "containerId" : "c55c5e95-1dc4-4839-a3a9-69131ebf2d6b",
  451. "attributes" : { }
  452. }, {
  453. "id" : "ae3af69d-5311-49ac-a5f1-d51da546acc5",
  454. "name" : "manage-account",
  455. "description" : "${role_manage-account}",
  456. "composite" : true,
  457. "composites" : {
  458. "client" : {
  459. "account" : [ "manage-account-links" ]
  460. }
  461. },
  462. "clientRole" : true,
  463. "containerId" : "c55c5e95-1dc4-4839-a3a9-69131ebf2d6b",
  464. "attributes" : { }
  465. }, {
  466. "id" : "ae9a79a6-a289-4d9f-a6ec-b365e3efe16c",
  467. "name" : "manage-account-links",
  468. "description" : "${role_manage-account-links}",
  469. "composite" : false,
  470. "clientRole" : true,
  471. "containerId" : "c55c5e95-1dc4-4839-a3a9-69131ebf2d6b",
  472. "attributes" : { }
  473. }, {
  474. "id" : "fa7865bb-42f4-486a-bcf1-f926da94baa1",
  475. "name" : "manage-consent",
  476. "description" : "${role_manage-consent}",
  477. "composite" : true,
  478. "composites" : {
  479. "client" : {
  480. "account" : [ "view-consent" ]
  481. }
  482. },
  483. "clientRole" : true,
  484. "containerId" : "c55c5e95-1dc4-4839-a3a9-69131ebf2d6b",
  485. "attributes" : { }
  486. }, {
  487. "id" : "fa5e569e-9395-4e2b-9323-1a7ac9988e64",
  488. "name" : "view-groups",
  489. "description" : "${role_view-groups}",
  490. "composite" : false,
  491. "clientRole" : true,
  492. "containerId" : "c55c5e95-1dc4-4839-a3a9-69131ebf2d6b",
  493. "attributes" : { }
  494. }, {
  495. "id" : "15297ce1-a7d8-4d8d-b8d0-607f732c949a",
  496. "name" : "view-profile",
  497. "description" : "${role_view-profile}",
  498. "composite" : false,
  499. "clientRole" : true,
  500. "containerId" : "c55c5e95-1dc4-4839-a3a9-69131ebf2d6b",
  501. "attributes" : { }
  502. } ]
  503. }
  504. },
  505. "groups" : [ ],
  506. "defaultRole" : {
  507. "id" : "2f5c8fa3-423d-4629-8f56-0ecb7d3b1e54",
  508. "name" : "default-roles-master",
  509. "description" : "${role_default-roles}",
  510. "composite" : true,
  511. "clientRole" : false,
  512. "containerId" : "1d24ffca-4ac4-4768-b0ea-0e903339234f"
  513. },
  514. "requiredCredentials" : [ "password" ],
  515. "otpPolicyType" : "totp",
  516. "otpPolicyAlgorithm" : "HmacSHA1",
  517. "otpPolicyInitialCounter" : 0,
  518. "otpPolicyDigits" : 6,
  519. "otpPolicyLookAheadWindow" : 1,
  520. "otpPolicyPeriod" : 30,
  521. "otpPolicyCodeReusable" : false,
  522. "otpSupportedApplications" : [ "totpAppFreeOTPName", "totpAppGoogleName", "totpAppMicrosoftAuthenticatorName" ],
  523. "localizationTexts" : { },
  524. "webAuthnPolicyRpEntityName" : "keycloak",
  525. "webAuthnPolicySignatureAlgorithms" : [ "ES256" ],
  526. "webAuthnPolicyRpId" : "",
  527. "webAuthnPolicyAttestationConveyancePreference" : "not specified",
  528. "webAuthnPolicyAuthenticatorAttachment" : "not specified",
  529. "webAuthnPolicyRequireResidentKey" : "not specified",
  530. "webAuthnPolicyUserVerificationRequirement" : "not specified",
  531. "webAuthnPolicyCreateTimeout" : 0,
  532. "webAuthnPolicyAvoidSameAuthenticatorRegister" : false,
  533. "webAuthnPolicyAcceptableAaguids" : [ ],
  534. "webAuthnPolicyExtraOrigins" : [ ],
  535. "webAuthnPolicyPasswordlessRpEntityName" : "keycloak",
  536. "webAuthnPolicyPasswordlessSignatureAlgorithms" : [ "ES256" ],
  537. "webAuthnPolicyPasswordlessRpId" : "",
  538. "webAuthnPolicyPasswordlessAttestationConveyancePreference" : "not specified",
  539. "webAuthnPolicyPasswordlessAuthenticatorAttachment" : "not specified",
  540. "webAuthnPolicyPasswordlessRequireResidentKey" : "not specified",
  541. "webAuthnPolicyPasswordlessUserVerificationRequirement" : "not specified",
  542. "webAuthnPolicyPasswordlessCreateTimeout" : 0,
  543. "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister" : false,
  544. "webAuthnPolicyPasswordlessAcceptableAaguids" : [ ],
  545. "webAuthnPolicyPasswordlessExtraOrigins" : [ ],
  546. "scopeMappings" : [ {
  547. "clientScope" : "offline_access",
  548. "roles" : [ "offline_access" ]
  549. } ],
  550. "clientScopeMappings" : {
  551. "account" : [ {
  552. "client" : "account-console",
  553. "roles" : [ "manage-account", "view-groups" ]
  554. } ]
  555. },
  556. "clients" : [ {
  557. "id" : "c55c5e95-1dc4-4839-a3a9-69131ebf2d6b",
  558. "clientId" : "account",
  559. "name" : "${client_account}",
  560. "rootUrl" : "${authBaseUrl}",
  561. "baseUrl" : "/realms/master/account/",
  562. "surrogateAuthRequired" : false,
  563. "enabled" : true,
  564. "alwaysDisplayInConsole" : false,
  565. "clientAuthenticatorType" : "client-secret",
  566. "redirectUris" : [ "/realms/master/account/*" ],
  567. "webOrigins" : [ ],
  568. "notBefore" : 0,
  569. "bearerOnly" : false,
  570. "consentRequired" : false,
  571. "standardFlowEnabled" : true,
  572. "implicitFlowEnabled" : false,
  573. "directAccessGrantsEnabled" : false,
  574. "serviceAccountsEnabled" : false,
  575. "publicClient" : true,
  576. "frontchannelLogout" : false,
  577. "protocol" : "openid-connect",
  578. "attributes" : {
  579. "post.logout.redirect.uris" : "+"
  580. },
  581. "authenticationFlowBindingOverrides" : { },
  582. "fullScopeAllowed" : false,
  583. "nodeReRegistrationTimeout" : 0,
  584. "defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email" ],
  585. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  586. }, {
  587. "id" : "ef7a517a-ecd4-4e99-a8f2-ad82887e6eaf",
  588. "clientId" : "account-console",
  589. "name" : "${client_account-console}",
  590. "rootUrl" : "${authBaseUrl}",
  591. "baseUrl" : "/realms/master/account/",
  592. "surrogateAuthRequired" : false,
  593. "enabled" : true,
  594. "alwaysDisplayInConsole" : false,
  595. "clientAuthenticatorType" : "client-secret",
  596. "redirectUris" : [ "/realms/master/account/*" ],
  597. "webOrigins" : [ ],
  598. "notBefore" : 0,
  599. "bearerOnly" : false,
  600. "consentRequired" : false,
  601. "standardFlowEnabled" : true,
  602. "implicitFlowEnabled" : false,
  603. "directAccessGrantsEnabled" : false,
  604. "serviceAccountsEnabled" : false,
  605. "publicClient" : true,
  606. "frontchannelLogout" : false,
  607. "protocol" : "openid-connect",
  608. "attributes" : {
  609. "post.logout.redirect.uris" : "+",
  610. "pkce.code.challenge.method" : "S256"
  611. },
  612. "authenticationFlowBindingOverrides" : { },
  613. "fullScopeAllowed" : false,
  614. "nodeReRegistrationTimeout" : 0,
  615. "protocolMappers" : [ {
  616. "id" : "383e5ae9-03c8-45eb-a659-55c6125676ed",
  617. "name" : "audience resolve",
  618. "protocol" : "openid-connect",
  619. "protocolMapper" : "oidc-audience-resolve-mapper",
  620. "consentRequired" : false,
  621. "config" : { }
  622. } ],
  623. "defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email" ],
  624. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  625. }, {
  626. "id" : "8deb794f-9bd9-4e41-874d-5d95f9688d3d",
  627. "clientId" : "admin-cli",
  628. "name" : "${client_admin-cli}",
  629. "surrogateAuthRequired" : false,
  630. "enabled" : true,
  631. "alwaysDisplayInConsole" : false,
  632. "clientAuthenticatorType" : "client-secret",
  633. "redirectUris" : [ ],
  634. "webOrigins" : [ ],
  635. "notBefore" : 0,
  636. "bearerOnly" : false,
  637. "consentRequired" : false,
  638. "standardFlowEnabled" : false,
  639. "implicitFlowEnabled" : false,
  640. "directAccessGrantsEnabled" : true,
  641. "serviceAccountsEnabled" : false,
  642. "publicClient" : true,
  643. "frontchannelLogout" : false,
  644. "protocol" : "openid-connect",
  645. "attributes" : { },
  646. "authenticationFlowBindingOverrides" : { },
  647. "fullScopeAllowed" : false,
  648. "nodeReRegistrationTimeout" : 0,
