realm-export.json 191 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628
  1. {
  2. "id": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  3. "realm": "boat-delivery-realm",
  4. "displayName": "Boat Delivery",
  5. "displayNameHtml": "Boat Delivery",
  6. "notBefore": 0,
  7. "defaultSignatureAlgorithm": "RS256",
  8. "revokeRefreshToken": false,
  9. "refreshTokenMaxReuse": 0,
  10. "accessTokenLifespan": 300,
  11. "accessTokenLifespanForImplicitFlow": 900,
  12. "ssoSessionIdleTimeout": 1800,
  13. "ssoSessionMaxLifespan": 36000,
  14. "ssoSessionIdleTimeoutRememberMe": 0,
  15. "ssoSessionMaxLifespanRememberMe": 0,
  16. "offlineSessionIdleTimeout": 2592000,
  17. "offlineSessionMaxLifespanEnabled": false,
  18. "offlineSessionMaxLifespan": 5184000,
  19. "clientSessionIdleTimeout": 0,
  20. "clientSessionMaxLifespan": 0,
  21. "clientOfflineSessionIdleTimeout": 0,
  22. "clientOfflineSessionMaxLifespan": 0,
  23. "accessCodeLifespan": 60,
  24. "accessCodeLifespanUserAction": 300,
  25. "accessCodeLifespanLogin": 1800,
  26. "actionTokenGeneratedByAdminLifespan": 43200,
  27. "actionTokenGeneratedByUserLifespan": 300,
  28. "oauth2DeviceCodeLifespan": 600,
  29. "oauth2DevicePollingInterval": 5,
  30. "enabled": true,
  31. "sslRequired": "external",
  32. "registrationAllowed": true,
  33. "registrationEmailAsUsername": false,
  34. "rememberMe": true,
  35. "verifyEmail": true,
  36. "loginWithEmailAllowed": true,
  37. "duplicateEmailsAllowed": false,
  38. "resetPasswordAllowed": true,
  39. "editUsernameAllowed": false,
  40. "bruteForceProtected": false,
  41. "permanentLockout": false,
  42. "maxTemporaryLockouts": 0,
  43. "bruteForceStrategy": "MULTIPLE",
  44. "maxFailureWaitSeconds": 900,
  45. "minimumQuickLoginWaitSeconds": 60,
  46. "waitIncrementSeconds": 60,
  47. "quickLoginCheckMilliSeconds": 1000,
  48. "maxDeltaTimeSeconds": 43200,
  49. "failureFactor": 30,
  50. "passwordPolicy": "length(8) and upperCase(1) and lowerCase(1) and digits(1)",
  51. "roles": {
  52. "realm": [
  53. {
  54. "id": "a5e74af6-f7bf-4d99-a839-ac2e30e9b595",
  55. "name": "CUSTOMER",
  56. "description": "",
  57. "composite": false,
  58. "clientRole": false,
  59. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  60. "attributes": {
  61. }
  62. },
  63. {
  64. "id": "22360598-e9d7-4e98-a566-c5c8f2acba58",
  65. "name": "COURIER",
  66. "description": "",
  67. "composite": false,
  68. "clientRole": false,
  69. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  70. "attributes": {
  71. }
  72. },
  73. {
  74. "id": "eb367128-5a18-4612-af8c-1495f515337f",
  75. "name": "uma_authorization",
  76. "description": "${role_uma_authorization}",
  77. "composite": false,
  78. "clientRole": false,
  79. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  80. "attributes": {
  81. }
  82. },
  83. {
  84. "id": "2eda92e5-c236-40b2-bf52-a31054e75a4b",
  85. "name": "ADMIN",
  86. "description": "",
  87. "composite": false,
  88. "clientRole": false,
  89. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  90. "attributes": {
  91. }
  92. },
  93. {
  94. "id": "554c4233-4d09-456b-a471-d6d86b9d1526",
  95. "name": "default-roles-demo",
  96. "description": "${role_default-roles}",
  97. "composite": true,
  98. "composites": {
  99. "realm": [
  100. "offline_access",
  101. "uma_authorization"
  102. ],
  103. "client": {
  104. "account": [
  105. "manage-account",
  106. "view-profile"
  107. ]
  108. }
  109. },
  110. "clientRole": false,
  111. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  112. "attributes": {
  113. }
  114. },
  115. {
  116. "id": "1eebeddf-5877-4859-9268-a1eec5dc59c1",
  117. "name": "offline_access",
  118. "description": "${role_offline-access}",
  119. "composite": false,
  120. "clientRole": false,
  121. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865",
  122. "attributes": {
  123. }
  124. }
  125. ],
  126. "client": {
  127. "realm-management": [
  128. {
