boat-delivery-realm-realm.json 74 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400
  1. {
  2. "id": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  3. "realm": "boat-delivery-realm",
  4. "displayName": "",
  5. "displayNameHtml": "",
  6. "notBefore": 0,
  7. "defaultSignatureAlgorithm": "RS256",
  8. "revokeRefreshToken": false,
  9. "refreshTokenMaxReuse": 0,
  10. "accessTokenLifespan": 300,
  11. "accessTokenLifespanForImplicitFlow": 900,
  12. "ssoSessionIdleTimeout": 1800,
  13. "ssoSessionMaxLifespan": 36000,
  14. "ssoSessionIdleTimeoutRememberMe": 0,
  15. "ssoSessionMaxLifespanRememberMe": 0,
  16. "offlineSessionIdleTimeout": 2592000,
  17. "offlineSessionMaxLifespanEnabled": false,
  18. "offlineSessionMaxLifespan": 5184000,
  19. "clientSessionIdleTimeout": 0,
  20. "clientSessionMaxLifespan": 0,
  21. "clientOfflineSessionIdleTimeout": 0,
  22. "clientOfflineSessionMaxLifespan": 0,
  23. "accessCodeLifespan": 60,
  24. "accessCodeLifespanUserAction": 300,
  25. "accessCodeLifespanLogin": 1800,
  26. "actionTokenGeneratedByAdminLifespan": 43200,
  27. "actionTokenGeneratedByUserLifespan": 300,
  28. "oauth2DeviceCodeLifespan": 600,
  29. "oauth2DevicePollingInterval": 5,
  30. "enabled": true,
  31. "sslRequired": "external",
  32. "registrationAllowed": true,
  33. "registrationEmailAsUsername": false,
  34. "rememberMe": true,
  35. "verifyEmail": false,
  36. "loginWithEmailAllowed": true,
  37. "duplicateEmailsAllowed": false,
  38. "resetPasswordAllowed": true,
  39. "editUsernameAllowed": false,
  40. "bruteForceProtected": false,
  41. "permanentLockout": false,
  42. "maxTemporaryLockouts": 0,
  43. "bruteForceStrategy": "MULTIPLE",
  44. "maxFailureWaitSeconds": 900,
  45. "minimumQuickLoginWaitSeconds": 60,
  46. "waitIncrementSeconds": 60,
  47. "quickLoginCheckMilliSeconds": 1000,
  48. "maxDeltaTimeSeconds": 43200,
  49. "failureFactor": 30,
  50. "roles": {
  51. "realm": [
  52. {
  53. "id": "a5e74af6-f7bf-4d99-a839-ac2e30e9b595",
  54. "name": "CUSTOMER",
  55. "description": "",
  56. "composite": false,
  57. "clientRole": false,
  58. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  59. "attributes": {}
  60. },
  61. {
  62. "id": "22360598-e9d7-4e98-a566-c5c8f2acba58",
  63. "name": "COURIER",
  64. "description": "",
  65. "composite": false,
  66. "clientRole": false,
  67. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  68. "attributes": {}
  69. },
  70. {
  71. "id": "eb367128-5a18-4612-af8c-1495f515337f",
  72. "name": "uma_authorization",
  73. "description": "${role_uma_authorization}",
  74. "composite": false,
  75. "clientRole": false,
  76. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  77. "attributes": {}
  78. },
  79. {
  80. "id": "2eda92e5-c236-40b2-bf52-a31054e75a4b",
  81. "name": "ADMIN",
  82. "description": "",
  83. "composite": false,
  84. "clientRole": false,
  85. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  86. "attributes": {}
  87. },
  88. {
  89. "id": "554c4233-4d09-456b-a471-d6d86b9d1526",
  90. "name": "default-roles-demo",
  91. "description": "${role_default-roles}",
  92. "composite": true,
  93. "composites": {
  94. "realm": [
  95. "offline_access",
  96. "CUSTOMER",
  97. "uma_authorization"
  98. ],
  99. "client": {
  100. "account": [
  101. "manage-account",
  102. "view-profile"
  103. ]
  104. }
  105. },
  106. "clientRole": false,
  107. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  108. "attributes": {}
  109. },
  110. {
  111. "id": "1eebeddf-5877-4859-9268-a1eec5dc59c1",
  112. "name": "offline_access",
  113. "description": "${role_offline-access}",
  114. "composite": false,
  115. "clientRole": false,
  116. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  117. "attributes": {}
  118. }
  119. ],
  120. "client": {
  121. "realm-management": [
  122. {
  123. "id": "0d752f2a-0a59-4135-b16d-7e9a0cea86df",
  124. "name": "manage-identity-providers",
  125. "description": "${role_manage-identity-providers}",
  126. "composite": false,
  127. "clientRole": true,
  128. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  129. "attributes": {}
  130. },
  131. {
  132. "id": "ee9350fa-9cbc-48f9-ae35-d5f1b81698b2",
  133. "name": "query-groups",
  134. "description": "${role_query-groups}",
  135. "composite": false,
  136. "clientRole": true,
  137. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  138. "attributes": {}
  139. },
  140. {
  141. "id": "f394f330-c13c-406b-8641-cd84cc2902a5",
  142. "name": "query-users",
  143. "description": "${role_query-users}",
  144. "composite": false,
  145. "clientRole": true,
  146. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  147. "attributes": {}
  148. },
  149. {
  150. "id": "56738e8b-0554-4261-b4ed-1947f1d2dc73",
  151. "name": "manage-events",
  152. "description": "${role_manage-events}",
  153. "composite": false,
  154. "clientRole": true,
  155. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  156. "attributes": {}
  157. },
  158. {
  159. "id": "69aee728-1fb9-4968-9fc8-b98b6fa15fea",
  160. "name": "query-clients",
  161. "description": "${role_query-clients}",
  162. "composite": false,
  163. "clientRole": true,
  164. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  165. "attributes": {}
  166. },
  167. {
  168. "id": "c4dd25c0-b3f5-4995-ba3c-83a46b13399f",
  169. "name": "manage-authorization",
  170. "description": "${role_manage-authorization}",
  171. "composite": false,
  172. "clientRole": true,
  173. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  174. "attributes": {}
  175. },
  176. {
  177. "id": "969537df-924c-4b94-8120-8db018391dd1",
  178. "name": "view-clients",
  179. "description": "${role_view-clients}",
  180. "composite": true,
  181. "composites": {
  182. "client": {
  183. "realm-management": [
  184. "query-clients"
  185. ]
  186. }
  187. },
  188. "clientRole": true,
  189. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  190. "attributes": {}
  191. },
  192. {
  193. "id": "7e517f7f-db20-4827-a7f8-574ca31d4798",
  194. "name": "manage-clients",
  195. "description": "${role_manage-clients}",
  196. "composite": false,
  197. "clientRole": true,
  198. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  199. "attributes": {}
  200. },
  201. {
  202. "id": "245d6a27-32e4-4b93-bc5a-d55a0ad9c6a4",
  203. "name": "view-identity-providers",
  204. "description": "${role_view-identity-providers}",
  205. "composite": false,
  206. "clientRole": true,
  207. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  208. "attributes": {}
  209. },
  210. {
  211. "id": "848be7c3-777b-4f9a-beba-65c5c29d5c91",
  212. "name": "realm-admin",
  213. "description": "${role_realm-admin}",
  214. "composite": true,
  215. "composites": {
  216. "client": {
  217. "realm-management": [
  218. "manage-identity-providers",
  219. "query-groups",
  220. "query-users",
  221. "manage-events",
  222. "query-clients",
  223. "manage-authorization",
  224. "view-clients",
  225. "view-identity-providers",
  226. "manage-clients",
  227. "view-authorization",
  228. "manage-users",
  229. "view-events",
  230. "manage-realm",
  231. "query-realms",
  232. "impersonation",
  233. "view-users",
  234. "create-client",
  235. "view-realm"
  236. ]
  237. }
  238. },
  239. "clientRole": true,
  240. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  241. "attributes": {}
  242. },
  243. {
  244. "id": "32a7513d-9f55-47d8-a9c3-57f8388b3956",
  245. "name": "view-authorization",
  246. "description": "${role_view-authorization}",
  247. "composite": false,
  248. "clientRole": true,
  249. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  250. "attributes": {}
  251. },
  252. {
  253. "id": "30f1fd84-3549-4f8e-8cec-2de80e2db2c6",
  254. "name": "manage-users",
  255. "description": "${role_manage-users}",
  256. "composite": false,
  257. "clientRole": true,
  258. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  259. "attributes": {}
  260. },
  261. {
  262. "id": "ba7917a0-3bf1-4fea-8705-bce70a78285c",
  263. "name": "view-events",
  264. "description": "${role_view-events}",
  265. "composite": false,
  266. "clientRole": true,
  267. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  268. "attributes": {}
  269. },
  270. {
  271. "id": "fb705148-295d-4444-a047-491875fedafe",
  272. "name": "manage-realm",
  273. "description": "${role_manage-realm}",
  274. "composite": false,
  275. "clientRole": true,
  276. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  277. "attributes": {}
  278. },
  279. {
  280. "id": "04d7fa95-d76b-4f8d-a359-a5d65c53ca11",
  281. "name": "query-realms",
  282. "description": "${role_query-realms}",
  283. "composite": false,
  284. "clientRole": true,
  285. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  286. "attributes": {}
  287. },
  288. {
  289. "id": "1158ceeb-4ad3-4b36-9220-322f0f5b2796",
  290. "name": "impersonation",
  291. "description": "${role_impersonation}",
  292. "composite": false,
  293. "clientRole": true,
  294. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  295. "attributes": {}
  296. },
  297. {
  298. "id": "5e33082f-a78b-4798-9e93-f334b628c8ef",
  299. "name": "view-users",
  300. "description": "${role_view-users}",
  301. "composite": true,