  649. "defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email" ],
  650. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  651. }, {
  652. "id" : "cfc4bfe2-8344-420b-9aac-36a6f1885f0a",
  653. "clientId" : "broker",
  654. "name" : "${client_broker}",
  655. "surrogateAuthRequired" : false,
  656. "enabled" : true,
  657. "alwaysDisplayInConsole" : false,
  658. "clientAuthenticatorType" : "client-secret",
  659. "redirectUris" : [ ],
  660. "webOrigins" : [ ],
  661. "notBefore" : 0,
  662. "bearerOnly" : true,
  663. "consentRequired" : false,
  664. "standardFlowEnabled" : true,
  665. "implicitFlowEnabled" : false,
  666. "directAccessGrantsEnabled" : false,
  667. "serviceAccountsEnabled" : false,
  668. "publicClient" : false,
  669. "frontchannelLogout" : false,
  670. "protocol" : "openid-connect",
  671. "attributes" : { },
  672. "authenticationFlowBindingOverrides" : { },
  673. "fullScopeAllowed" : false,
  674. "nodeReRegistrationTimeout" : 0,
  675. "defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email" ],
  676. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  677. }, {
  678. "id" : "481ebf32-0c1f-4fcc-b164-f5f5ca4bdedf",
  679. "clientId" : "cashu-client",
  680. "name" : "",
  681. "description" : "",
  682. "rootUrl" : "",
  683. "adminUrl" : "",
  684. "baseUrl" : "",
  685. "surrogateAuthRequired" : false,
  686. "enabled" : true,
  687. "alwaysDisplayInConsole" : false,
  688. "clientAuthenticatorType" : "client-secret",
  689. "redirectUris" : [ "/*" ],
  690. "webOrigins" : [ "/*" ],
  691. "notBefore" : 0,
  692. "bearerOnly" : false,
  693. "consentRequired" : false,
  694. "standardFlowEnabled" : true,
  695. "implicitFlowEnabled" : true,
  696. "directAccessGrantsEnabled" : true,
  697. "serviceAccountsEnabled" : false,
  698. "publicClient" : true,
  699. "frontchannelLogout" : true,
  700. "protocol" : "openid-connect",
  701. "attributes" : {
  702. "oidc.ciba.grant.enabled" : "false",
  703. "backchannel.logout.session.required" : "true",
  704. "oauth2.device.authorization.grant.enabled" : "true",
  705. "backchannel.logout.revoke.offline.tokens" : "false"
  706. },
  707. "authenticationFlowBindingOverrides" : { },
  708. "fullScopeAllowed" : true,
  709. "nodeReRegistrationTimeout" : -1,
  710. "defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email" ],
  711. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  712. }, {
  713. "id" : "53590271-2c57-4afd-90c5-6eafb383d294",
  714. "clientId" : "cdk-test-realm-realm",
  715. "name" : "cdk-test-realm Realm",
  716. "surrogateAuthRequired" : false,
  717. "enabled" : true,
  718. "alwaysDisplayInConsole" : false,
  719. "clientAuthenticatorType" : "client-secret",
  720. "redirectUris" : [ ],
  721. "webOrigins" : [ ],
  722. "notBefore" : 0,
  723. "bearerOnly" : true,
  724. "consentRequired" : false,
  725. "standardFlowEnabled" : true,
  726. "implicitFlowEnabled" : false,
  727. "directAccessGrantsEnabled" : false,
  728. "serviceAccountsEnabled" : false,
  729. "publicClient" : false,
  730. "frontchannelLogout" : false,
  731. "attributes" : { },
  732. "authenticationFlowBindingOverrides" : { },
  733. "fullScopeAllowed" : false,
  734. "nodeReRegistrationTimeout" : 0,
  735. "defaultClientScopes" : [ ],
  736. "optionalClientScopes" : [ ]
  737. }, {
  738. "id" : "37feeea0-d97b-4b09-826b-d5fc83b40f90",
  739. "clientId" : "master-realm",
  740. "name" : "master Realm",
  741. "surrogateAuthRequired" : false,
  742. "enabled" : true,
  743. "alwaysDisplayInConsole" : false,
  744. "clientAuthenticatorType" : "client-secret",
  745. "redirectUris" : [ ],
  746. "webOrigins" : [ ],
  747. "notBefore" : 0,
  748. "bearerOnly" : true,
  749. "consentRequired" : false,
  750. "standardFlowEnabled" : true,
  751. "implicitFlowEnabled" : false,
  752. "directAccessGrantsEnabled" : false,
  753. "serviceAccountsEnabled" : false,
  754. "publicClient" : false,
  755. "frontchannelLogout" : false,
  756. "attributes" : { },
  757. "authenticationFlowBindingOverrides" : { },
  758. "fullScopeAllowed" : false,
  759. "nodeReRegistrationTimeout" : 0,
  760. "defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email" ],
  761. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  762. }, {
  763. "id" : "e3c6f9ce-7bff-47b3-807a-5a84a7d2078f",
  764. "clientId" : "security-admin-console",
  765. "name" : "${client_security-admin-console}",
  766. "rootUrl" : "${authAdminUrl}",
  767. "baseUrl" : "/admin/master/console/",
  768. "surrogateAuthRequired" : false,
  769. "enabled" : true,
  770. "alwaysDisplayInConsole" : false,
  771. "clientAuthenticatorType" : "client-secret",
  772. "redirectUris" : [ "/admin/master/console/*" ],
  773. "webOrigins" : [ "+" ],
  774. "notBefore" : 0,
  775. "bearerOnly" : false,
  776. "consentRequired" : false,
  777. "standardFlowEnabled" : true,
  778. "implicitFlowEnabled" : false,
  779. "directAccessGrantsEnabled" : false,
  780. "serviceAccountsEnabled" : false,
  781. "publicClient" : true,
  782. "frontchannelLogout" : false,
  783. "protocol" : "openid-connect",
  784. "attributes" : {
  785. "post.logout.redirect.uris" : "+",
  786. "pkce.code.challenge.method" : "S256"
  787. },
  788. "authenticationFlowBindingOverrides" : { },
  789. "fullScopeAllowed" : false,
  790. "nodeReRegistrationTimeout" : 0,
  791. "protocolMappers" : [ {
  792. "id" : "e56848d1-548c-4b65-b716-b8f5a921caf0",
  793. "name" : "locale",
  794. "protocol" : "openid-connect",
  795. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  796. "consentRequired" : false,
  797. "config" : {
  798. "introspection.token.claim" : "true",
  799. "userinfo.token.claim" : "true",
  800. "user.attribute" : "locale",
  801. "id.token.claim" : "true",
  802. "access.token.claim" : "true",
  803. "claim.name" : "locale",
  804. "jsonType.label" : "String"
  805. }
  806. } ],
  807. "defaultClientScopes" : [ "web-origins", "acr", "roles", "profile", "basic", "email" ],
  808. "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  809. } ],
  810. "clientScopes" : [ {
  811. "id" : "1221c19d-1636-4c1f-8fcd-52259a18677c",
  812. "name" : "address",
  813. "description" : "OpenID Connect built-in scope: address",
  814. "protocol" : "openid-connect",
  815. "attributes" : {
  816. "include.in.token.scope" : "true",
  817. "consent.screen.text" : "${addressScopeConsentText}",
  818. "display.on.consent.screen" : "true"
  819. },
  820. "protocolMappers" : [ {
  821. "id" : "c01b6443-70e3-43e6-95c3-f67341edfde6",
  822. "name" : "address",
  823. "protocol" : "openid-connect",
  824. "protocolMapper" : "oidc-address-mapper",
  825. "consentRequired" : false,
  826. "config" : {
  827. "user.attribute.formatted" : "formatted",
  828. "user.attribute.country" : "country",
  829. "introspection.token.claim" : "true",
  830. "user.attribute.postal_code" : "postal_code",
  831. "userinfo.token.claim" : "true",
  832. "user.attribute.street" : "street",
  833. "id.token.claim" : "true",
  834. "user.attribute.region" : "region",
  835. "access.token.claim" : "true",
  836. "user.attribute.locality" : "locality"
  837. }
  838. } ]
  839. }, {
  840. "id" : "1aef006f-62fb-489b-98bf-7f4a5067585a",
  841. "name" : "roles",
  842. "description" : "OpenID Connect scope for add user roles to the access token",
  843. "protocol" : "openid-connect",
  844. "attributes" : {
  845. "include.in.token.scope" : "false",
  846. "consent.screen.text" : "${rolesScopeConsentText}",
  847. "display.on.consent.screen" : "true"
  848. },
  849. "protocolMappers" : [ {
  850. "id" : "69f97c43-5270-43aa-8e5f-f35b448c0807",
  851. "name" : "client roles",