  129. "id": "0d752f2a-0a59-4135-b16d-7e9a0cea86df",
  130. "name": "manage-identity-providers",
  131. "description": "${role_manage-identity-providers}",
  132. "composite": false,
  133. "clientRole": true,
  134. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  135. "attributes": {
  136. }
  137. },
  138. {
  139. "id": "ee9350fa-9cbc-48f9-ae35-d5f1b81698b2",
  140. "name": "query-groups",
  141. "description": "${role_query-groups}",
  142. "composite": false,
  143. "clientRole": true,
  144. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  145. "attributes": {
  146. }
  147. },
  148. {
  149. "id": "f394f330-c13c-406b-8641-cd84cc2902a5",
  150. "name": "query-users",
  151. "description": "${role_query-users}",
  152. "composite": false,
  153. "clientRole": true,
  154. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  155. "attributes": {
  156. }
  157. },
  158. {
  159. "id": "56738e8b-0554-4261-b4ed-1947f1d2dc73",
  160. "name": "manage-events",
  161. "description": "${role_manage-events}",
  162. "composite": false,
  163. "clientRole": true,
  164. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  165. "attributes": {
  166. }
  167. },
  168. {
  169. "id": "69aee728-1fb9-4968-9fc8-b98b6fa15fea",
  170. "name": "query-clients",
  171. "description": "${role_query-clients}",
  172. "composite": false,
  173. "clientRole": true,
  174. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  175. "attributes": {
  176. }
  177. },
  178. {
  179. "id": "c4dd25c0-b3f5-4995-ba3c-83a46b13399f",
  180. "name": "manage-authorization",
  181. "description": "${role_manage-authorization}",
  182. "composite": false,
  183. "clientRole": true,
  184. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  185. "attributes": {
  186. }
  187. },
  188. {
  189. "id": "969537df-924c-4b94-8120-8db018391dd1",
  190. "name": "view-clients",
  191. "description": "${role_view-clients}",
  192. "composite": true,
  193. "composites": {
  194. "client": {
  195. "realm-management": [
  196. "query-clients"
  197. ]
  198. }
  199. },
  200. "clientRole": true,
  201. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  202. "attributes": {
  203. }
  204. },
  205. {
  206. "id": "7e517f7f-db20-4827-a7f8-574ca31d4798",
  207. "name": "manage-clients",
  208. "description": "${role_manage-clients}",
  209. "composite": false,
  210. "clientRole": true,
  211. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  212. "attributes": {
  213. }
  214. },
  215. {
  216. "id": "245d6a27-32e4-4b93-bc5a-d55a0ad9c6a4",
  217. "name": "view-identity-providers",
  218. "description": "${role_view-identity-providers}",
  219. "composite": false,
  220. "clientRole": true,
  221. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  222. "attributes": {
  223. }
  224. },
  225. {
  226. "id": "848be7c3-777b-4f9a-beba-65c5c29d5c91",
  227. "name": "realm-admin",
  228. "description": "${role_realm-admin}",
  229. "composite": true,
  230. "composites": {
  231. "client": {
  232. "realm-management": [
  233. "manage-identity-providers",
  234. "query-groups",
  235. "query-users",
  236. "manage-events",
  237. "query-clients",
  238. "manage-authorization",
  239. "view-clients",
  240. "view-identity-providers",
  241. "manage-clients",
  242. "view-authorization",
  243. "manage-users",
  244. "view-events",
  245. "manage-realm",
  246. "query-realms",
  247. "impersonation",
  248. "view-users",
  249. "create-client",
  250. "view-realm"
  251. ]
  252. }
  253. },
  254. "clientRole": true,
  255. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  256. "attributes": {
  257. }
  258. },
  259. {
  260. "id": "32a7513d-9f55-47d8-a9c3-57f8388b3956",
  261. "name": "view-authorization",
  262. "description": "${role_view-authorization}",
  263. "composite": false,
  264. "clientRole": true,
  265. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  266. "attributes": {
  267. }
  268. },
  269. {
  270. "id": "30f1fd84-3549-4f8e-8cec-2de80e2db2c6",