  302. "composites": {
  303. "client": {
  304. "realm-management": [
  305. "query-groups",
  306. "query-users"
  307. ]
  308. }
  309. },
  310. "clientRole": true,
  311. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  312. "attributes": {}
  313. },
  314. {
  315. "id": "9fea5c85-83d7-4fb5-a6c3-b8f6f03766b8",
  316. "name": "create-client",
  317. "description": "${role_create-client}",
  318. "composite": false,
  319. "clientRole": true,
  320. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  321. "attributes": {}
  322. },
  323. {
  324. "id": "b6a4bedb-2727-4119-9d57-e6ac53533be7",
  325. "name": "view-realm",
  326. "description": "${role_view-realm}",
  327. "composite": false,
  328. "clientRole": true,
  329. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  330. "attributes": {}
  331. }
  332. ],
  333. "security-admin-console": [],
  334. "auth-gateway": [],
  335. "admin-cli": [],
  336. "account-console": [],
  337. "broker": [
  338. {
  339. "id": "e7540012-c5c4-46f7-abbc-2ef82ab3efca",
  340. "name": "read-token",
  341. "description": "${role_read-token}",
  342. "composite": false,
  343. "clientRole": true,
  344. "containerId": "38363b4a-8051-4265-83e7-aefee4ca8392",
  345. "attributes": {}
  346. }
  347. ],
  348. "account": [
  349. {
  350. "id": "efb95449-ef8e-4b28-a6d0-45934c5df1cf",
  351. "name": "manage-account",
  352. "description": "${role_manage-account}",
  353. "composite": true,
  354. "composites": {
  355. "client": {
  356. "account": [
  357. "manage-account-links"
  358. ]
  359. }
  360. },
  361. "clientRole": true,
  362. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  363. "attributes": {}
  364. },
  365. {
  366. "id": "84fcb6f3-dae4-4560-b3fd-2bfaea928bc7",
  367. "name": "manage-account-links",
  368. "description": "${role_manage-account-links}",
  369. "composite": false,
  370. "clientRole": true,
  371. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  372. "attributes": {}
  373. },
  374. {
  375. "id": "ac1f1c48-a463-4eca-b722-9de798babf2f",
  376. "name": "view-consent",
  377. "description": "${role_view-consent}",
  378. "composite": false,
  379. "clientRole": true,
  380. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  381. "attributes": {}
  382. },
  383. {
  384. "id": "9aa188eb-38a1-46dc-a4d3-949a3f2c89de",
  385. "name": "view-groups",
  386. "description": "${role_view-groups}",
  387. "composite": false,
  388. "clientRole": true,
  389. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  390. "attributes": {}
  391. },
  392. {
  393. "id": "b357a260-95e3-47a6-9b20-8e700436c92d",
  394. "name": "delete-account",
  395. "description": "${role_delete-account}",
  396. "composite": false,
  397. "clientRole": true,
  398. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  399. "attributes": {}
  400. },
  401. {
  402. "id": "f841bb71-8424-4a83-8bfb-931b3df9fe27",
  403. "name": "view-applications",
  404. "description": "${role_view-applications}",
  405. "composite": false,
  406. "clientRole": true,
  407. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  408. "attributes": {}
  409. },
  410. {
  411. "id": "ddb11f37-c8d2-4bae-9da9-53ced9896ff5",
  412. "name": "manage-consent",
  413. "description": "${role_manage-consent}",
  414. "composite": true,
  415. "composites": {
  416. "client": {
  417. "account": [
  418. "view-consent"
  419. ]
  420. }
  421. },
  422. "clientRole": true,
  423. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  424. "attributes": {}
  425. },
  426. {
  427. "id": "8036e72f-0dcd-435c-a4e9-e5d59254052b",
  428. "name": "view-profile",
  429. "description": "${role_view-profile}",
  430. "composite": false,
  431. "clientRole": true,
  432. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  433. "attributes": {}
  434. }
  435. ]
  436. }
  437. },
  438. "groups": [],
  439. "defaultRole": {
  440. "id": "554c4233-4d09-456b-a471-d6d86b9d1526",
  441. "name": "default-roles-demo",
  442. "description": "${role_default-roles}",
  443. "composite": true,
  444. "clientRole": false,
  445. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865"
  446. },
  447. "requiredCredentials": [
  448. "password"
  449. ],
  450. "otpPolicyType": "totp",
  451. "otpPolicyAlgorithm": "HmacSHA1",
  452. "otpPolicyInitialCounter": 0,
  453. "otpPolicyDigits": 6,
  454. "otpPolicyLookAheadWindow": 1,
  455. "otpPolicyPeriod": 30,
  456. "otpPolicyCodeReusable": false,
  457. "otpSupportedApplications": [
  458. "totpAppFreeOTPName",
  459. "totpAppGoogleName",
  460. "totpAppMicrosoftAuthenticatorName"
  461. ],
  462. "localizationTexts": {},
  463. "webAuthnPolicyRpEntityName": "keycloak",
  464. "webAuthnPolicySignatureAlgorithms": [
  465. "ES256"
  466. ],
  467. "webAuthnPolicyRpId": "",
  468. "webAuthnPolicyAttestationConveyancePreference": "not specified",
  469. "webAuthnPolicyAuthenticatorAttachment": "not specified",
  470. "webAuthnPolicyRequireResidentKey": "not specified",
  471. "webAuthnPolicyUserVerificationRequirement": "not specified",
  472. "webAuthnPolicyCreateTimeout": 0,
  473. "webAuthnPolicyAvoidSameAuthenticatorRegister": false,
  474. "webAuthnPolicyAcceptableAaguids": [],
  475. "webAuthnPolicyExtraOrigins": [],
  476. "webAuthnPolicyPasswordlessRpEntityName": "keycloak",
  477. "webAuthnPolicyPasswordlessSignatureAlgorithms": [
  478. "ES256"
  479. ],
  480. "webAuthnPolicyPasswordlessRpId": "",
  481. "webAuthnPolicyPasswordlessAttestationConveyancePreference": "not specified",
  482. "webAuthnPolicyPasswordlessAuthenticatorAttachment": "not specified",
  483. "webAuthnPolicyPasswordlessRequireResidentKey": "not specified",
  484. "webAuthnPolicyPasswordlessUserVerificationRequirement": "not specified",
  485. "webAuthnPolicyPasswordlessCreateTimeout": 0,
  486. "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister": false,
  487. "webAuthnPolicyPasswordlessAcceptableAaguids": [],
  488. "webAuthnPolicyPasswordlessExtraOrigins": [],
  489. "scopeMappings": [
  490. {
  491. "clientScope": "offline_access",
  492. "roles": [
  493. "offline_access"
  494. ]
  495. }
  496. ],
  497. "clientScopeMappings": {
  498. "account": [
  499. {
  500. "client": "account-console",
  501. "roles": [
  502. "manage-account",
  503. "view-groups"
  504. ]
  505. }
  506. ]
  507. },
  508. "clients": [
  509. {
  510. "id": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  511. "clientId": "account",
  512. "name": "${client_account}",
  513. "rootUrl": "${authBaseUrl}",
  514. "baseUrl": "/realms/demo/account/",
  515. "surrogateAuthRequired": false,
  516. "enabled": true,
  517. "alwaysDisplayInConsole": false,
  518. "clientAuthenticatorType": "client-secret",
  519. "redirectUris": [
  520. "/realms/demo/account/*"
  521. ],
  522. "webOrigins": [],
  523. "notBefore": 0,
  524. "bearerOnly": false,
  525. "consentRequired": false,
  526. "standardFlowEnabled": true,
  527. "implicitFlowEnabled": false,
  528. "directAccessGrantsEnabled": false,
  529. "serviceAccountsEnabled": false,
  530. "publicClient": true,
  531. "frontchannelLogout": false,
  532. "protocol": "openid-connect",
  533. "attributes": {
  534. "realm_client": "false",
  535. "post.logout.redirect.uris": "+"
  536. },
  537. "authenticationFlowBindingOverrides": {},
  538. "fullScopeAllowed": false,
  539. "nodeReRegistrationTimeout": 0,
  540. "defaultClientScopes": [
  541. "web-origins",
  542. "acr",
  543. "profile",
  544. "roles",
  545. "basic",
  546. "email"
  547. ],
  548. "optionalClientScopes": [
  549. "address",
  550. "phone",
  551. "offline_access",
  552. "microprofile-jwt"
  553. ]
  554. },
  555. {
  556. "id": "f3997272-761b-452f-ab04-f3545773c1e8",
  557. "clientId": "account-console",
  558. "name": "${client_account-console}",
  559. "rootUrl": "${authBaseUrl}",
  560. "baseUrl": "/realms/demo/account/",
  561. "surrogateAuthRequired": false,
  562. "enabled": true,
  563. "alwaysDisplayInConsole": false,
  564. "clientAuthenticatorType": "client-secret",
  565. "redirectUris": [
  566. "/realms/demo/account/*"
  567. ],
  568. "webOrigins": [],
  569. "notBefore": 0,
  570. "bearerOnly": false,
  571. "consentRequired": false,
  572. "standardFlowEnabled": true,
  573. "implicitFlowEnabled": false,
  574. "directAccessGrantsEnabled": false,
  575. "serviceAccountsEnabled": false,
  576. "publicClient": true,
  577. "frontchannelLogout": false,
  578. "protocol": "openid-connect",
  579. "attributes": {
  580. "realm_client": "false",
  581. "post.logout.redirect.uris": "+",
  582. "pkce.code.challenge.method": "S256"
  583. },
  584. "authenticationFlowBindingOverrides": {},
  585. "fullScopeAllowed": false,
  586. "nodeReRegistrationTimeout": 0,
  587. "protocolMappers": [
  588. {
  589. "id": "42f280a1-f189-4fdb-92e2-3fcfb4b0ebcf",
  590. "name": "audience resolve",
  591. "protocol": "openid-connect",
  592. "protocolMapper": "oidc-audience-resolve-mapper",
  593. "consentRequired": false,
  594. "config": {}
  595. }
  596. ],
  597. "defaultClientScopes": [
  598. "web-origins",
  599. "acr",
  600. "profile",
  601. "roles",
  602. "basic",
  603. "email"
  604. ],
  605. "optionalClientScopes": [
  606. "address",
  607. "phone",
  608. "offline_access",
  609. "microprofile-jwt"