  852. "protocol" : "openid-connect",
  853. "protocolMapper" : "oidc-usermodel-client-role-mapper",
  854. "consentRequired" : false,
  855. "config" : {
  856. "user.attribute" : "foo",
  857. "introspection.token.claim" : "true",
  858. "access.token.claim" : "true",
  859. "claim.name" : "resource_access.${client_id}.roles",
  860. "jsonType.label" : "String",
  861. "multivalued" : "true"
  862. }
  863. }, {
  864. "id" : "9ac65150-845d-48c6-8802-686ec2ea39fc",
  865. "name" : "audience resolve",
  866. "protocol" : "openid-connect",
  867. "protocolMapper" : "oidc-audience-resolve-mapper",
  868. "consentRequired" : false,
  869. "config" : {
  870. "introspection.token.claim" : "true",
  871. "access.token.claim" : "true"
  872. }
  873. }, {
  874. "id" : "6317df14-a875-47a4-b918-160a5745445e",
  875. "name" : "realm roles",
  876. "protocol" : "openid-connect",
  877. "protocolMapper" : "oidc-usermodel-realm-role-mapper",
  878. "consentRequired" : false,
  879. "config" : {
  880. "user.attribute" : "foo",
  881. "introspection.token.claim" : "true",
  882. "access.token.claim" : "true",
  883. "claim.name" : "realm_access.roles",
  884. "jsonType.label" : "String",
  885. "multivalued" : "true"
  886. }
  887. } ]
  888. }, {
  889. "id" : "07e7b880-29b4-43ec-b29d-974802adaa60",
  890. "name" : "microprofile-jwt",
  891. "description" : "Microprofile - JWT built-in scope",
  892. "protocol" : "openid-connect",
  893. "attributes" : {
  894. "include.in.token.scope" : "true",
  895. "display.on.consent.screen" : "false"
  896. },
  897. "protocolMappers" : [ {
  898. "id" : "69aad238-17d9-4b02-93c5-7f7bb8f2db7b",
  899. "name" : "groups",
  900. "protocol" : "openid-connect",
  901. "protocolMapper" : "oidc-usermodel-realm-role-mapper",
  902. "consentRequired" : false,
  903. "config" : {
  904. "introspection.token.claim" : "true",
  905. "multivalued" : "true",
  906. "user.attribute" : "foo",
  907. "id.token.claim" : "true",
  908. "access.token.claim" : "true",
  909. "claim.name" : "groups",
  910. "jsonType.label" : "String"
  911. }
  912. }, {
  913. "id" : "cf28c45c-099c-4e8d-a7d2-102f675838bf",
  914. "name" : "upn",
  915. "protocol" : "openid-connect",
  916. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  917. "consentRequired" : false,
  918. "config" : {
  919. "introspection.token.claim" : "true",
  920. "userinfo.token.claim" : "true",
  921. "user.attribute" : "username",
  922. "id.token.claim" : "true",
  923. "access.token.claim" : "true",
  924. "claim.name" : "upn",
  925. "jsonType.label" : "String"
  926. }
  927. } ]
  928. }, {
  929. "id" : "92c42c03-28a3-4840-a82d-f1984410a9ae",
  930. "name" : "acr",
  931. "description" : "OpenID Connect scope for add acr (authentication context class reference) to the token",
  932. "protocol" : "openid-connect",
  933. "attributes" : {
  934. "include.in.token.scope" : "false",
  935. "display.on.consent.screen" : "false"
  936. },
  937. "protocolMappers" : [ {
  938. "id" : "559fcb0d-10e3-4dfc-a0f7-d8a94e7a1651",
  939. "name" : "acr loa level",
  940. "protocol" : "openid-connect",
  941. "protocolMapper" : "oidc-acr-mapper",
  942. "consentRequired" : false,
  943. "config" : {
  944. "id.token.claim" : "true",
  945. "introspection.token.claim" : "true",
  946. "access.token.claim" : "true"
  947. }
  948. } ]
  949. }, {
  950. "id" : "14085adb-2b16-4e65-82b9-80629a0a5277",
  951. "name" : "profile",
  952. "description" : "OpenID Connect built-in scope: profile",
  953. "protocol" : "openid-connect",
  954. "attributes" : {
  955. "include.in.token.scope" : "true",
  956. "consent.screen.text" : "${profileScopeConsentText}",
  957. "display.on.consent.screen" : "true"
  958. },
  959. "protocolMappers" : [ {
  960. "id" : "fc8413b3-61a4-413d-8a1b-303667a6959f",
  961. "name" : "full name",
  962. "protocol" : "openid-connect",
  963. "protocolMapper" : "oidc-full-name-mapper",
  964. "consentRequired" : false,
  965. "config" : {
  966. "id.token.claim" : "true",
  967. "introspection.token.claim" : "true",
  968. "access.token.claim" : "true",
  969. "userinfo.token.claim" : "true"
  970. }
  971. }, {
  972. "id" : "48aff4e0-c99d-4aae-a3bc-91bab9d65596",
  973. "name" : "picture",
  974. "protocol" : "openid-connect",
  975. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  976. "consentRequired" : false,
  977. "config" : {
  978. "introspection.token.claim" : "true",
  979. "userinfo.token.claim" : "true",
  980. "user.attribute" : "picture",
  981. "id.token.claim" : "true",
  982. "access.token.claim" : "true",
  983. "claim.name" : "picture",
  984. "jsonType.label" : "String"
  985. }
  986. }, {
  987. "id" : "9820919e-a62f-424d-ad9d-589b6c8693e5",
  988. "name" : "profile",
  989. "protocol" : "openid-connect",
  990. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  991. "consentRequired" : false,
  992. "config" : {
  993. "introspection.token.claim" : "true",
  994. "userinfo.token.claim" : "true",
  995. "user.attribute" : "profile",
  996. "id.token.claim" : "true",
  997. "access.token.claim" : "true",
  998. "claim.name" : "profile",
  999. "jsonType.label" : "String"
  1000. }
  1001. }, {
  1002. "id" : "82f7c323-6c57-464b-97e9-b5f0b0de3615",
  1003. "name" : "username",
  1004. "protocol" : "openid-connect",
  1005. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1006. "consentRequired" : false,
  1007. "config" : {
  1008. "introspection.token.claim" : "true",
  1009. "userinfo.token.claim" : "true",
  1010. "user.attribute" : "username",
  1011. "id.token.claim" : "true",
  1012. "access.token.claim" : "true",
  1013. "claim.name" : "preferred_username",
  1014. "jsonType.label" : "String"
  1015. }
  1016. }, {
  1017. "id" : "34eb1bf5-f3a5-4c2d-84c2-a63eb8357124",
  1018. "name" : "given name",
  1019. "protocol" : "openid-connect",
  1020. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1021. "consentRequired" : false,
  1022. "config" : {
  1023. "introspection.token.claim" : "true",
  1024. "userinfo.token.claim" : "true",
  1025. "user.attribute" : "firstName",
  1026. "id.token.claim" : "true",
  1027. "access.token.claim" : "true",
  1028. "claim.name" : "given_name",
  1029. "jsonType.label" : "String"
  1030. }
  1031. }, {
  1032. "id" : "a62b649f-b300-4036-bca2-c111b2380d00",
  1033. "name" : "website",
  1034. "protocol" : "openid-connect",
  1035. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1036. "consentRequired" : false,
  1037. "config" : {
  1038. "introspection.token.claim" : "true",
  1039. "userinfo.token.claim" : "true",
  1040. "user.attribute" : "website",
  1041. "id.token.claim" : "true",
  1042. "access.token.claim" : "true",
  1043. "claim.name" : "website",
  1044. "jsonType.label" : "String"
  1045. }
  1046. }, {
  1047. "id" : "fe2ea998-6e26-4b05-8d08-e774769272e7",
  1048. "name" : "zoneinfo",
  1049. "protocol" : "openid-connect",
  1050. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1051. "consentRequired" : false,
  1052. "config" : {
  1053. "introspection.token.claim" : "true",
  1054. "userinfo.token.claim" : "true",
  1055. "user.attribute" : "zoneinfo",
  1056. "id.token.claim" : "true",
  1057. "access.token.claim" : "true",
  1058. "claim.name" : "zoneinfo",
  1059. "jsonType.label" : "String"
  1060. }
  1061. }, {
  1062. "id" : "592ad19d-c53c-496e-be92-1a2b725f2beb",
  1063. "name" : "middle name",
  1064. "protocol" : "openid-connect",
  1065. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1066. "consentRequired" : false,
  1067. "config" : {
  1068. "introspection.token.claim" : "true",
  1069. "userinfo.token.claim" : "true",
  1070. "user.attribute" : "middleName",