  610. ]
  611. },
  612. {
  613. "id": "cfd55a45-7166-4c40-9ada-bdcbec2c6999",
  614. "clientId": "admin-cli",
  615. "name": "${client_admin-cli}",
  616. "surrogateAuthRequired": false,
  617. "enabled": true,
  618. "alwaysDisplayInConsole": false,
  619. "clientAuthenticatorType": "client-secret",
  620. "redirectUris": [],
  621. "webOrigins": [],
  622. "notBefore": 0,
  623. "bearerOnly": false,
  624. "consentRequired": false,
  625. "standardFlowEnabled": false,
  626. "implicitFlowEnabled": false,
  627. "directAccessGrantsEnabled": true,
  628. "serviceAccountsEnabled": false,
  629. "publicClient": true,
  630. "frontchannelLogout": false,
  631. "protocol": "openid-connect",
  632. "attributes": {
  633. "realm_client": "false",
  634. "client.use.lightweight.access.token.enabled": "true",
  635. "post.logout.redirect.uris": "+"
  636. },
  637. "authenticationFlowBindingOverrides": {},
  638. "fullScopeAllowed": true,
  639. "nodeReRegistrationTimeout": 0,
  640. "defaultClientScopes": [
  641. "web-origins",
  642. "acr",
  643. "profile",
  644. "roles",
  645. "basic",
  646. "email"
  647. ],
  648. "optionalClientScopes": [
  649. "address",
  650. "phone",
  651. "offline_access",
  652. "microprofile-jwt"
  653. ]
  654. },
  655. {
  656. "id": "581abb70-3b7f-4004-aa0d-64ba7d8dfc34",
  657. "clientId": "auth-gateway",
  658. "name": "auth-gateway",
  659. "description": "",
  660. "rootUrl": "",
  661. "adminUrl": "",
  662. "baseUrl": "",
  663. "surrogateAuthRequired": false,
  664. "enabled": true,
  665. "alwaysDisplayInConsole": false,
  666. "clientAuthenticatorType": "client-secret",
  667. "secret": "V5JXUTu8QVsXcRfo6jEdw5qbyjLltI6K",
  668. "redirectUris": [
  669. "http://keycloak:8060/login/oauth2/code/*",
  670. "http://localhost:8060/login/oauth2/code/*"
  671. ],
  672. "webOrigins": [
  673. "http://keycloak:8060",
  674. "http://localhost:8060"
  675. ],
  676. "notBefore": 0,
  677. "bearerOnly": false,
  678. "consentRequired": false,
  679. "standardFlowEnabled": true,
  680. "implicitFlowEnabled": false,
  681. "directAccessGrantsEnabled": true,
  682. "serviceAccountsEnabled": false,
  683. "publicClient": false,
  684. "frontchannelLogout": true,
  685. "protocol": "openid-connect",
  686. "attributes": {
  687. "realm_client": "false",
  688. "oidc.ciba.grant.enabled": "false",
  689. "client.secret.creation.time": "1774020712",
  690. "backchannel.logout.session.required": "true",
  691. "post.logout.redirect.uris": "+",
  692. "oauth2.device.authorization.grant.enabled": "false",
  693. "backchannel.logout.revoke.offline.tokens": "false"
  694. },
  695. "authenticationFlowBindingOverrides": {},
  696. "fullScopeAllowed": true,
  697. "nodeReRegistrationTimeout": -1,
  698. "defaultClientScopes": [
  699. "web-origins",
  700. "acr",
  701. "TEST",
  702. "profile",
  703. "roles",
  704. "basic",
  705. "email"
  706. ],
  707. "optionalClientScopes": [
  708. "address",
  709. "phone",
  710. "offline_access",
  711. "microprofile-jwt"
  712. ]
  713. },
  714. {
  715. "id": "38363b4a-8051-4265-83e7-aefee4ca8392",
  716. "clientId": "broker",
  717. "name": "${client_broker}",
  718. "surrogateAuthRequired": false,
  719. "enabled": true,
  720. "alwaysDisplayInConsole": false,
  721. "clientAuthenticatorType": "client-secret",
  722. "redirectUris": [],
  723. "webOrigins": [],
  724. "notBefore": 0,
  725. "bearerOnly": true,
  726. "consentRequired": false,
  727. "standardFlowEnabled": true,
  728. "implicitFlowEnabled": false,
  729. "directAccessGrantsEnabled": false,
  730. "serviceAccountsEnabled": false,
  731. "publicClient": false,
  732. "frontchannelLogout": false,
  733. "protocol": "openid-connect",
  734. "attributes": {
  735. "realm_client": "true",
  736. "post.logout.redirect.uris": "+"
  737. },
  738. "authenticationFlowBindingOverrides": {},
  739. "fullScopeAllowed": false,
  740. "nodeReRegistrationTimeout": 0,
  741. "defaultClientScopes": [
  742. "web-origins",
  743. "acr",
  744. "profile",
  745. "roles",
  746. "email"
  747. ],
  748. "optionalClientScopes": [
  749. "address",
  750. "phone",
  751. "offline_access",
  752. "microprofile-jwt"
  753. ]
  754. },
  755. {
  756. "id": "2955862f-58a5-4d81-b578-6691d707d074",
  757. "clientId": "realm-management",
  758. "name": "${client_realm-management}",
  759. "surrogateAuthRequired": false,
  760. "enabled": true,
  761. "alwaysDisplayInConsole": false,
  762. "clientAuthenticatorType": "client-secret",
  763. "redirectUris": [],
  764. "webOrigins": [],
  765. "notBefore": 0,
  766. "bearerOnly": true,
  767. "consentRequired": false,
  768. "standardFlowEnabled": true,
  769. "implicitFlowEnabled": false,
  770. "directAccessGrantsEnabled": false,
  771. "serviceAccountsEnabled": false,
  772. "publicClient": false,
  773. "frontchannelLogout": false,
  774. "protocol": "openid-connect",
  775. "attributes": {
  776. "realm_client": "true",
  777. "post.logout.redirect.uris": "+"
  778. },
  779. "authenticationFlowBindingOverrides": {},
  780. "fullScopeAllowed": false,
  781. "nodeReRegistrationTimeout": 0,
  782. "defaultClientScopes": [
  783. "web-origins",
  784. "acr",
  785. "profile",
  786. "roles",
  787. "email"
  788. ],
  789. "optionalClientScopes": [
  790. "address",
  791. "phone",
  792. "offline_access",
  793. "microprofile-jwt"
  794. ]
  795. },
  796. {
  797. "id": "1e81f14a-9211-4224-bc7a-16208aa53390",
  798. "clientId": "security-admin-console",
  799. "name": "${client_security-admin-console}",
  800. "rootUrl": "${authAdminUrl}",
  801. "baseUrl": "/admin/demo/console/",
  802. "surrogateAuthRequired": false,
  803. "enabled": true,
  804. "alwaysDisplayInConsole": false,
  805. "clientAuthenticatorType": "client-secret",
  806. "redirectUris": [
  807. "/admin/demo/console/*"
  808. ],
  809. "webOrigins": [
  810. "+"
  811. ],
  812. "notBefore": 0,
  813. "bearerOnly": false,
  814. "consentRequired": false,
  815. "standardFlowEnabled": true,
  816. "implicitFlowEnabled": false,
  817. "directAccessGrantsEnabled": false,
  818. "serviceAccountsEnabled": false,
  819. "publicClient": true,
  820. "frontchannelLogout": false,
  821. "protocol": "openid-connect",
  822. "attributes": {
  823. "realm_client": "false",
  824. "client.use.lightweight.access.token.enabled": "true",
  825. "post.logout.redirect.uris": "+",
  826. "pkce.code.challenge.method": "S256"
  827. },
  828. "authenticationFlowBindingOverrides": {},
  829. "fullScopeAllowed": true,
  830. "nodeReRegistrationTimeout": 0,
  831. "protocolMappers": [
  832. {
  833. "id": "37f7b15a-1ed4-4930-9a5d-c682fe406b70",
  834. "name": "locale",
  835. "protocol": "openid-connect",
  836. "protocolMapper": "oidc-usermodel-attribute-mapper",
  837. "consentRequired": false,
  838. "config": {
  839. "introspection.token.claim": "true",
  840. "userinfo.token.claim": "true",
  841. "user.attribute": "locale",
  842. "id.token.claim": "true",
  843. "access.token.claim": "true",
  844. "claim.name": "locale",
  845. "jsonType.label": "String"
  846. }
  847. }
  848. ],
  849. "defaultClientScopes": [
  850. "web-origins",
  851. "acr",
  852. "profile",
  853. "roles",
  854. "basic",
  855. "email"
  856. ],
  857. "optionalClientScopes": [
  858. "address",
  859. "phone",
  860. "offline_access",
  861. "microprofile-jwt"
  862. ]
  863. }
  864. ],
  865. "clientScopes": [
  866. {
  867. "id": "6006db13-8a86-4189-8236-c463d74e128c",
  868. "name": "email",
  869. "description": "OpenID Connect built-in scope: email",
  870. "protocol": "openid-connect",
  871. "attributes": {
  872. "include.in.token.scope": "true",
  873. "consent.screen.text": "${emailScopeConsentText}",
  874. "display.on.consent.screen": "true"
  875. },
  876. "protocolMappers": [
  877. {
  878. "id": "3348237b-d54c-4992-9ff7-626936d0b1c3",
  879. "name": "email verified",
  880. "protocol": "openid-connect",
  881. "protocolMapper": "oidc-usermodel-property-mapper",
  882. "consentRequired": false,
  883. "config": {
  884. "introspection.token.claim": "true",
  885. "userinfo.token.claim": "true",
  886. "user.attribute": "emailVerified",
  887. "id.token.claim": "true",
  888. "access.token.claim": "true",
  889. "claim.name": "email_verified",
  890. "jsonType.label": "boolean"
  891. }
  892. },
  893. {
  894. "id": "561397a1-6fe1-4910-b2b8-e8a62ddf45ca",
  895. "name": "email",
  896. "protocol": "openid-connect",
  897. "protocolMapper": "oidc-usermodel-attribute-mapper",
  898. "consentRequired": false,
  899. "config": {
  900. "introspection.token.claim": "true",
  901. "userinfo.token.claim": "true",
  902. "user.attribute": "email",
  903. "id.token.claim": "true",
  904. "access.token.claim": "true",
  905. "claim.name": "email",
  906. "jsonType.label": "String"
  907. }
  908. }
  909. ]
  910. },
  911. {
  912. "id": "1220684e-e78d-42b4-9348-2e2de133860f",
  913. "name": "web-origins",
  914. "description": "OpenID Connect scope for add allowed web origins to the access token",
  915. "protocol": "openid-connect",
  916. "attributes": {
  917. "include.in.token.scope": "false",
  918. "consent.screen.text": "",
  919. "display.on.consent.screen": "false"
  920. },
  921. "protocolMappers": [
  922. {
  923. "id": "527b913f-f92e-49c4-be9b-f65391768d60",
  924. "name": "allowed web origins",
  925. "protocol": "openid-connect",
  926. "protocolMapper": "oidc-allowed-origins-mapper",
  927. "consentRequired": false,
  928. "config": {
  929. "introspection.token.claim": "true",
  930. "access.token.claim": "true"
  931. }
  932. }
  933. ]
  934. },
  935. {
  936. "id": "1f0718f5-3780-44db-89ae-03c74a20bbf7",
  937. "name": "service_account",
  938. "description": "Specific scope for a client enabled for service accounts",
  939. "protocol": "openid-connect",
  940. "attributes": {
  941. "include.in.token.scope": "false",
  942. "display.on.consent.screen": "false"
  943. },
  944. "protocolMappers": [
  945. {
  946. "id": "f051c4d6-ef46-4d2a-be31-0d00d8a9af75",
  947. "name": "Client Host",
  948. "protocol": "openid-connect",
  949. "protocolMapper": "oidc-usersessionmodel-note-mapper",
  950. "consentRequired": false,
  951. "config": {
  952. "user.session.note": "clientHost",
  953. "id.token.claim": "true",
  954. "introspection.token.claim": "true",
  955. "access.token.claim": "true",
  956. "claim.name": "clientHost",
  957. "jsonType.label": "String"
  958. }
  959. },
  960. {
  961. "id": "c15d5cb1-ed81-41b1-85c0-06c2ef929280",
  962. "name": "Client ID",
  963. "protocol": "openid-connect",
  964. "protocolMapper": "oidc-usersessionmodel-note-mapper",
  965. "consentRequired": false,
  966. "config": {
  967. "user.session.note": "client_id",
  968. "id.token.claim": "true",
  969. "introspection.token.claim": "true",
  970. "access.token.claim": "true",
  971. "claim.name": "client_id",
  972. "jsonType.label": "String"
  973. }
  974. },
  975. {
  976. "id": "98b21ba6-2243-4c0b-8235-4393d993cca5",
  977. "name": "Client IP Address",
  978. "protocol": "openid-connect",
  979. "protocolMapper": "oidc-usersessionmodel-note-mapper",
  980. "consentRequired": false,
  981. "config": {
  982. "user.session.note": "clientAddress",
  983. "id.token.claim": "true",
  984. "introspection.token.claim": "true",
  985. "access.token.claim": "true",
  986. "claim.name": "clientAddress",
  987. "jsonType.label": "String"
  988. }
  989. }
  990. ]
  991. },
  992. {
  993. "id": "9ad87b4c-7c4e-4b38-b93b-5fbe0d9efde6",
  994. "name": "TEST",
  995. "description": "",
  996. "protocol": "openid-connect",
  997. "attributes": {
  998. "include.in.token.scope": "true",
  999. "display.on.consent.screen": "true",
  1000. "gui.order": "",
  1001. "consent.screen.text": ""
  1002. }
  1003. },
  1004. {
  1005. "id": "64c5d036-700c-4ab1-b559-4ae00fd6adb5",
  1006. "name": "phone",
  1007. "description": "OpenID Connect built-in scope: phone",
  1008. "protocol": "openid-connect",
  1009. "attributes": {
  1010. "include.in.token.scope": "true",
  1011. "consent.screen.text": "${phoneScopeConsentText}",
  1012. "display.on.consent.screen": "true"
  1013. },
  1014. "protocolMappers": [
  1015. {
  1016. "id": "80e568b7-4e46-46a5-8d68-c3229642366b",
  1017. "name": "phone number",
  1018. "protocol": "openid-connect",
  1019. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1020. "consentRequired": false,
  1021. "config": {
  1022. "introspection.token.claim": "true",
  1023. "userinfo.token.claim": "true",
  1024. "user.attribute": "phoneNumber",
  1025. "id.token.claim": "true",
  1026. "access.token.claim": "true",
  1027. "claim.name": "phone_number",
  1028. "jsonType.label": "String"
  1029. }
  1030. },
  1031. {
  1032. "id": "e8a0436f-e6fd-4410-846d-3bd644b7f4b0",
  1033. "name": "phone number verified",
  1034. "protocol": "openid-connect",
  1035. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1036. "consentRequired": false,
  1037. "config": {
  1038. "introspection.token.claim": "true",
  1039. "userinfo.token.claim": "true",
  1040. "user.attribute": "phoneNumberVerified",
  1041. "id.token.claim": "true",
  1042. "access.token.claim": "true",
  1043. "claim.name": "phone_number_verified",
  1044. "jsonType.label": "boolean"
  1045. }
  1046. }
  1047. ]
  1048. },
  1049. {
  1050. "id": "d0657cd1-b78b-4140-8051-8b20369d633c",
  1051. "name": "roles",
  1052. "description": "OpenID Connect scope for add user roles to the access token",
  1053. "protocol": "openid-connect",
  1054. "attributes": {
  1055. "include.in.token.scope": "false",
  1056. "consent.screen.text": "${rolesScopeConsentText}",
  1057. "display.on.consent.screen": "true"
  1058. },
  1059. "protocolMappers": [
  1060. {
  1061. "id": "8962874f-fba2-4d49-b31e-ffa778ed6c2a",
  1062. "name": "audience resolve",
  1063. "protocol": "openid-connect",
  1064. "protocolMapper": "oidc-audience-resolve-mapper",
  1065. "consentRequired": false,
  1066. "config": {
  1067. "introspection.token.claim": "true",
  1068. "access.token.claim": "true"
  1069. }
  1070. },
  1071. {
  1072. "id": "f5a3952f-898a-4871-9eaf-12b54a5c4869",
  1073. "name": "client roles",
  1074. "protocol": "openid-connect",
  1075. "protocolMapper": "oidc-usermodel-client-role-mapper",
  1076. "consentRequired": false,
  1077. "config": {
  1078. "user.attribute": "foo",
  1079. "introspection.token.claim": "true",
  1080. "access.token.claim": "true",
  1081. "claim.name": "resource_access.${client_id}.roles",
  1082. "jsonType.label": "String",
  1083. "multivalued": "true"
  1084. }
  1085. },
  1086. {
  1087. "id": "36ab92f7-fc4f-48ea-80c0-86853c1d1d7a",
  1088. "name": "realm roles",
  1089. "protocol": "openid-connect",
  1090. "protocolMapper": "oidc-usermodel-realm-role-mapper",
  1091. "consentRequired": false,
  1092. "config": {
  1093. "user.attribute": "foo",
  1094. "introspection.token.claim": "true",
  1095. "access.token.claim": "true",
  1096. "claim.name": "realm_access.roles",
  1097. "jsonType.label": "String",
  1098. "multivalued": "true"
  1099. }
  1100. }
  1101. ]
  1102. },
  1103. {
  1104. "id": "14aeb9e4-d546-4a57-a46d-dd198c2e474b",
  1105. "name": "offline_access",
  1106. "description": "OpenID Connect built-in scope: offline_access",
  1107. "protocol": "openid-connect",
  1108. "attributes": {
  1109. "consent.screen.text": "${offlineAccessScopeConsentText}",
  1110. "display.on.consent.screen": "true"
  1111. }
  1112. },
  1113. {
  1114. "id": "75614a06-9fb3-466b-ad1b-09e2c709b713",
  1115. "name": "profile",
  1116. "description": "OpenID Connect built-in scope: profile",
  1117. "protocol": "openid-connect",
  1118. "attributes": {
  1119. "include.in.token.scope": "true",
  1120. "consent.screen.text": "${profileScopeConsentText}",
  1121. "display.on.consent.screen": "true"
  1122. },
  1123. "protocolMappers": [
  1124. {
  1125. "id": "3483780b-dca3-4219-b6aa-3c3eccd89aac",
  1126. "name": "locale",
  1127. "protocol": "openid-connect",
  1128. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1129. "consentRequired": false,
  1130. "config": {
  1131. "introspection.token.claim": "true",
  1132. "userinfo.token.claim": "true",
  1133. "user.attribute": "locale",
  1134. "id.token.claim": "true",
  1135. "access.token.claim": "true",
  1136. "claim.name": "locale",
  1137. "jsonType.label": "String"
  1138. }
  1139. },
  1140. {
  1141. "id": "25757e7d-8344-4e48-8bed-c8581c22f099",
  1142. "name": "nickname",
  1143. "protocol": "openid-connect",
  1144. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1145. "consentRequired": false,
  1146. "config": {
  1147. "introspection.token.claim": "true",
  1148. "userinfo.token.claim": "true",
  1149. "user.attribute": "nickname",
  1150. "id.token.claim": "true",
  1151. "access.token.claim": "true",
  1152. "claim.name": "nickname",
  1153. "jsonType.label": "String"
  1154. }
  1155. },
  1156. {
  1157. "id": "09150a54-8ae2-428b-b146-a76a4a0856e7",
  1158. "name": "gender",
  1159. "protocol": "openid-connect",
  1160. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1161. "consentRequired": false,
  1162. "config": {
  1163. "introspection.token.claim": "true",
  1164. "userinfo.token.claim": "true",
  1165. "user.attribute": "gender",
  1166. "id.token.claim": "true",
  1167. "access.token.claim": "true",
  1168. "claim.name": "gender",
  1169. "jsonType.label": "String"
  1170. }
  1171. },
  1172. {
  1173. "id": "7215834d-485d-4d5d-8fee-808db16615aa",
  1174. "name": "middle name",
  1175. "protocol": "openid-connect",
  1176. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1177. "consentRequired": false,
  1178. "config": {
  1179. "introspection.token.claim": "true",
  1180. "userinfo.token.claim": "true",
  1181. "user.attribute": "middleName",
  1182. "id.token.claim": "true",
  1183. "access.token.claim": "true",
  1184. "claim.name": "middle_name",
  1185. "jsonType.label": "String"
  1186. }
  1187. },
  1188. {
  1189. "id": "befdb28f-e861-40c6-af37-660070b20dfb",
  1190. "name": "profile",
  1191. "protocol": "openid-connect",
  1192. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1193. "consentRequired": false,
  1194. "config": {
  1195. "introspection.token.claim": "true",
  1196. "userinfo.token.claim": "true",
  1197. "user.attribute": "profile",
  1198. "id.token.claim": "true",
  1199. "access.token.claim": "true",
  1200. "claim.name": "profile",
  1201. "jsonType.label": "String"
  1202. }
  1203. },
  1204. {
  1205. "id": "d5cf7d6b-8c44-4839-b6aa-aa96ad04e133",
  1206. "name": "birthdate",