  1071. "id.token.claim" : "true",
  1072. "access.token.claim" : "true",
  1073. "claim.name" : "middle_name",
  1074. "jsonType.label" : "String"
  1075. }
  1076. }, {
  1077. "id" : "9dd7f089-718a-4843-a6db-21b2f0f3bfed",
  1078. "name" : "nickname",
  1079. "protocol" : "openid-connect",
  1080. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1081. "consentRequired" : false,
  1082. "config" : {
  1083. "introspection.token.claim" : "true",
  1084. "userinfo.token.claim" : "true",
  1085. "user.attribute" : "nickname",
  1086. "id.token.claim" : "true",
  1087. "access.token.claim" : "true",
  1088. "claim.name" : "nickname",
  1089. "jsonType.label" : "String"
  1090. }
  1091. }, {
  1092. "id" : "8178127b-8094-4e0d-bd7c-3b2a7acdd330",
  1093. "name" : "locale",
  1094. "protocol" : "openid-connect",
  1095. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1096. "consentRequired" : false,
  1097. "config" : {
  1098. "introspection.token.claim" : "true",
  1099. "userinfo.token.claim" : "true",
  1100. "user.attribute" : "locale",
  1101. "id.token.claim" : "true",
  1102. "access.token.claim" : "true",
  1103. "claim.name" : "locale",
  1104. "jsonType.label" : "String"
  1105. }
  1106. }, {
  1107. "id" : "0ef67b63-dba3-417c-a14f-b215e90e7e64",
  1108. "name" : "family name",
  1109. "protocol" : "openid-connect",
  1110. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1111. "consentRequired" : false,
  1112. "config" : {
  1113. "introspection.token.claim" : "true",
  1114. "userinfo.token.claim" : "true",
  1115. "user.attribute" : "lastName",
  1116. "id.token.claim" : "true",
  1117. "access.token.claim" : "true",
  1118. "claim.name" : "family_name",
  1119. "jsonType.label" : "String"
  1120. }
  1121. }, {
  1122. "id" : "00621743-68d8-42ea-850e-0ecc7a930a52",
  1123. "name" : "gender",
  1124. "protocol" : "openid-connect",
  1125. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1126. "consentRequired" : false,
  1127. "config" : {
  1128. "introspection.token.claim" : "true",
  1129. "userinfo.token.claim" : "true",
  1130. "user.attribute" : "gender",
  1131. "id.token.claim" : "true",
  1132. "access.token.claim" : "true",
  1133. "claim.name" : "gender",
  1134. "jsonType.label" : "String"
  1135. }
  1136. }, {
  1137. "id" : "11e1a8a5-3022-4354-8aac-cfc031a37306",
  1138. "name" : "birthdate",
  1139. "protocol" : "openid-connect",
  1140. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1141. "consentRequired" : false,
  1142. "config" : {
  1143. "introspection.token.claim" : "true",
  1144. "userinfo.token.claim" : "true",
  1145. "user.attribute" : "birthdate",
  1146. "id.token.claim" : "true",
  1147. "access.token.claim" : "true",
  1148. "claim.name" : "birthdate",
  1149. "jsonType.label" : "String"
  1150. }
  1151. }, {
  1152. "id" : "01ad3992-3785-4288-978c-328969fa46af",
  1153. "name" : "updated at",
  1154. "protocol" : "openid-connect",
  1155. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1156. "consentRequired" : false,
  1157. "config" : {
  1158. "introspection.token.claim" : "true",
  1159. "userinfo.token.claim" : "true",
  1160. "user.attribute" : "updatedAt",
  1161. "id.token.claim" : "true",
  1162. "access.token.claim" : "true",
  1163. "claim.name" : "updated_at",
  1164. "jsonType.label" : "long"
  1165. }
  1166. } ]
  1167. }, {
  1168. "id" : "2e099e5c-44b7-4810-8612-b4e9003b2c12",
  1169. "name" : "email",
  1170. "description" : "OpenID Connect built-in scope: email",
  1171. "protocol" : "openid-connect",
  1172. "attributes" : {
  1173. "include.in.token.scope" : "true",
  1174. "consent.screen.text" : "${emailScopeConsentText}",
  1175. "display.on.consent.screen" : "true"
  1176. },
  1177. "protocolMappers" : [ {
  1178. "id" : "302a39bf-f300-4ece-b54e-df6138fe9448",
  1179. "name" : "email",
  1180. "protocol" : "openid-connect",
  1181. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1182. "consentRequired" : false,
  1183. "config" : {
  1184. "introspection.token.claim" : "true",
  1185. "userinfo.token.claim" : "true",
  1186. "user.attribute" : "email",
  1187. "id.token.claim" : "true",
  1188. "access.token.claim" : "true",
  1189. "claim.name" : "email",
  1190. "jsonType.label" : "String"
  1191. }
  1192. }, {
  1193. "id" : "bafed855-153e-412a-9c2e-83cdaad5ee70",
  1194. "name" : "email verified",
  1195. "protocol" : "openid-connect",
  1196. "protocolMapper" : "oidc-usermodel-property-mapper",
  1197. "consentRequired" : false,
  1198. "config" : {
  1199. "introspection.token.claim" : "true",
  1200. "userinfo.token.claim" : "true",
  1201. "user.attribute" : "emailVerified",
  1202. "id.token.claim" : "true",
  1203. "access.token.claim" : "true",
  1204. "claim.name" : "email_verified",
  1205. "jsonType.label" : "boolean"
  1206. }
  1207. } ]
  1208. }, {
  1209. "id" : "e04245ff-2927-405a-bcaa-2f4f71a70bc6",
  1210. "name" : "web-origins",
  1211. "description" : "OpenID Connect scope for add allowed web origins to the access token",
  1212. "protocol" : "openid-connect",
  1213. "attributes" : {
  1214. "include.in.token.scope" : "false",
  1215. "consent.screen.text" : "",
  1216. "display.on.consent.screen" : "false"
  1217. },
  1218. "protocolMappers" : [ {
  1219. "id" : "a2282242-f273-4ec4-93be-84489bd7d99f",
  1220. "name" : "allowed web origins",
  1221. "protocol" : "openid-connect",
  1222. "protocolMapper" : "oidc-allowed-origins-mapper",
  1223. "consentRequired" : false,
  1224. "config" : {
  1225. "introspection.token.claim" : "true",
  1226. "access.token.claim" : "true"
  1227. }
  1228. } ]
  1229. }, {
  1230. "id" : "4f386944-8378-40a0-8743-de881ec19d9b",
  1231. "name" : "offline_access",
  1232. "description" : "OpenID Connect built-in scope: offline_access",
  1233. "protocol" : "openid-connect",
  1234. "attributes" : {
  1235. "consent.screen.text" : "${offlineAccessScopeConsentText}",
  1236. "display.on.consent.screen" : "true"
  1237. }
  1238. }, {
  1239. "id" : "e7b1d3d6-95ef-4192-a96a-b850416cf787",
  1240. "name" : "basic",
  1241. "description" : "OpenID Connect scope for add all basic claims to the token",
  1242. "protocol" : "openid-connect",
  1243. "attributes" : {
  1244. "include.in.token.scope" : "false",
  1245. "display.on.consent.screen" : "false"
  1246. },
  1247. "protocolMappers" : [ {
  1248. "id" : "c42acb5e-4970-40e8-bfdc-eb8d53a4c168",
  1249. "name" : "sub",
  1250. "protocol" : "openid-connect",
  1251. "protocolMapper" : "oidc-sub-mapper",
  1252. "consentRequired" : false,
  1253. "config" : {
  1254. "introspection.token.claim" : "true",
  1255. "access.token.claim" : "true"
  1256. }
  1257. }, {
  1258. "id" : "827625d4-4c5f-4a61-80db-4a14ca31a88c",
  1259. "name" : "auth_time",
  1260. "protocol" : "openid-connect",
  1261. "protocolMapper" : "oidc-usersessionmodel-note-mapper",
  1262. "consentRequired" : false,
  1263. "config" : {
  1264. "user.session.note" : "AUTH_TIME",
  1265. "id.token.claim" : "true",
  1266. "introspection.token.claim" : "true",
  1267. "access.token.claim" : "true",
  1268. "claim.name" : "auth_time",
  1269. "jsonType.label" : "long"
  1270. }
  1271. } ]
  1272. }, {
  1273. "id" : "6fb16c17-10e7-4236-aad4-7ef339fc23a5",
  1274. "name" : "role_list",
  1275. "description" : "SAML role list",
  1276. "protocol" : "saml",
  1277. "attributes" : {
  1278. "consent.screen.text" : "${samlRoleListScopeConsentText}",
  1279. "display.on.consent.screen" : "true"
  1280. },
  1281. "protocolMappers" : [ {
  1282. "id" : "7f656caf-034a-45fa-b0dc-83e855116b37",
  1283. "name" : "role list",
  1284. "protocol" : "saml",
  1285. "protocolMapper" : "saml-role-list-mapper",
  1286. "consentRequired" : false,
  1287. "config" : {
  1288. "single" : "false",
  1289. "attribute.nameformat" : "Basic",
  1290. "attribute.name" : "Role"
  1291. }
  1292. } ]
  1293. }, {
  1294. "id" : "fb11ae77-ecab-4a24-8e99-4d010d63ac68",
  1295. "name" : "phone",
  1296. "description" : "OpenID Connect built-in scope: phone",
  1297. "protocol" : "openid-connect",
  1298. "attributes" : {
  1299. "include.in.token.scope" : "true",
  1300. "consent.screen.text" : "${phoneScopeConsentText}",
  1301. "display.on.consent.screen" : "true"
  1302. },
  1303. "protocolMappers" : [ {
  1304. "id" : "73f7902e-95c9-4c0d-b316-d8797c6ee1fc",
  1305. "name" : "phone number",
  1306. "protocol" : "openid-connect",
  1307. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1308. "consentRequired" : false,
  1309. "config" : {
  1310. "introspection.token.claim" : "true",
  1311. "userinfo.token.claim" : "true",
  1312. "user.attribute" : "phoneNumber",
  1313. "id.token.claim" : "true",
  1314. "access.token.claim" : "true",
  1315. "claim.name" : "phone_number",
  1316. "jsonType.label" : "String"
  1317. }
  1318. }, {
  1319. "id" : "ae142c8a-9dc3-4860-8e00-6b55de0f4e6e",
  1320. "name" : "phone number verified",
  1321. "protocol" : "openid-connect",
  1322. "protocolMapper" : "oidc-usermodel-attribute-mapper",
  1323. "consentRequired" : false,
  1324. "config" : {
  1325. "introspection.token.claim" : "true",
  1326. "userinfo.token.claim" : "true",
  1327. "user.attribute" : "phoneNumberVerified",
  1328. "id.token.claim" : "true",
  1329. "access.token.claim" : "true",
  1330. "claim.name" : "phone_number_verified",
  1331. "jsonType.label" : "boolean"
  1332. }
  1333. } ]
  1334. } ],
  1335. "defaultDefaultClientScopes" : [ "role_list", "profile", "email", "roles", "web-origins", "acr", "basic" ],
  1336. "defaultOptionalClientScopes" : [ "offline_access", "address", "phone", "microprofile-jwt" ],
  1337. "browserSecurityHeaders" : {
  1338. "contentSecurityPolicyReportOnly" : "",
  1339. "xContentTypeOptions" : "nosniff",
  1340. "referrerPolicy" : "no-referrer",
  1341. "xRobotsTag" : "none",
  1342. "xFrameOptions" : "SAMEORIGIN",
  1343. "xXSSProtection" : "1; mode=block",
  1344. "contentSecurityPolicy" : "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
  1345. "strictTransportSecurity" : "max-age=31536000; includeSubDomains"
  1346. },
  1347. "smtpServer" : { },
  1348. "eventsEnabled" : false,
  1349. "eventsListeners" : [ "jboss-logging" ],
  1350. "enabledEventTypes" : [ ],
  1351. "adminEventsEnabled" : false,
  1352. "adminEventsDetailsEnabled" : false,
  1353. "identityProviders" : [ ],
  1354. "identityProviderMappers" : [ ],
  1355. "components" : {
  1356. "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy" : [ {
  1357. "id" : "009281c7-5818-43dd-9918-fc09fa64acee",
  1358. "name" : "Allowed Protocol Mapper Types",
  1359. "providerId" : "allowed-protocol-mappers",
  1360. "subType" : "authenticated",
  1361. "subComponents" : { },
  1362. "config" : {
  1363. "allowed-protocol-mapper-types" : [ "saml-user-property-mapper", "oidc-usermodel-attribute-mapper", "oidc-sha256-pairwise-sub-mapper", "saml-role-list-mapper", "oidc-full-name-mapper", "oidc-address-mapper", "oidc-usermodel-property-mapper", "saml-user-attribute-mapper" ]
  1364. }
  1365. }, {
  1366. "id" : "07696e2b-e163-4d4e-9524-cb22f27b1b27",
  1367. "name" : "Max Clients Limit",
  1368. "providerId" : "max-clients",
  1369. "subType" : "anonymous",
  1370. "subComponents" : { },
  1371. "config" : {
  1372. "max-clients" : [ "200" ]
  1373. }
  1374. }, {
  1375. "id" : "7e989075-ebb6-4bfb-84fa-e5333ebebad0",
  1376. "name" : "Allowed Client Scopes",
  1377. "providerId" : "allowed-client-templates",
  1378. "subType" : "anonymous",
  1379. "subComponents" : { },
  1380. "config" : {
  1381. "allow-default-scopes" : [ "true" ]
  1382. }
  1383. }, {
  1384. "id" : "d5203c6d-ed3e-4634-b041-511a1891bff7",
  1385. "name" : "Allowed Protocol Mapper Types",
  1386. "providerId" : "allowed-protocol-mappers",
  1387. "subType" : "anonymous",
  1388. "subComponents" : { },
  1389. "config" : {
  1390. "allowed-protocol-mapper-types" : [ "oidc-usermodel-property-mapper", "oidc-full-name-mapper", "oidc-address-mapper", "saml-user-attribute-mapper", "oidc-usermodel-attribute-mapper", "oidc-sha256-pairwise-sub-mapper", "saml-user-property-mapper", "saml-role-list-mapper" ]
  1391. }
  1392. }, {
  1393. "id" : "0e1d0a00-7daf-4f49-a717-44cb42ea4bac",
  1394. "name" : "Full Scope Disabled",
  1395. "providerId" : "scope",
  1396. "subType" : "anonymous",
  1397. "subComponents" : { },
  1398. "config" : { }
  1399. }, {
  1400. "id" : "b30bab85-3c70-4709-8711-ff45a1aa1fbb",
  1401. "name" : "Allowed Client Scopes",
  1402. "providerId" : "allowed-client-templates",
  1403. "subType" : "authenticated",
  1404. "subComponents" : { },
  1405. "config" : {
  1406. "allow-default-scopes" : [ "true" ]
  1407. }
  1408. }, {
  1409. "id" : "59fe5099-62a9-49c2-836d-a7af1da7ed4a",
  1410. "name" : "Trusted Hosts",
  1411. "providerId" : "trusted-hosts",
  1412. "subType" : "anonymous",
  1413. "subComponents" : { },
  1414. "config" : {
  1415. "host-sending-registration-request-must-match" : [ "true" ],
  1416. "client-uris-must-match" : [ "true" ]
  1417. }
  1418. }, {
  1419. "id" : "345e252e-4519-48ce-9667-d73e0d4a825a",
  1420. "name" : "Consent Required",
  1421. "providerId" : "consent-required",
  1422. "subType" : "anonymous",
  1423. "subComponents" : { },
  1424. "config" : { }
  1425. } ],
  1426. "org.keycloak.userprofile.UserProfileProvider" : [ {
  1427. "id" : "690e469b-9e09-45da-ae1b-a7fcf4ee4c36",
  1428. "providerId" : "declarative-user-profile",
  1429. "subComponents" : { },
  1430. "config" : {
  1431. "kc.user.profile.config" : [ "{\"attributes\":[{\"name\":\"username\",\"displayName\":\"${username}\",\"validations\":{\"length\":{\"min\":3,\"max\":255},\"username-prohibited-characters\":{},\"up-username-not-idn-homograph\":{}},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"email\",\"displayName\":\"${email}\",\"validations\":{\"email\":{},\"length\":{\"max\":255}},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"firstName\",\"displayName\":\"${firstName}\",\"validations\":{\"length\":{\"max\":255},\"person-name-prohibited-characters\":{}},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"lastName\",\"displayName\":\"${lastName}\",\"validations\":{\"length\":{\"max\":255},\"person-name-prohibited-characters\":{}},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false}],\"groups\":[{\"name\":\"user-metadata\",\"displayHeader\":\"User metadata\",\"displayDescription\":\"Attributes, which refer to user metadata\"}]}" ]
  1432. }
  1433. } ],
  1434. "org.keycloak.keys.KeyProvider" : [ {
  1435. "id" : "91dee151-ba0b-4a97-bce9-c170b077a012",
  1436. "name" : "rsa-generated",
  1437. "providerId" : "rsa-generated",
  1438. "subComponents" : { },
  1439. "config" : {