  1207. "protocol": "openid-connect",
  1208. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1209. "consentRequired": false,
  1210. "config": {
  1211. "introspection.token.claim": "true",
  1212. "userinfo.token.claim": "true",
  1213. "user.attribute": "birthdate",
  1214. "id.token.claim": "true",
  1215. "access.token.claim": "true",
  1216. "claim.name": "birthdate",
  1217. "jsonType.label": "String"
  1218. }
  1219. },
  1220. {
  1221. "id": "99146a5f-9437-465f-95b3-c228fd3a9976",
  1222. "name": "given name",
  1223. "protocol": "openid-connect",
  1224. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1225. "consentRequired": false,
  1226. "config": {
  1227. "introspection.token.claim": "true",
  1228. "userinfo.token.claim": "true",
  1229. "user.attribute": "firstName",
  1230. "id.token.claim": "true",
  1231. "access.token.claim": "true",
  1232. "claim.name": "given_name",
  1233. "jsonType.label": "String"
  1234. }
  1235. },
  1236. {
  1237. "id": "7dfa9437-4156-42e8-b5b5-bca8ea52a6fe",
  1238. "name": "zoneinfo",
  1239. "protocol": "openid-connect",
  1240. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1241. "consentRequired": false,
  1242. "config": {
  1243. "introspection.token.claim": "true",
  1244. "userinfo.token.claim": "true",
  1245. "user.attribute": "zoneinfo",
  1246. "id.token.claim": "true",
  1247. "access.token.claim": "true",
  1248. "claim.name": "zoneinfo",
  1249. "jsonType.label": "String"
  1250. }
  1251. },
  1252. {
  1253. "id": "43a7d8a9-0dcd-4fe0-b20a-ebcf48f5a38a",
  1254. "name": "full name",
  1255. "protocol": "openid-connect",
  1256. "protocolMapper": "oidc-full-name-mapper",
  1257. "consentRequired": false,
  1258. "config": {
  1259. "id.token.claim": "true",
  1260. "introspection.token.claim": "true",
  1261. "access.token.claim": "true",
  1262. "userinfo.token.claim": "true"
  1263. }
  1264. },
  1265. {
  1266. "id": "05a01a36-cde8-4f21-828a-1818506b8ce9",
  1267. "name": "family name",
  1268. "protocol": "openid-connect",
  1269. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1270. "consentRequired": false,
  1271. "config": {
  1272. "introspection.token.claim": "true",
  1273. "userinfo.token.claim": "true",
  1274. "user.attribute": "lastName",
  1275. "id.token.claim": "true",
  1276. "access.token.claim": "true",
  1277. "claim.name": "family_name",
  1278. "jsonType.label": "String"
  1279. }
  1280. },
  1281. {
  1282. "id": "2b285d61-96e9-46d9-8277-fb7bc08b343b",
  1283. "name": "picture",
  1284. "protocol": "openid-connect",
  1285. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1286. "consentRequired": false,
  1287. "config": {
  1288. "introspection.token.claim": "true",
  1289. "userinfo.token.claim": "true",
  1290. "user.attribute": "picture",
  1291. "id.token.claim": "true",
  1292. "access.token.claim": "true",
  1293. "claim.name": "picture",
  1294. "jsonType.label": "String"
  1295. }
  1296. },
  1297. {
  1298. "id": "4849894e-dc15-48ee-93e4-6065eebcb558",
  1299. "name": "updated at",
  1300. "protocol": "openid-connect",
  1301. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1302. "consentRequired": false,
  1303. "config": {
  1304. "introspection.token.claim": "true",
  1305. "userinfo.token.claim": "true",
  1306. "user.attribute": "updatedAt",
  1307. "id.token.claim": "true",
  1308. "access.token.claim": "true",
  1309. "claim.name": "updated_at",
  1310. "jsonType.label": "long"
  1311. }
  1312. },
  1313. {
  1314. "id": "0a17ebfb-b3dc-4dbb-8980-c2c3d00ec031",
  1315. "name": "username",
  1316. "protocol": "openid-connect",
  1317. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1318. "consentRequired": false,
  1319. "config": {
  1320. "introspection.token.claim": "true",
  1321. "userinfo.token.claim": "true",
  1322. "user.attribute": "username",
  1323. "id.token.claim": "true",
  1324. "access.token.claim": "true",
  1325. "claim.name": "preferred_username",
  1326. "jsonType.label": "String"
  1327. }
  1328. },
  1329. {
  1330. "id": "f8b125b6-f943-4f9a-a1f3-6d964e79ca77",
  1331. "name": "website",
  1332. "protocol": "openid-connect",
  1333. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1334. "consentRequired": false,
  1335. "config": {
  1336. "introspection.token.claim": "true",
  1337. "userinfo.token.claim": "true",
  1338. "user.attribute": "website",
  1339. "id.token.claim": "true",
  1340. "access.token.claim": "true",
  1341. "claim.name": "website",
  1342. "jsonType.label": "String"
  1343. }
  1344. }
  1345. ]
  1346. },
  1347. {
  1348. "id": "42c32a00-023d-4901-9385-5229261e042b",
  1349. "name": "acr",
  1350. "description": "OpenID Connect scope for add acr (authentication context class reference) to the token",
  1351. "protocol": "openid-connect",
  1352. "attributes": {
  1353. "include.in.token.scope": "false",
  1354. "display.on.consent.screen": "false"
  1355. },
  1356. "protocolMappers": [
  1357. {
  1358. "id": "4ca0063b-e84c-4ade-8198-b98c2af6109b",
  1359. "name": "acr loa level",
  1360. "protocol": "openid-connect",
  1361. "protocolMapper": "oidc-acr-mapper",
  1362. "consentRequired": false,
  1363. "config": {
  1364. "id.token.claim": "true",
  1365. "introspection.token.claim": "true",
  1366. "access.token.claim": "true",
  1367. "userinfo.token.claim": "true"
  1368. }
  1369. }
  1370. ]
  1371. },
  1372. {
  1373. "id": "04d40695-3afe-437c-aac0-a3ad7721048b",
  1374. "name": "microprofile-jwt",
  1375. "description": "Microprofile - JWT built-in scope",
  1376. "protocol": "openid-connect",
  1377. "attributes": {
  1378. "include.in.token.scope": "true",
  1379. "display.on.consent.screen": "false"
  1380. },
  1381. "protocolMappers": [
  1382. {
  1383. "id": "b2b3fa95-9301-4a75-a576-0e0c71872e5e",
  1384. "name": "upn",
  1385. "protocol": "openid-connect",
  1386. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1387. "consentRequired": false,
  1388. "config": {
  1389. "introspection.token.claim": "true",
  1390. "userinfo.token.claim": "true",
  1391. "user.attribute": "username",
  1392. "id.token.claim": "true",
  1393. "access.token.claim": "true",
  1394. "claim.name": "upn",
  1395. "jsonType.label": "String"
  1396. }
  1397. },
  1398. {
  1399. "id": "eb7abecb-09df-445c-a5ac-b906eb84d7ef",
  1400. "name": "groups",
  1401. "protocol": "openid-connect",
  1402. "protocolMapper": "oidc-usermodel-realm-role-mapper",
  1403. "consentRequired": false,
  1404. "config": {
  1405. "introspection.token.claim": "true",
  1406. "multivalued": "true",
  1407. "userinfo.token.claim": "true",
  1408. "user.attribute": "foo",
  1409. "id.token.claim": "true",
  1410. "access.token.claim": "true",
  1411. "claim.name": "groups",
  1412. "jsonType.label": "String"
  1413. }
  1414. }
  1415. ]
  1416. },
  1417. {
  1418. "id": "f8bbbc87-0fea-4cc0-a0cd-5364b03f6016",
  1419. "name": "basic",
  1420. "description": "OpenID Connect scope for add all basic claims to the token",
  1421. "protocol": "openid-connect",
  1422. "attributes": {
  1423. "include.in.token.scope": "false",
  1424. "display.on.consent.screen": "false"
  1425. },
  1426. "protocolMappers": [
  1427. {
  1428. "id": "0fe880c0-6d53-4f39-99a3-7601498d0f4d",
  1429. "name": "auth_time",
  1430. "protocol": "openid-connect",
  1431. "protocolMapper": "oidc-usersessionmodel-note-mapper",
  1432. "consentRequired": false,
  1433. "config": {
  1434. "user.session.note": "AUTH_TIME",
  1435. "id.token.claim": "true",
  1436. "introspection.token.claim": "true",
  1437. "access.token.claim": "true",
  1438. "claim.name": "auth_time",
  1439. "jsonType.label": "long"
  1440. }
  1441. },
  1442. {
  1443. "id": "52a47652-bdbe-44f5-9d02-0d571d2a173c",
  1444. "name": "sub",
  1445. "protocol": "openid-connect",
  1446. "protocolMapper": "oidc-sub-mapper",
  1447. "consentRequired": false,
  1448. "config": {
  1449. "introspection.token.claim": "true",
  1450. "access.token.claim": "true"
  1451. }
  1452. }
  1453. ]
  1454. },
  1455. {
  1456. "id": "1869a902-489a-4ce2-a729-f639b636c651",
  1457. "name": "address",
  1458. "description": "OpenID Connect built-in scope: address",
  1459. "protocol": "openid-connect",
  1460. "attributes": {
  1461. "include.in.token.scope": "true",
  1462. "consent.screen.text": "${addressScopeConsentText}",
  1463. "display.on.consent.screen": "true"
  1464. },
  1465. "protocolMappers": [
  1466. {
  1467. "id": "3b06c0a9-eb82-4aaf-b175-f22f4afe153f",
  1468. "name": "address",
  1469. "protocol": "openid-connect",
  1470. "protocolMapper": "oidc-address-mapper",
  1471. "consentRequired": false,
  1472. "config": {
  1473. "user.attribute.formatted": "formatted",
  1474. "user.attribute.country": "country",
  1475. "introspection.token.claim": "true",
  1476. "user.attribute.postal_code": "postal_code",
  1477. "userinfo.token.claim": "true",
  1478. "user.attribute.street": "street",
  1479. "id.token.claim": "true",
  1480. "user.attribute.region": "region",
  1481. "access.token.claim": "true",
  1482. "user.attribute.locality": "locality"
  1483. }
  1484. }
  1485. ]
  1486. },
  1487. {
  1488. "id": "67b57903-6e9d-4c83-8f2a-84480d701d40",
  1489. "name": "role_list",
  1490. "description": "SAML role list",
  1491. "protocol": "saml",
  1492. "attributes": {