  1440. "privateKey" : [ "MIIEogIBAAKCAQEAsf9ld3Rv2WqQgIIblzjfvM0eDx2QSrD6ecz6+pTm/VBzZfQPgDcAO+oTeR7mX+qsoRcyD2XL9qrEnpI4nZZmb08eSKiZMq67HUZbgdekfXNHh9ttlau9BMSN5KVumO+UnjESNwqWiGljTLhwzcJapbwg2EThzP1c2DGKa/pm8JPiF6lKXBisFdJ7MgS76Cs3x2GyI9duPPWCzgLWlf9ReHTHYaXMxJZXffEZDufWXjy+9W+uwo9BAjMDVec9meC6A/T62/qNrg/0RnUGuRikTxsHJoAdpjr/34H1SGDLJHuaI3DjPnc933oJ0pEXZSvgaCUQPqq/AvIfo0IVxsdJawIDAQABAoIBAAGNs4lMlfUCAlkM7HYt9I3hXvu2UPLGE+/i2zlRxCIq7VUWXqOrAMRD+si0lia6Wi9FyB/VNYTtYdZWCzJDA1qCoScmHvYABtjOC6br6ErJPBOvjZ4crxwl4pCpUTc5kLYV5pdZtKqeURCGv/Z8McJlO6hmKFBburAGJuCYMIwKdktcc3ERoBCr/6djGzYc2hQ4Jxp//dAD5hJxcyrWxkucJb5BQlWa/tGu/I1UbKnn2a9M6bsVlbd+q0FNn0028IGMD+LspuFRUiK2XqGqYiHbDQqkBk2EL4kS2BZthDBKGK1G2ZmrusVNMhk8LQBgrYzjlI2tbMGxGhsdFct8EP0CgYEA5OOTJ3fVTDWZPL3aW9UGJHecz9b6Khr+IQ5fRhSbN1o+2VfMyA/9l7azvXds5ak8Z3VfpAb3zxSw4qPzz1BW5zbTztHd57pgUOqIYtzgEh2Wq12yFcK2yZ5bTJtXC+0Zb57PC+sLC584+LcQGiWXppmqLyH8mUT7hPaEfZQIvRcCgYEAxxSuz5TwzXw3cwO8Okmd3rMJChWVZSOfbMLRJn44pfYX5S6Y/DslEbck1Ta5RI0efO77cbM5tiQYTjWdnw7P3amdxL3mVm73KJpgTUz2xa5xBaZCFnqYr6mepoFAn3e4WyCQLKOwwATmnkDKoe0fzmXQea5f3agGiDRtMU2N0s0CgYBg4eL7pcFnDJjcGRBAJp7++JIrdzdUczB2FXtGUpqQh2Zq4LsRQ5N3kCHsZIx3eXbT496jsz9ZK8zjYbplWgAuxgpJVJO07jKujVdFYXCGund3+aTTiSONm7XRaz8hES7fDD1fMhHuzWpz/CiYqKjUH97lLGGbDpPX5/CUpwA76QKBgEz/B9lLLpMa3stB/5O/kyplrjJTRLOYQnmrI38yxDAT7Qv7qLmtGlourjU0dBU6Szdgqqk/+ysh7LCa9fplnSmLB3TnSWXWhwsSIfrjsHGmVRotQlQ1WEZgYPbe+KJ0iD3ea0SIjrzFaHh+cKCN+IY4RJg7Q+KTsOsO88hkyVxlAoGAFfOVRPvoScmjVUNCTdhqRMvQtgf8FGmwD1Huq993ON74sO51uMO5cn2sehviLx9UrLDfPWuknBF7UfrWepAqeQ91hTE9JxkyC9Z4uzBW2WRGj/0FgnpwcpSccOmrfYxytGuivuVRUI/1Vn+OYj6vqAmLt/zfQ9LZ38O2v7yklv8=" ],
  1441. "keyUse" : [ "SIG" ],
  1442. "certificate" : [ "MIICmzCCAYMCBgGVPfDnMjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZtYXN0ZXIwHhcNMjUwMjI1MTYyNzMyWhcNMzUwMjI1MTYyOTEyWjARMQ8wDQYDVQQDDAZtYXN0ZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/2V3dG/ZapCAghuXON+8zR4PHZBKsPp5zPr6lOb9UHNl9A+ANwA76hN5HuZf6qyhFzIPZcv2qsSekjidlmZvTx5IqJkyrrsdRluB16R9c0eH222Vq70ExI3kpW6Y75SeMRI3CpaIaWNMuHDNwlqlvCDYROHM/VzYMYpr+mbwk+IXqUpcGKwV0nsyBLvoKzfHYbIj12489YLOAtaV/1F4dMdhpczElld98RkO59ZePL71b67Cj0ECMwNV5z2Z4LoD9Prb+o2uD/RGdQa5GKRPGwcmgB2mOv/fgfVIYMske5ojcOM+dz3fegnSkRdlK+BoJRA+qr8C8h+jQhXGx0lrAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAHSbnsOYnxRDunL0WetZt+SrxiTxq/NrQmgGRF/c84+yEIWtZ2Mrx6sy8Coz9lXArI6t1ab94BY7yUNiSoaeXCNjtFS2sGppiOkCCUKJDfXWS5Yrurw2APWuM1D3ZbcEbWQlsozX0OADQFK421aacfCKlIZKRhvmUbAy+OLecFDcYxex6vAf2dleaxanb99K3SdtAOYpcHIyEv0xyw3nHPApn5VI+obuImgQuziylunHowOZxOfw6UJtzcbTgfbpCmtZ9E0f0Sfl1G9773B8K30ehRIVN1kGHNAMEXpsui7SE+q/1MLQ0UwYXySRG4pqYavoYfZfQKo09xFQbzJ/7aI=" ],
  1443. "priority" : [ "100" ]
  1444. }
  1445. }, {
  1446. "id" : "0e32268c-d387-4f97-bf4f-171fe8854e28",
  1447. "name" : "rsa-enc-generated",
  1448. "providerId" : "rsa-enc-generated",
  1449. "subComponents" : { },
  1450. "config" : {
  1451. "privateKey" : [ "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" ],
  1452. "keyUse" : [ "ENC" ],
  1453. "certificate" : [ "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" ],
  1454. "priority" : [ "100" ],
  1455. "algorithm" : [ "RSA-OAEP" ]
  1456. }
  1457. }, {
  1458. "id" : "54c7c1ed-d15b-4e22-9c98-31f3871c2aa7",
  1459. "name" : "hmac-generated-hs512",
  1460. "providerId" : "hmac-generated",
  1461. "subComponents" : { },
  1462. "config" : {
  1463. "kid" : [ "aa2e6f2b-b3ff-4587-8709-1b8709fb0b8f" ],
  1464. "secret" : [ "NhgikLmbb68BCYzYbgkz6DlbsnPG3HRUoWapQcP5mBdfte2SEtMJ3EObeElGkI9R9HM2FLuz7sTX5C6pxttSqSLK1URh5Eew34eZmunh1A-ETSltOYI0TUftK94wAiT6EsdnakYA9YY-2XcBttOB-kQ_oip6yT7X9VDzUVm_xYg" ],
  1465. "priority" : [ "100" ],
  1466. "algorithm" : [ "HS512" ]
  1467. }
  1468. }, {
  1469. "id" : "4ae2ae85-f3ad-4b74-9262-513f2301e150",
  1470. "name" : "aes-generated",
  1471. "providerId" : "aes-generated",
  1472. "subComponents" : { },
  1473. "config" : {
  1474. "kid" : [ "043b5384-abfb-48b7-9ab9-26e4e9f2e969" ],
  1475. "secret" : [ "gyPLMZi5idD0491xayzurQ" ],
  1476. "priority" : [ "100" ]
  1477. }
  1478. } ]
  1479. },
  1480. "internationalizationEnabled" : false,
  1481. "supportedLocales" : [ ],
  1482. "authenticationFlows" : [ {
  1483. "id" : "1ce4b89e-6944-44f6-8738-53543a6defd7",
  1484. "alias" : "Account verification options",
  1485. "description" : "Method with which to verity the existing account",
  1486. "providerId" : "basic-flow",
  1487. "topLevel" : false,
  1488. "builtIn" : true,
  1489. "authenticationExecutions" : [ {
  1490. "authenticator" : "idp-email-verification",
  1491. "authenticatorFlow" : false,
  1492. "requirement" : "ALTERNATIVE",
  1493. "priority" : 10,
  1494. "autheticatorFlow" : false,
  1495. "userSetupAllowed" : false
  1496. }, {
  1497. "authenticatorFlow" : true,
  1498. "requirement" : "ALTERNATIVE",
  1499. "priority" : 20,
  1500. "autheticatorFlow" : true,
  1501. "flowAlias" : "Verify Existing Account by Re-authentication",
  1502. "userSetupAllowed" : false
  1503. } ]
  1504. }, {
  1505. "id" : "f5c5536c-3769-4c34-ab89-c5355a4c30b5",
  1506. "alias" : "Browser - Conditional OTP",
  1507. "description" : "Flow to determine if the OTP is required for the authentication",
  1508. "providerId" : "basic-flow",
  1509. "topLevel" : false,
  1510. "builtIn" : true,
  1511. "authenticationExecutions" : [ {
  1512. "authenticator" : "conditional-user-configured",
  1513. "authenticatorFlow" : false,
  1514. "requirement" : "REQUIRED",
  1515. "priority" : 10,
  1516. "autheticatorFlow" : false,
  1517. "userSetupAllowed" : false
  1518. }, {
  1519. "authenticator" : "auth-otp-form",
  1520. "authenticatorFlow" : false,
  1521. "requirement" : "REQUIRED",
  1522. "priority" : 20,
  1523. "autheticatorFlow" : false,
  1524. "userSetupAllowed" : false
  1525. } ]
  1526. }, {
  1527. "id" : "847ec3b3-c355-4eba-b906-31ffc9d914b3",
  1528. "alias" : "Direct Grant - Conditional OTP",
  1529. "description" : "Flow to determine if the OTP is required for the authentication",
  1530. "providerId" : "basic-flow",
  1531. "topLevel" : false,
  1532. "builtIn" : true,
  1533. "authenticationExecutions" : [ {
  1534. "authenticator" : "conditional-user-configured",
  1535. "authenticatorFlow" : false,
  1536. "requirement" : "REQUIRED",
  1537. "priority" : 10,
  1538. "autheticatorFlow" : false,
  1539. "userSetupAllowed" : false
  1540. }, {
  1541. "authenticator" : "direct-grant-validate-otp",
  1542. "authenticatorFlow" : false,
  1543. "requirement" : "REQUIRED",
  1544. "priority" : 20,
  1545. "autheticatorFlow" : false,
  1546. "userSetupAllowed" : false
  1547. } ]
  1548. }, {
  1549. "id" : "11e9b13c-6f1b-4e02-85f6-28891e0a8f36",
  1550. "alias" : "First broker login - Conditional OTP",
  1551. "description" : "Flow to determine if the OTP is required for the authentication",
  1552. "providerId" : "basic-flow",
  1553. "topLevel" : false,
  1554. "builtIn" : true,
  1555. "authenticationExecutions" : [ {
  1556. "authenticator" : "conditional-user-configured",
  1557. "authenticatorFlow" : false,
  1558. "requirement" : "REQUIRED",
  1559. "priority" : 10,
  1560. "autheticatorFlow" : false,
  1561. "userSetupAllowed" : false
  1562. }, {
  1563. "authenticator" : "auth-otp-form",
  1564. "authenticatorFlow" : false,
  1565. "requirement" : "REQUIRED",
  1566. "priority" : 20,
  1567. "autheticatorFlow" : false,
  1568. "userSetupAllowed" : false
  1569. } ]
  1570. }, {
  1571. "id" : "eab77aaf-01ea-494e-8e50-85042eaf9e4e",
  1572. "alias" : "Handle Existing Account",
  1573. "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider",
  1574. "providerId" : "basic-flow",
  1575. "topLevel" : false,
  1576. "builtIn" : true,
  1577. "authenticationExecutions" : [ {
  1578. "authenticator" : "idp-confirm-link",
  1579. "authenticatorFlow" : false,
  1580. "requirement" : "REQUIRED",
  1581. "priority" : 10,
  1582. "autheticatorFlow" : false,
  1583. "userSetupAllowed" : false
  1584. }, {
  1585. "authenticatorFlow" : true,
  1586. "requirement" : "REQUIRED",
  1587. "priority" : 20,
  1588. "autheticatorFlow" : true,
  1589. "flowAlias" : "Account verification options",
  1590. "userSetupAllowed" : false
  1591. } ]
  1592. }, {
  1593. "id" : "88493237-6699-4080-b8c1-a156a5176d87",
  1594. "alias" : "Reset - Conditional OTP",
  1595. "description" : "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.",
  1596. "providerId" : "basic-flow",
  1597. "topLevel" : false,
  1598. "builtIn" : true,
  1599. "authenticationExecutions" : [ {
  1600. "authenticator" : "conditional-user-configured",
  1601. "authenticatorFlow" : false,
  1602. "requirement" : "REQUIRED",
  1603. "priority" : 10,
  1604. "autheticatorFlow" : false,
  1605. "userSetupAllowed" : false
  1606. }, {
  1607. "authenticator" : "reset-otp",
  1608. "authenticatorFlow" : false,
  1609. "requirement" : "REQUIRED",
  1610. "priority" : 20,
  1611. "autheticatorFlow" : false,
  1612. "userSetupAllowed" : false
  1613. } ]
  1614. }, {
  1615. "id" : "5b7bae19-2412-4414-aebd-dc1b14229d20",
  1616. "alias" : "User creation or linking",
  1617. "description" : "Flow for the existing/non-existing user alternatives",
  1618. "providerId" : "basic-flow",
  1619. "topLevel" : false,
  1620. "builtIn" : true,
  1621. "authenticationExecutions" : [ {
  1622. "authenticatorConfig" : "create unique user config",
  1623. "authenticator" : "idp-create-user-if-unique",
  1624. "authenticatorFlow" : false,
  1625. "requirement" : "ALTERNATIVE",
  1626. "priority" : 10,
  1627. "autheticatorFlow" : false,
  1628. "userSetupAllowed" : false
  1629. }, {
  1630. "authenticatorFlow" : true,
  1631. "requirement" : "ALTERNATIVE",
  1632. "priority" : 20,
  1633. "autheticatorFlow" : true,
  1634. "flowAlias" : "Handle Existing Account",
  1635. "userSetupAllowed" : false
  1636. } ]
  1637. }, {
  1638. "id" : "03c35464-e68a-461e-a3ac-641f5fb4d4f1",
  1639. "alias" : "Verify Existing Account by Re-authentication",
  1640. "description" : "Reauthentication of existing account",
  1641. "providerId" : "basic-flow",
  1642. "topLevel" : false,
  1643. "builtIn" : true,
  1644. "authenticationExecutions" : [ {
  1645. "authenticator" : "idp-username-password-form",
  1646. "authenticatorFlow" : false,
  1647. "requirement" : "REQUIRED",
  1648. "priority" : 10,
  1649. "autheticatorFlow" : false,
  1650. "userSetupAllowed" : false
  1651. }, {
  1652. "authenticatorFlow" : true,
  1653. "requirement" : "CONDITIONAL",
  1654. "priority" : 20,
  1655. "autheticatorFlow" : true,
  1656. "flowAlias" : "First broker login - Conditional OTP",
  1657. "userSetupAllowed" : false
  1658. } ]
  1659. }, {
  1660. "id" : "51d5c0f0-e8c6-4dc6-9e9a-680977629ccd",
  1661. "alias" : "browser",
  1662. "description" : "browser based authentication",
  1663. "providerId" : "basic-flow",
  1664. "topLevel" : true,
  1665. "builtIn" : true,
  1666. "authenticationExecutions" : [ {
  1667. "authenticator" : "auth-cookie",
  1668. "authenticatorFlow" : false,
  1669. "requirement" : "ALTERNATIVE",
  1670. "priority" : 10,
  1671. "autheticatorFlow" : false,
  1672. "userSetupAllowed" : false
  1673. }, {
  1674. "authenticator" : "auth-spnego",
  1675. "authenticatorFlow" : false,
  1676. "requirement" : "DISABLED",
  1677. "priority" : 20,
  1678. "autheticatorFlow" : false,
  1679. "userSetupAllowed" : false
  1680. }, {
  1681. "authenticator" : "identity-provider-redirector",
  1682. "authenticatorFlow" : false,
  1683. "requirement" : "ALTERNATIVE",
  1684. "priority" : 25,
  1685. "autheticatorFlow" : false,
  1686. "userSetupAllowed" : false
  1687. }, {
  1688. "authenticatorFlow" : true,
  1689. "requirement" : "ALTERNATIVE",
  1690. "priority" : 30,
  1691. "autheticatorFlow" : true,
  1692. "flowAlias" : "forms",
  1693. "userSetupAllowed" : false
  1694. } ]
  1695. }, {
  1696. "id" : "9b3b00af-2c90-4db2-b3a0-21ef7dc6f14d",
  1697. "alias" : "clients",
  1698. "description" : "Base authentication for clients",
  1699. "providerId" : "client-flow",
  1700. "topLevel" : true,
  1701. "builtIn" : true,
  1702. "authenticationExecutions" : [ {
  1703. "authenticator" : "client-secret",
  1704. "authenticatorFlow" : false,
  1705. "requirement" : "ALTERNATIVE",
  1706. "priority" : 10,
  1707. "autheticatorFlow" : false,
  1708. "userSetupAllowed" : false
  1709. }, {
  1710. "authenticator" : "client-jwt",
  1711. "authenticatorFlow" : false,
  1712. "requirement" : "ALTERNATIVE",
  1713. "priority" : 20,
  1714. "autheticatorFlow" : false,
  1715. "userSetupAllowed" : false
  1716. }, {
  1717. "authenticator" : "client-secret-jwt",
  1718. "authenticatorFlow" : false,
  1719. "requirement" : "ALTERNATIVE",
  1720. "priority" : 30,
  1721. "autheticatorFlow" : false,
  1722. "userSetupAllowed" : false
  1723. }, {
  1724. "authenticator" : "client-x509",
  1725. "authenticatorFlow" : false,
  1726. "requirement" : "ALTERNATIVE",
  1727. "priority" : 40,
  1728. "autheticatorFlow" : false,
  1729. "userSetupAllowed" : false
  1730. } ]
  1731. }, {
  1732. "id" : "64605779-3c20-48a7-b17a-9f6888c737c8",
  1733. "alias" : "direct grant",
  1734. "description" : "OpenID Connect Resource Owner Grant",
  1735. "providerId" : "basic-flow",
  1736. "topLevel" : true,
  1737. "builtIn" : true,
  1738. "authenticationExecutions" : [ {
  1739. "authenticator" : "direct-grant-validate-username",
  1740. "authenticatorFlow" : false,
  1741. "requirement" : "REQUIRED",
  1742. "priority" : 10,
  1743. "autheticatorFlow" : false,
  1744. "userSetupAllowed" : false
  1745. }, {
  1746. "authenticator" : "direct-grant-validate-password",
  1747. "authenticatorFlow" : false,
  1748. "requirement" : "REQUIRED",
  1749. "priority" : 20,
  1750. "autheticatorFlow" : false,
  1751. "userSetupAllowed" : false
  1752. }, {
  1753. "authenticatorFlow" : true,
  1754. "requirement" : "CONDITIONAL",
  1755. "priority" : 30,
  1756. "autheticatorFlow" : true,
  1757. "flowAlias" : "Direct Grant - Conditional OTP",
  1758. "userSetupAllowed" : false
  1759. } ]
  1760. }, {
  1761. "id" : "2797213e-19fc-4ad3-a751-bfc8fa3b080c",
  1762. "alias" : "docker auth",
  1763. "description" : "Used by Docker clients to authenticate against the IDP",
  1764. "providerId" : "basic-flow",
  1765. "topLevel" : true,
  1766. "builtIn" : true,
  1767. "authenticationExecutions" : [ {
  1768. "authenticator" : "docker-http-basic-authenticator",
  1769. "authenticatorFlow" : false,
  1770. "requirement" : "REQUIRED",
  1771. "priority" : 10,
  1772. "autheticatorFlow" : false,
  1773. "userSetupAllowed" : false
  1774. } ]
  1775. }, {
  1776. "id" : "5c245468-1b0d-4a96-b6c3-08cc1ef30f70",
  1777. "alias" : "first broker login",
  1778. "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
  1779. "providerId" : "basic-flow",
  1780. "topLevel" : true,
  1781. "builtIn" : true,
  1782. "authenticationExecutions" : [ {
  1783. "authenticatorConfig" : "review profile config",
  1784. "authenticator" : "idp-review-profile",
  1785. "authenticatorFlow" : false,
  1786. "requirement" : "REQUIRED",
  1787. "priority" : 10,
  1788. "autheticatorFlow" : false,
  1789. "userSetupAllowed" : false
  1790. }, {
  1791. "authenticatorFlow" : true,
  1792. "requirement" : "REQUIRED",
  1793. "priority" : 20,
  1794. "autheticatorFlow" : true,
  1795. "flowAlias" : "User creation or linking",
  1796. "userSetupAllowed" : false
  1797. } ]
  1798. }, {
  1799. "id" : "c31bb0d6-1e1b-4bf1-88dd-a3618f103c19",
  1800. "alias" : "forms",
  1801. "description" : "Username, password, otp and other auth forms.",
  1802. "providerId" : "basic-flow",
  1803. "topLevel" : false,
  1804. "builtIn" : true,
  1805. "authenticationExecutions" : [ {
  1806. "authenticator" : "auth-username-password-form",
  1807. "authenticatorFlow" : false,
  1808. "requirement" : "REQUIRED",
  1809. "priority" : 10,
  1810. "autheticatorFlow" : false,
  1811. "userSetupAllowed" : false
  1812. }, {
  1813. "authenticatorFlow" : true,
  1814. "requirement" : "CONDITIONAL",
  1815. "priority" : 20,
  1816. "autheticatorFlow" : true,