  1493. "consent.screen.text": "${samlRoleListScopeConsentText}",
  1494. "display.on.consent.screen": "true"
  1495. },
  1496. "protocolMappers": [
  1497. {
  1498. "id": "04ca0bb8-f284-48f7-8556-d07682ab20be",
  1499. "name": "role list",
  1500. "protocol": "saml",
  1501. "protocolMapper": "saml-role-list-mapper",
  1502. "consentRequired": false,
  1503. "config": {
  1504. "single": "false",
  1505. "attribute.nameformat": "Basic",
  1506. "attribute.name": "Role"
  1507. }
  1508. }
  1509. ]
  1510. }
  1511. ],
  1512. "defaultDefaultClientScopes": [
  1513. "role_list",
  1514. "profile",
  1515. "email",
  1516. "roles",
  1517. "web-origins",
  1518. "acr",
  1519. "TEST",
  1520. "basic"
  1521. ],
  1522. "defaultOptionalClientScopes": [
  1523. "offline_access",
  1524. "address",
  1525. "phone",
  1526. "microprofile-jwt"
  1527. ],
  1528. "browserSecurityHeaders": {
  1529. "contentSecurityPolicyReportOnly": "",
  1530. "xContentTypeOptions": "nosniff",
  1531. "referrerPolicy": "no-referrer",
  1532. "xRobotsTag": "none",
  1533. "xFrameOptions": "SAMEORIGIN",
  1534. "contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
  1535. "xXSSProtection": "1; mode=block",
  1536. "strictTransportSecurity": "max-age=31536000; includeSubDomains"
  1537. },
  1538. "smtpServer": {},
  1539. "eventsEnabled": false,
  1540. "eventsListeners": [
  1541. "jboss-logging"
  1542. ],
  1543. "enabledEventTypes": [],
  1544. "adminEventsEnabled": false,
  1545. "adminEventsDetailsEnabled": false,
  1546. "identityProviders": [],
  1547. "identityProviderMappers": [],
  1548. "components": {
  1549. "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [
  1550. {
  1551. "id": "a1722568-457c-4de0-b3e5-003fed1d7140",
  1552. "name": "Max Clients Limit",
  1553. "providerId": "max-clients",
  1554. "subType": "anonymous",
  1555. "subComponents": {},
  1556. "config": {
  1557. "max-clients": [
  1558. "200"
  1559. ]
  1560. }
  1561. },
  1562. {
  1563. "id": "55d900ce-adc3-4923-a246-6c4350ce0d63",
  1564. "name": "Allowed Protocol Mapper Types",
  1565. "providerId": "allowed-protocol-mappers",
  1566. "subType": "authenticated",
  1567. "subComponents": {},
  1568. "config": {
  1569. "allowed-protocol-mapper-types": [
  1570. "saml-role-list-mapper",
  1571. "oidc-sha256-pairwise-sub-mapper",
  1572. "saml-user-attribute-mapper",
  1573. "oidc-usermodel-attribute-mapper",
  1574. "oidc-address-mapper",
  1575. "oidc-usermodel-property-mapper",
  1576. "saml-user-property-mapper",
  1577. "oidc-full-name-mapper"
  1578. ]
  1579. }
  1580. },
  1581. {
  1582. "id": "fa9582f0-c4db-47b3-9011-a44708bcd356",
  1583. "name": "Full Scope Disabled",
  1584. "providerId": "scope",
  1585. "subType": "anonymous",
  1586. "subComponents": {},
  1587. "config": {}
  1588. },
  1589. {
  1590. "id": "1df1f757-6d23-4a9e-88e0-c1bd505783e5",
  1591. "name": "Allowed Protocol Mapper Types",
  1592. "providerId": "allowed-protocol-mappers",
  1593. "subType": "anonymous",
  1594. "subComponents": {},
  1595. "config": {
  1596. "allowed-protocol-mapper-types": [
  1597. "oidc-address-mapper",
  1598. "oidc-full-name-mapper",
  1599. "oidc-sha256-pairwise-sub-mapper",
  1600. "saml-user-property-mapper",
  1601. "saml-role-list-mapper",
  1602. "oidc-usermodel-property-mapper",
  1603. "oidc-usermodel-attribute-mapper",
  1604. "saml-user-attribute-mapper"
  1605. ]
  1606. }
  1607. },
  1608. {
  1609. "id": "b666b3a2-3ea5-4e23-946e-51f74be4208e",
  1610. "name": "Consent Required",
  1611. "providerId": "consent-required",
  1612. "subType": "anonymous",
  1613. "subComponents": {},
  1614. "config": {}
  1615. },
  1616. {
  1617. "id": "8d98ef10-96db-418e-98c1-4d49dd0565eb",
  1618. "name": "Allowed Client Scopes",
  1619. "providerId": "allowed-client-templates",
  1620. "subType": "authenticated",
  1621. "subComponents": {},
  1622. "config": {
  1623. "allow-default-scopes": [
  1624. "true"
  1625. ]
  1626. }
  1627. },
  1628. {
  1629. "id": "599ab3a5-3fc2-41a7-ac22-a5bcef69df99",
  1630. "name": "Allowed Client Scopes",
  1631. "providerId": "allowed-client-templates",
  1632. "subType": "anonymous",
  1633. "subComponents": {},
  1634. "config": {
  1635. "allow-default-scopes": [
  1636. "true"
  1637. ]
  1638. }
  1639. },
  1640. {
  1641. "id": "39cc13ca-82d4-4f89-aea7-7c676629537f",
  1642. "name": "Trusted Hosts",
  1643. "providerId": "trusted-hosts",
  1644. "subType": "anonymous",
  1645. "subComponents": {},
  1646. "config": {
  1647. "host-sending-registration-request-must-match": [
  1648. "true"
  1649. ],
  1650. "client-uris-must-match": [
  1651. "true"
  1652. ]
  1653. }
  1654. }
  1655. ],
  1656. "org.keycloak.userprofile.UserProfileProvider": [
  1657. {
  1658. "id": "80f81f0d-782b-47d3-a100-7b254f435549",
  1659. "providerId": "declarative-user-profile",
  1660. "subComponents": {},
  1661. "config": {
  1662. "kc.user.profile.config": [
  1663. "{\"attributes\":[{\"name\":\"username\",\"displayName\":\"${username}\",\"validations\":{\"length\":{\"min\":3,\"max\":255},\"username-prohibited-characters\":{},\"up-username-not-idn-homograph\":{}},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"email\",\"displayName\":\"${email}\",\"validations\":{\"email\":{},\"length\":{\"max\":255}},\"required\":{\"roles\":[\"user\"]},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"firstName\",\"displayName\":\"${firstName}\",\"validations\":{\"length\":{\"max\":255},\"person-name-prohibited-characters\":{}},\"required\":{\"roles\":[\"user\"]},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"lastName\",\"displayName\":\"${lastName}\",\"validations\":{\"length\":{\"max\":255},\"person-name-prohibited-characters\":{}},\"required\":{\"roles\":[\"user\"]},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"phoneNumber\",\"displayName\":\"${phoneNumber}\",\"validations\":{\"pattern\":{\"pattern\":\"^\\\\+48\\\\d{9}$\",\"error-message\":\"\"}},\"annotations\":{},\"required\":{\"roles\":[\"user\"]},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false}],\"groups\":[{\"name\":\"user-metadata\",\"displayHeader\":\"User metadata\",\"displayDescription\":\"Attributes, which refer to user metadata\"}],\"unmanagedAttributePolicy\":\"ENABLED\"}"
  1664. ]
  1665. }
  1666. }
  1667. ],
  1668. "org.keycloak.keys.KeyProvider": [
  1669. {
  1670. "id": "57d769b5-0e13-4f2b-980c-60e9ca3e201f",
  1671. "name": "aes-generated",
  1672. "providerId": "aes-generated",
  1673. "subComponents": {},
  1674. "config": {
  1675. "priority": [
  1676. "100"
  1677. ]
  1678. }
  1679. },
  1680. {
  1681. "id": "48af13b1-4d23-420a-9805-c459aac7fc18",
  1682. "name": "rsa-enc-generated",
  1683. "providerId": "rsa-enc-generated",
  1684. "subComponents": {},
  1685. "config": {
  1686. "priority": [
  1687. "100"
  1688. ],
  1689. "algorithm": [
  1690. "RSA-OAEP"
  1691. ]
  1692. }
  1693. },
  1694. {
  1695. "id": "b52512d8-f584-4f8a-b3ef-9925f76cc7b3",
  1696. "name": "hmac-generated",
  1697. "providerId": "hmac-generated",
  1698. "subComponents": {},
  1699. "config": {
  1700. "priority": [
  1701. "100"
  1702. ],
  1703. "algorithm": [
  1704. "HS256"
  1705. ]
  1706. }
  1707. },
  1708. {
  1709. "id": "b9a4ffb2-caae-473b-adb3-ede9c572616b",
  1710. "name": "hmac-generated-hs512",
  1711. "providerId": "hmac-generated",
  1712. "subComponents": {},
  1713. "config": {
  1714. "priority": [
  1715. "100"
  1716. ],
  1717. "algorithm": [
  1718. "HS512"
  1719. ]
  1720. }
  1721. },
  1722. {
  1723. "id": "9fb248d0-ba13-4113-a2f2-a2779ff61de7",
  1724. "name": "rsa-generated",
  1725. "providerId": "rsa-generated",
  1726. "subComponents": {},
  1727. "config": {
  1728. "priority": [
  1729. "100"
  1730. ]
  1731. }
  1732. }
  1733. ]
  1734. },
  1735. "internationalizationEnabled": false,
  1736. "authenticationFlows": [
  1737. {
  1738. "id": "a903d1d7-07b3-4730-b1f3-9d881ea2f742",
  1739. "alias": "Account verification options",
  1740. "description": "Method with which to verity the existing account",
  1741. "providerId": "basic-flow",
  1742. "topLevel": false,
  1743. "builtIn": true,
  1744. "authenticationExecutions": [
  1745. {
  1746. "authenticator": "idp-email-verification",
  1747. "authenticatorFlow": false,
  1748. "requirement": "ALTERNATIVE",
  1749. "priority": 10,
  1750. "autheticatorFlow": false,
  1751. "userSetupAllowed": false
  1752. },
  1753. {
  1754. "authenticatorFlow": true,
  1755. "requirement": "ALTERNATIVE",
  1756. "priority": 20,
  1757. "autheticatorFlow": true,
  1758. "flowAlias": "Verify Existing Account by Re-authentication",
  1759. "userSetupAllowed": false
  1760. }
  1761. ]
  1762. },
  1763. {
  1764. "id": "0c4d7019-ea94-435c-aad3-e854ff527e18",
  1765. "alias": "Browser - Conditional OTP",
  1766. "description": "Flow to determine if the OTP is required for the authentication",
  1767. "providerId": "basic-flow",
  1768. "topLevel": false,
  1769. "builtIn": true,
  1770. "authenticationExecutions": [
  1771. {
  1772. "authenticator": "conditional-user-configured",
  1773. "authenticatorFlow": false,
  1774. "requirement": "REQUIRED",
  1775. "priority": 10,
  1776. "autheticatorFlow": false,
  1777. "userSetupAllowed": false
  1778. },
  1779. {
  1780. "authenticator": "auth-otp-form",