  1817. "flowAlias" : "Browser - Conditional OTP",
  1818. "userSetupAllowed" : false
  1819. } ]
  1820. }, {
  1821. "id" : "d701b2f7-6ebe-427c-af36-372c30ee4848",
  1822. "alias" : "registration",
  1823. "description" : "registration flow",
  1824. "providerId" : "basic-flow",
  1825. "topLevel" : true,
  1826. "builtIn" : true,
  1827. "authenticationExecutions" : [ {
  1828. "authenticator" : "registration-page-form",
  1829. "authenticatorFlow" : true,
  1830. "requirement" : "REQUIRED",
  1831. "priority" : 10,
  1832. "autheticatorFlow" : true,
  1833. "flowAlias" : "registration form",
  1834. "userSetupAllowed" : false
  1835. } ]
  1836. }, {
  1837. "id" : "5c2ac93a-9217-4a7b-a321-18d097af10bb",
  1838. "alias" : "registration form",
  1839. "description" : "registration form",
  1840. "providerId" : "form-flow",
  1841. "topLevel" : false,
  1842. "builtIn" : true,
  1843. "authenticationExecutions" : [ {
  1844. "authenticator" : "registration-user-creation",
  1845. "authenticatorFlow" : false,
  1846. "requirement" : "REQUIRED",
  1847. "priority" : 20,
  1848. "autheticatorFlow" : false,
  1849. "userSetupAllowed" : false
  1850. }, {
  1851. "authenticator" : "registration-password-action",
  1852. "authenticatorFlow" : false,
  1853. "requirement" : "REQUIRED",
  1854. "priority" : 50,
  1855. "autheticatorFlow" : false,
  1856. "userSetupAllowed" : false
  1857. }, {
  1858. "authenticator" : "registration-recaptcha-action",
  1859. "authenticatorFlow" : false,
  1860. "requirement" : "DISABLED",
  1861. "priority" : 60,
  1862. "autheticatorFlow" : false,
  1863. "userSetupAllowed" : false
  1864. }, {
  1865. "authenticator" : "registration-terms-and-conditions",
  1866. "authenticatorFlow" : false,
  1867. "requirement" : "DISABLED",
  1868. "priority" : 70,
  1869. "autheticatorFlow" : false,
  1870. "userSetupAllowed" : false
  1871. } ]
  1872. }, {
  1873. "id" : "723ecc33-6566-45ef-b65d-9358a1869e49",
  1874. "alias" : "reset credentials",
  1875. "description" : "Reset credentials for a user if they forgot their password or something",
  1876. "providerId" : "basic-flow",
  1877. "topLevel" : true,
  1878. "builtIn" : true,
  1879. "authenticationExecutions" : [ {
  1880. "authenticator" : "reset-credentials-choose-user",
  1881. "authenticatorFlow" : false,
  1882. "requirement" : "REQUIRED",
  1883. "priority" : 10,
  1884. "autheticatorFlow" : false,
  1885. "userSetupAllowed" : false
  1886. }, {
  1887. "authenticator" : "reset-credential-email",
  1888. "authenticatorFlow" : false,
  1889. "requirement" : "REQUIRED",
  1890. "priority" : 20,
  1891. "autheticatorFlow" : false,
  1892. "userSetupAllowed" : false
  1893. }, {
  1894. "authenticator" : "reset-password",
  1895. "authenticatorFlow" : false,
  1896. "requirement" : "REQUIRED",
  1897. "priority" : 30,
  1898. "autheticatorFlow" : false,
  1899. "userSetupAllowed" : false
  1900. }, {
  1901. "authenticatorFlow" : true,
  1902. "requirement" : "CONDITIONAL",
  1903. "priority" : 40,
  1904. "autheticatorFlow" : true,
  1905. "flowAlias" : "Reset - Conditional OTP",
  1906. "userSetupAllowed" : false
  1907. } ]
  1908. }, {
  1909. "id" : "ac87002d-2028-41e9-84b9-7702f767541d",
  1910. "alias" : "saml ecp",
  1911. "description" : "SAML ECP Profile Authentication Flow",
  1912. "providerId" : "basic-flow",
  1913. "topLevel" : true,
  1914. "builtIn" : true,
  1915. "authenticationExecutions" : [ {
  1916. "authenticator" : "http-basic-authenticator",
  1917. "authenticatorFlow" : false,
  1918. "requirement" : "REQUIRED",
  1919. "priority" : 10,
  1920. "autheticatorFlow" : false,
  1921. "userSetupAllowed" : false
  1922. } ]
  1923. } ],
  1924. "authenticatorConfig" : [ {
  1925. "id" : "4aa16020-beed-49d4-9ec9-53b03e70398e",
  1926. "alias" : "create unique user config",
  1927. "config" : {
  1928. "require.password.update.after.registration" : "false"
  1929. }
  1930. }, {
  1931. "id" : "020a675f-c2a2-4dcd-846d-c341f46f97d0",
  1932. "alias" : "review profile config",
  1933. "config" : {
  1934. "update.profile.on.first.login" : "missing"
  1935. }
  1936. } ],
  1937. "requiredActions" : [ {
  1938. "alias" : "CONFIGURE_TOTP",
  1939. "name" : "Configure OTP",
  1940. "providerId" : "CONFIGURE_TOTP",
  1941. "enabled" : true,
  1942. "defaultAction" : false,
  1943. "priority" : 10,
  1944. "config" : { }
  1945. }, {
  1946. "alias" : "TERMS_AND_CONDITIONS",
  1947. "name" : "Terms and Conditions",
  1948. "providerId" : "TERMS_AND_CONDITIONS",
  1949. "enabled" : false,
  1950. "defaultAction" : false,
  1951. "priority" : 20,
  1952. "config" : { }
  1953. }, {
  1954. "alias" : "UPDATE_PASSWORD",
  1955. "name" : "Update Password",
  1956. "providerId" : "UPDATE_PASSWORD",
  1957. "enabled" : true,
  1958. "defaultAction" : false,
  1959. "priority" : 30,
  1960. "config" : { }
  1961. }, {
  1962. "alias" : "UPDATE_PROFILE",
  1963. "name" : "Update Profile",
  1964. "providerId" : "UPDATE_PROFILE",
  1965. "enabled" : true,
  1966. "defaultAction" : false,
  1967. "priority" : 40,
  1968. "config" : { }
  1969. }, {
  1970. "alias" : "VERIFY_EMAIL",
  1971. "name" : "Verify Email",
  1972. "providerId" : "VERIFY_EMAIL",
  1973. "enabled" : true,
  1974. "defaultAction" : false,
  1975. "priority" : 50,
  1976. "config" : { }
  1977. }, {
  1978. "alias" : "delete_account",
  1979. "name" : "Delete Account",
  1980. "providerId" : "delete_account",
  1981. "enabled" : false,
  1982. "defaultAction" : false,
  1983. "priority" : 60,
  1984. "config" : { }
  1985. }, {
  1986. "alias" : "webauthn-register",
  1987. "name" : "Webauthn Register",
  1988. "providerId" : "webauthn-register",
  1989. "enabled" : true,
  1990. "defaultAction" : false,
  1991. "priority" : 70,
  1992. "config" : { }
  1993. }, {
  1994. "alias" : "webauthn-register-passwordless",
  1995. "name" : "Webauthn Register Passwordless",
  1996. "providerId" : "webauthn-register-passwordless",
  1997. "enabled" : true,
  1998. "defaultAction" : false,
  1999. "priority" : 80,
  2000. "config" : { }
  2001. }, {
  2002. "alias" : "VERIFY_PROFILE",
  2003. "name" : "Verify Profile",
  2004. "providerId" : "VERIFY_PROFILE",
  2005. "enabled" : true,
  2006. "defaultAction" : false,
  2007. "priority" : 90,
  2008. "config" : { }
  2009. }, {
  2010. "alias" : "delete_credential",
  2011. "name" : "Delete Credential",
  2012. "providerId" : "delete_credential",
  2013. "enabled" : true,
  2014. "defaultAction" : false,
  2015. "priority" : 100,
  2016. "config" : { }
  2017. }, {
  2018. "alias" : "update_user_locale",
  2019. "name" : "Update User Locale",
  2020. "providerId" : "update_user_locale",
  2021. "enabled" : true,
  2022. "defaultAction" : false,
  2023. "priority" : 1000,
  2024. "config" : { }
  2025. } ],
  2026. "browserFlow" : "browser",
  2027. "registrationFlow" : "registration",
  2028. "directGrantFlow" : "direct grant",
  2029. "resetCredentialsFlow" : "reset credentials",
  2030. "clientAuthenticationFlow" : "clients",
  2031. "dockerAuthenticationFlow" : "docker auth",
  2032. "firstBrokerLoginFlow" : "first broker login",
  2033. "attributes" : {
  2034. "cibaBackchannelTokenDeliveryMode" : "poll",
  2035. "cibaExpiresIn" : "120",
  2036. "cibaAuthRequestedUserHint" : "login_hint",
  2037. "parRequestUriLifespan" : "60",
  2038. "cibaInterval" : "5",
  2039. "realmReusableOtpCode" : "false"
  2040. },
  2041. "keycloakVersion" : "25.0.6",
  2042. "userManagedAccessAllowed" : false,
  2043. "organizationsEnabled" : false,
  2044. "clientProfiles" : {
  2045. "profiles" : [ ]
  2046. },
  2047. "clientPolicies" : {
  2048. "policies" : [ ]
  2049. }
  2050. }