  1781. "authenticatorFlow": false,
  1782. "requirement": "REQUIRED",
  1783. "priority": 20,
  1784. "autheticatorFlow": false,
  1785. "userSetupAllowed": false
  1786. }
  1787. ]
  1788. },
  1789. {
  1790. "id": "057e72ec-efcc-4fe5-a80c-409d4578f7d6",
  1791. "alias": "Direct Grant - Conditional OTP",
  1792. "description": "Flow to determine if the OTP is required for the authentication",
  1793. "providerId": "basic-flow",
  1794. "topLevel": false,
  1795. "builtIn": true,
  1796. "authenticationExecutions": [
  1797. {
  1798. "authenticator": "conditional-user-configured",
  1799. "authenticatorFlow": false,
  1800. "requirement": "REQUIRED",
  1801. "priority": 10,
  1802. "autheticatorFlow": false,
  1803. "userSetupAllowed": false
  1804. },
  1805. {
  1806. "authenticator": "direct-grant-validate-otp",
  1807. "authenticatorFlow": false,
  1808. "requirement": "REQUIRED",
  1809. "priority": 20,
  1810. "autheticatorFlow": false,
  1811. "userSetupAllowed": false
  1812. }
  1813. ]
  1814. },
  1815. {
  1816. "id": "53e01b53-e68d-4d0b-a349-0737cd6984f2",
  1817. "alias": "First broker login - Conditional OTP",
  1818. "description": "Flow to determine if the OTP is required for the authentication",
  1819. "providerId": "basic-flow",
  1820. "topLevel": false,
  1821. "builtIn": true,
  1822. "authenticationExecutions": [
  1823. {
  1824. "authenticator": "conditional-user-configured",
  1825. "authenticatorFlow": false,
  1826. "requirement": "REQUIRED",
  1827. "priority": 10,
  1828. "autheticatorFlow": false,
  1829. "userSetupAllowed": false
  1830. },
  1831. {
  1832. "authenticator": "auth-otp-form",
  1833. "authenticatorFlow": false,
  1834. "requirement": "REQUIRED",
  1835. "priority": 20,
  1836. "autheticatorFlow": false,
  1837. "userSetupAllowed": false
  1838. }
  1839. ]
  1840. },
  1841. {
  1842. "id": "72e8b90b-1efc-4a4b-aa3f-dbbec5115900",
  1843. "alias": "Handle Existing Account",
  1844. "description": "Handle what to do if there is existing account with same email/username like authenticated identity provider",
  1845. "providerId": "basic-flow",
  1846. "topLevel": false,
  1847. "builtIn": true,
  1848. "authenticationExecutions": [
  1849. {
  1850. "authenticator": "idp-confirm-link",
  1851. "authenticatorFlow": false,
  1852. "requirement": "REQUIRED",
  1853. "priority": 10,
  1854. "autheticatorFlow": false,
  1855. "userSetupAllowed": false
  1856. },
  1857. {
  1858. "authenticatorFlow": true,
  1859. "requirement": "REQUIRED",
  1860. "priority": 20,
  1861. "autheticatorFlow": true,
  1862. "flowAlias": "Account verification options",
  1863. "userSetupAllowed": false
  1864. }
  1865. ]
  1866. },
  1867. {
  1868. "id": "c236bba7-8ca3-4cec-8fb4-ba93e840a97e",
  1869. "alias": "Reset - Conditional OTP",
  1870. "description": "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.",
  1871. "providerId": "basic-flow",
  1872. "topLevel": false,
  1873. "builtIn": true,
  1874. "authenticationExecutions": [
  1875. {
  1876. "authenticator": "conditional-user-configured",
  1877. "authenticatorFlow": false,
  1878. "requirement": "REQUIRED",
  1879. "priority": 10,
  1880. "autheticatorFlow": false,
  1881. "userSetupAllowed": false
  1882. },
  1883. {
  1884. "authenticator": "reset-otp",
  1885. "authenticatorFlow": false,
  1886. "requirement": "REQUIRED",
  1887. "priority": 20,
  1888. "autheticatorFlow": false,
  1889. "userSetupAllowed": false
  1890. }
  1891. ]
  1892. },
  1893. {
  1894. "id": "ee6d6b7f-5f92-4b54-9571-5c439ddcdc33",
  1895. "alias": "User creation or linking",
  1896. "description": "Flow for the existing/non-existing user alternatives",
  1897. "providerId": "basic-flow",
  1898. "topLevel": false,
  1899. "builtIn": true,
  1900. "authenticationExecutions": [
  1901. {
  1902. "authenticatorConfig": "create unique user config",
  1903. "authenticator": "idp-create-user-if-unique",
  1904. "authenticatorFlow": false,
  1905. "requirement": "ALTERNATIVE",
  1906. "priority": 10,
  1907. "autheticatorFlow": false,
  1908. "userSetupAllowed": false
  1909. },
  1910. {
  1911. "authenticatorFlow": true,
  1912. "requirement": "ALTERNATIVE",
  1913. "priority": 20,
  1914. "autheticatorFlow": true,
  1915. "flowAlias": "Handle Existing Account",
  1916. "userSetupAllowed": false
  1917. }
  1918. ]
  1919. },
  1920. {
  1921. "id": "6f5063e3-6d12-4a20-8965-f13c4b168606",
  1922. "alias": "Verify Existing Account by Re-authentication",
  1923. "description": "Reauthentication of existing account",
  1924. "providerId": "basic-flow",
  1925. "topLevel": false,
  1926. "builtIn": true,
  1927. "authenticationExecutions": [
  1928. {
  1929. "authenticator": "idp-username-password-form",
  1930. "authenticatorFlow": false,
  1931. "requirement": "REQUIRED",
  1932. "priority": 10,
  1933. "autheticatorFlow": false,
  1934. "userSetupAllowed": false
  1935. },
  1936. {
  1937. "authenticatorFlow": true,
  1938. "requirement": "CONDITIONAL",
  1939. "priority": 20,
  1940. "autheticatorFlow": true,
  1941. "flowAlias": "First broker login - Conditional OTP",
  1942. "userSetupAllowed": false
  1943. }
  1944. ]
  1945. },
  1946. {
  1947. "id": "1117d64a-95d6-4e0a-9a63-321ef04b67f8",
  1948. "alias": "browser",
  1949. "description": "browser based authentication",
  1950. "providerId": "basic-flow",
  1951. "topLevel": true,
  1952. "builtIn": true,
  1953. "authenticationExecutions": [
  1954. {
  1955. "authenticator": "auth-cookie",
  1956. "authenticatorFlow": false,
  1957. "requirement": "ALTERNATIVE",
  1958. "priority": 10,
  1959. "autheticatorFlow": false,
  1960. "userSetupAllowed": false
  1961. },
  1962. {
  1963. "authenticator": "auth-spnego",
  1964. "authenticatorFlow": false,
  1965. "requirement": "DISABLED",
  1966. "priority": 20,
  1967. "autheticatorFlow": false,
  1968. "userSetupAllowed": false
  1969. },
  1970. {
  1971. "authenticator": "identity-provider-redirector",
  1972. "authenticatorFlow": false,
  1973. "requirement": "ALTERNATIVE",
  1974. "priority": 25,
  1975. "autheticatorFlow": false,
  1976. "userSetupAllowed": false
  1977. },
  1978. {
  1979. "authenticatorFlow": true,
  1980. "requirement": "ALTERNATIVE",
  1981. "priority": 30,
  1982. "autheticatorFlow": true,
  1983. "flowAlias": "forms",
  1984. "userSetupAllowed": false
  1985. }
  1986. ]
  1987. },
  1988. {
  1989. "id": "db0d6bb6-6a59-490e-8b20-5f5884d3e26e",
  1990. "alias": "clients",
  1991. "description": "Base authentication for clients",
  1992. "providerId": "client-flow",
  1993. "topLevel": true,
  1994. "builtIn": true,
  1995. "authenticationExecutions": [
  1996. {
  1997. "authenticator": "client-secret",
  1998. "authenticatorFlow": false,
  1999. "requirement": "ALTERNATIVE",
  2000. "priority": 10,
  2001. "autheticatorFlow": false,
  2002. "userSetupAllowed": false
  2003. },
  2004. {
  2005. "authenticator": "client-jwt",
  2006. "authenticatorFlow": false,
  2007. "requirement": "ALTERNATIVE",
  2008. "priority": 20,
  2009. "autheticatorFlow": false,
  2010. "userSetupAllowed": false
  2011. },
  2012. {
  2013. "authenticator": "client-secret-jwt",
  2014. "authenticatorFlow": false,
  2015. "requirement": "ALTERNATIVE",
  2016. "priority": 30,
  2017. "autheticatorFlow": false,
  2018. "userSetupAllowed": false
  2019. },
  2020. {
  2021. "authenticator": "client-x509",
  2022. "authenticatorFlow": false,
  2023. "requirement": "ALTERNATIVE",
  2024. "priority": 40,
  2025. "autheticatorFlow": false,
  2026. "userSetupAllowed": false
  2027. }
  2028. ]
  2029. },
  2030. {
  2031. "id": "178a973b-8f03-4160-aeee-63d40a812df5",
  2032. "alias": "direct grant",
  2033. "description": "OpenID Connect Resource Owner Grant",
  2034. "providerId": "basic-flow",
  2035. "topLevel": true,
  2036. "builtIn": true,
  2037. "authenticationExecutions": [
  2038. {
  2039. "authenticator": "direct-grant-validate-username",
  2040. "authenticatorFlow": false,
  2041. "requirement": "REQUIRED",
  2042. "priority": 10,
  2043. "autheticatorFlow": false,
  2044. "userSetupAllowed": false
  2045. },
  2046. {
  2047. "authenticator": "direct-grant-validate-password",
  2048. "authenticatorFlow": false,
  2049. "requirement": "REQUIRED",
  2050. "priority": 20,
  2051. "autheticatorFlow": false,
  2052. "userSetupAllowed": false
  2053. },
  2054. {
  2055. "authenticatorFlow": true,
  2056. "requirement": "CONDITIONAL",
  2057. "priority": 30,
  2058. "autheticatorFlow": true,
  2059. "flowAlias": "Direct Grant - Conditional OTP",
  2060. "userSetupAllowed": false
  2061. }
  2062. ]
  2063. },
  2064. {
  2065. "id": "c7d05645-3228-473e-8df4-623dd6472f7d",
  2066. "alias": "docker auth",
  2067. "description": "Used by Docker clients to authenticate against the IDP",
  2068. "providerId": "basic-flow",
  2069. "topLevel": true,
  2070. "builtIn": true,
  2071. "authenticationExecutions": [
  2072. {
  2073. "authenticator": "docker-http-basic-authenticator",
  2074. "authenticatorFlow": false,
  2075. "requirement": "REQUIRED",
  2076. "priority": 10,
  2077. "autheticatorFlow": false,
  2078. "userSetupAllowed": false
  2079. }
  2080. ]
  2081. },
  2082. {
  2083. "id": "bb266296-26f7-4e36-8062-ec60571d4b47",
  2084. "alias": "first broker login",
  2085. "description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
  2086. "providerId": "basic-flow",
  2087. "topLevel": true,
  2088. "builtIn": true,
  2089. "authenticationExecutions": [
  2090. {
  2091. "authenticatorConfig": "review profile config",
  2092. "authenticator": "idp-review-profile",
  2093. "authenticatorFlow": false,
  2094. "requirement": "REQUIRED",
  2095. "priority": 10,
  2096. "autheticatorFlow": false,
  2097. "userSetupAllowed": false
  2098. },
  2099. {
  2100. "authenticatorFlow": true,
  2101. "requirement": "REQUIRED",
  2102. "priority": 20,
  2103. "autheticatorFlow": true,
  2104. "flowAlias": "User creation or linking",
  2105. "userSetupAllowed": false
  2106. }
  2107. ]
  2108. },
  2109. {
  2110. "id": "1810e955-c81f-466a-9f71-bff67a7eb64f",
  2111. "alias": "forms",
  2112. "description": "Username, password, otp and other auth forms.",
  2113. "providerId": "basic-flow",
  2114. "topLevel": false,
  2115. "builtIn": true,
  2116. "authenticationExecutions": [
  2117. {
  2118. "authenticator": "auth-username-password-form",
  2119. "authenticatorFlow": false,
  2120. "requirement": "REQUIRED",
  2121. "priority": 10,
  2122. "autheticatorFlow": false,
  2123. "userSetupAllowed": false
  2124. },
  2125. {
  2126. "authenticatorFlow": true,
  2127. "requirement": "CONDITIONAL",
  2128. "priority": 20,
  2129. "autheticatorFlow": true,
  2130. "flowAlias": "Browser - Conditional OTP",
  2131. "userSetupAllowed": false
  2132. }
  2133. ]
  2134. },
  2135. {
  2136. "id": "8e4d4765-c94d-42f0-b933-daf4014e9142",
  2137. "alias": "registration",
  2138. "description": "registration flow",
  2139. "providerId": "basic-flow",
  2140. "topLevel": true,
  2141. "builtIn": true,
  2142. "authenticationExecutions": [
  2143. {
  2144. "authenticator": "registration-page-form",
  2145. "authenticatorFlow": true,
  2146. "requirement": "REQUIRED",
  2147. "priority": 10,
  2148. "autheticatorFlow": true,
  2149. "flowAlias": "registration form",
  2150. "userSetupAllowed": false
  2151. }
  2152. ]
  2153. },
  2154. {
  2155. "id": "f0f3b9b2-1eae-47da-982b-1c0fb3cdb516",
  2156. "alias": "registration form",
  2157. "description": "registration form",
  2158. "providerId": "form-flow",
  2159. "topLevel": false,
  2160. "builtIn": true,
  2161. "authenticationExecutions": [
  2162. {
  2163. "authenticator": "registration-user-creation",
  2164. "authenticatorFlow": false,
  2165. "requirement": "REQUIRED",
  2166. "priority": 20,
  2167. "autheticatorFlow": false,
  2168. "userSetupAllowed": false
  2169. },
  2170. {
  2171. "authenticator": "registration-password-action",
  2172. "authenticatorFlow": false,
  2173. "requirement": "REQUIRED",
  2174. "priority": 50,
  2175. "autheticatorFlow": false,
  2176. "userSetupAllowed": false
  2177. },
  2178. {
  2179. "authenticator": "registration-recaptcha-action",
  2180. "authenticatorFlow": false,
  2181. "requirement": "DISABLED",
  2182. "priority": 60,
  2183. "autheticatorFlow": false,
  2184. "userSetupAllowed": false
  2185. }
  2186. ]
  2187. },
  2188. {
  2189. "id": "4a5fc767-449a-491e-927c-8917be81b92f",
  2190. "alias": "reset credentials",
  2191. "description": "Reset credentials for a user if they forgot their password or something",
  2192. "providerId": "basic-flow",
  2193. "topLevel": true,
  2194. "builtIn": true,
  2195. "authenticationExecutions": [
  2196. {
  2197. "authenticator": "reset-credentials-choose-user",
  2198. "authenticatorFlow": false,
  2199. "requirement": "REQUIRED",
  2200. "priority": 10,
  2201. "autheticatorFlow": false,
  2202. "userSetupAllowed": false
  2203. },
  2204. {
  2205. "authenticator": "reset-credential-email",
  2206. "authenticatorFlow": false,
  2207. "requirement": "REQUIRED",
  2208. "priority": 20,
  2209. "autheticatorFlow": false,
  2210. "userSetupAllowed": false
  2211. },
  2212. {
  2213. "authenticator": "reset-password",
  2214. "authenticatorFlow": false,
  2215. "requirement": "REQUIRED",
  2216. "priority": 30,
  2217. "autheticatorFlow": false,
  2218. "userSetupAllowed": false
  2219. },
  2220. {
  2221. "authenticatorFlow": true,
  2222. "requirement": "CONDITIONAL",
  2223. "priority": 40,
  2224. "autheticatorFlow": true,
  2225. "flowAlias": "Reset - Conditional OTP",
  2226. "userSetupAllowed": false
  2227. }
  2228. ]
  2229. },
  2230. {
  2231. "id": "ed0b5d6e-9633-4d71-bcd2-01c7bbaf84df",
  2232. "alias": "saml ecp",
  2233. "description": "SAML ECP Profile Authentication Flow",
  2234. "providerId": "basic-flow",
  2235. "topLevel": true,
  2236. "builtIn": true,
  2237. "authenticationExecutions": [
  2238. {
  2239. "authenticator": "http-basic-authenticator",
  2240. "authenticatorFlow": false,
  2241. "requirement": "REQUIRED",
  2242. "priority": 10,
  2243. "autheticatorFlow": false,
  2244. "userSetupAllowed": false
  2245. }
  2246. ]
  2247. }
  2248. ],
  2249. "authenticatorConfig": [
  2250. {
  2251. "id": "7cee3b79-8aaf-4514-8349-f55577dd13f8",
  2252. "alias": "create unique user config",
  2253. "config": {
  2254. "require.password.update.after.registration": "false"
  2255. }
  2256. },
  2257. {
  2258. "id": "79ff2c77-922f-40e7-9b70-f0dbb71aa4eb",
  2259. "alias": "review profile config",
  2260. "config": {
  2261. "update.profile.on.first.login": "missing"
  2262. }
  2263. }
  2264. ],
  2265. "requiredActions": [
  2266. {
  2267. "alias": "CONFIGURE_TOTP",
  2268. "name": "Configure OTP",
  2269. "providerId": "CONFIGURE_TOTP",
  2270. "enabled": true,
  2271. "defaultAction": false,
  2272. "priority": 10,
  2273. "config": {}
  2274. },
  2275. {
  2276. "alias": "TERMS_AND_CONDITIONS",
  2277. "name": "Terms and Conditions",
  2278. "providerId": "TERMS_AND_CONDITIONS",
  2279. "enabled": false,
  2280. "defaultAction": false,
  2281. "priority": 20,
  2282. "config": {}
  2283. },
  2284. {
  2285. "alias": "UPDATE_PASSWORD",
  2286. "name": "Update Password",
  2287. "providerId": "UPDATE_PASSWORD",
  2288. "enabled": true,
  2289. "defaultAction": false,
  2290. "priority": 30,
  2291. "config": {}
  2292. },
  2293. {
  2294. "alias": "UPDATE_PROFILE",
  2295. "name": "Update Profile",
  2296. "providerId": "UPDATE_PROFILE",
  2297. "enabled": true,
  2298. "defaultAction": false,
  2299. "priority": 40,
  2300. "config": {}
  2301. },
  2302. {
  2303. "alias": "VERIFY_EMAIL",
  2304. "name": "Verify Email",
  2305. "providerId": "VERIFY_EMAIL",
  2306. "enabled": true,
  2307. "defaultAction": false,
  2308. "priority": 50,
  2309. "config": {}
  2310. },
  2311. {
  2312. "alias": "delete_account",
  2313. "name": "Delete Account",
  2314. "providerId": "delete_account",
  2315. "enabled": false,
  2316. "defaultAction": false,
  2317. "priority": 60,
  2318. "config": {}
  2319. },
  2320. {
  2321. "alias": "webauthn-register",
  2322. "name": "Webauthn Register",
  2323. "providerId": "webauthn-register",
  2324. "enabled": true,
  2325. "defaultAction": false,
  2326. "priority": 70,
  2327. "config": {}
  2328. },
  2329. {
  2330. "alias": "webauthn-register-passwordless",
  2331. "name": "Webauthn Register Passwordless",
  2332. "providerId": "webauthn-register-passwordless",
  2333. "enabled": true,
  2334. "defaultAction": false,
  2335. "priority": 80,
  2336. "config": {}
  2337. },
  2338. {
  2339. "alias": "delete_credential",
  2340. "name": "Delete Credential",
  2341. "providerId": "delete_credential",
  2342. "enabled": true,
  2343. "defaultAction": false,
  2344. "priority": 110,
  2345. "config": {}
  2346. },
  2347. {
  2348. "alias": "idp_link",
  2349. "name": "Linking Identity Provider",
  2350. "providerId": "idp_link",
  2351. "enabled": true,
  2352. "defaultAction": false,
  2353. "priority": 120,
  2354. "config": {}
  2355. },
  2356. {
  2357. "alias": "update_user_locale",
  2358. "name": "Update User Locale",
  2359. "providerId": "update_user_locale",
  2360. "enabled": true,
  2361. "defaultAction": false,
  2362. "priority": 1000,
  2363. "config": {}
  2364. }
  2365. ],
  2366. "browserFlow": "browser",
  2367. "registrationFlow": "registration",
  2368. "directGrantFlow": "direct grant",
  2369. "resetCredentialsFlow": "reset credentials",
  2370. "clientAuthenticationFlow": "clients",
  2371. "dockerAuthenticationFlow": "docker auth",
  2372. "firstBrokerLoginFlow": "first broker login",
  2373. "attributes": {
  2374. "cibaBackchannelTokenDeliveryMode": "poll",
  2375. "cibaAuthRequestedUserHint": "login_hint",
  2376. "clientOfflineSessionMaxLifespan": "0",
  2377. "oauth2DevicePollingInterval": "5",
  2378. "clientSessionIdleTimeout": "0",
  2379. "clientOfflineSessionIdleTimeout": "0",
  2380. "cibaInterval": "5",
  2381. "realmReusableOtpCode": "false",
  2382. "cibaExpiresIn": "120",
  2383. "oauth2DeviceCodeLifespan": "600",
  2384. "parRequestUriLifespan": "60",
  2385. "clientSessionMaxLifespan": "0",
  2386. "frontendUrl": "",
  2387. "acr.loa.map": "{}"
  2388. },
  2389. "keycloakVersion": "26.5.6",
  2390. "userManagedAccessAllowed": false,
  2391. "organizationsEnabled": false,
  2392. "verifiableCredentialsEnabled": false,
  2393. "adminPermissionsEnabled": false,
  2394. "clientProfiles": {
  2395. "profiles": []
  2396. },
  2397. "clientPolicies": {
  2398. "policies": []
  2399. }
  2400. }