  271. "name": "manage-users",
  272. "description": "${role_manage-users}",
  273. "composite": false,
  274. "clientRole": true,
  275. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  276. "attributes": {
  277. }
  278. },
  279. {
  280. "id": "ba7917a0-3bf1-4fea-8705-bce70a78285c",
  281. "name": "view-events",
  282. "description": "${role_view-events}",
  283. "composite": false,
  284. "clientRole": true,
  285. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  286. "attributes": {
  287. }
  288. },
  289. {
  290. "id": "fb705148-295d-4444-a047-491875fedafe",
  291. "name": "manage-realm",
  292. "description": "${role_manage-realm}",
  293. "composite": false,
  294. "clientRole": true,
  295. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  296. "attributes": {
  297. }
  298. },
  299. {
  300. "id": "04d7fa95-d76b-4f8d-a359-a5d65c53ca11",
  301. "name": "query-realms",
  302. "description": "${role_query-realms}",
  303. "composite": false,
  304. "clientRole": true,
  305. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  306. "attributes": {
  307. }
  308. },
  309. {
  310. "id": "1158ceeb-4ad3-4b36-9220-322f0f5b2796",
  311. "name": "impersonation",
  312. "description": "${role_impersonation}",
  313. "composite": false,
  314. "clientRole": true,
  315. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  316. "attributes": {
  317. }
  318. },
  319. {
  320. "id": "5e33082f-a78b-4798-9e93-f334b628c8ef",
  321. "name": "view-users",
  322. "description": "${role_view-users}",
  323. "composite": true,
  324. "composites": {
  325. "client": {
  326. "realm-management": [
  327. "query-groups",
  328. "query-users"
  329. ]
  330. }
  331. },
  332. "clientRole": true,
  333. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  334. "attributes": {
  335. }
  336. },
  337. {
  338. "id": "9fea5c85-83d7-4fb5-a6c3-b8f6f03766b8",
  339. "name": "create-client",
  340. "description": "${role_create-client}",
  341. "composite": false,
  342. "clientRole": true,
  343. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  344. "attributes": {
  345. }
  346. },
  347. {
  348. "id": "b6a4bedb-2727-4119-9d57-e6ac53533be7",
  349. "name": "view-realm",
  350. "description": "${role_view-realm}",
  351. "composite": false,
  352. "clientRole": true,
  353. "containerId": "2955862f-58a5-4d81-b578-6691d707d074",
  354. "attributes": {
  355. }
  356. }
  357. ],
  358. "security-admin-console": [
  359. ],
  360. "auth-gateway": [
  361. ],
  362. "admin-cli": [
  363. ],
  364. "account-console": [
  365. ],
  366. "broker": [
  367. {
  368. "id": "e7540012-c5c4-46f7-abbc-2ef82ab3efca",
  369. "name": "read-token",
  370. "description": "${role_read-token}",
  371. "composite": false,
  372. "clientRole": true,
  373. "containerId": "38363b4a-8051-4265-83e7-aefee4ca8392",
  374. "attributes": {
  375. }
  376. }
  377. ],
  378. "account": [
  379. {
  380. "id": "efb95449-ef8e-4b28-a6d0-45934c5df1cf",
  381. "name": "manage-account",
  382. "description": "${role_manage-account}",
  383. "composite": true,
  384. "composites": {
  385. "client": {
  386. "account": [
  387. "manage-account-links"
  388. ]
  389. }
  390. },
  391. "clientRole": true,
  392. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  393. "attributes": {
  394. }
  395. },
  396. {
  397. "id": "84fcb6f3-dae4-4560-b3fd-2bfaea928bc7",
  398. "name": "manage-account-links",
  399. "description": "${role_manage-account-links}",
  400. "composite": false,
  401. "clientRole": true,
  402. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  403. "attributes": {
  404. }
  405. },
  406. {
  407. "id": "ac1f1c48-a463-4eca-b722-9de798babf2f",
  408. "name": "view-consent",
  409. "description": "${role_view-consent}",
  410. "composite": false,
  411. "clientRole": true,
  412. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  413. "attributes": {
  414. }
  415. },
  416. {
  417. "id": "9aa188eb-38a1-46dc-a4d3-949a3f2c89de",
  418. "name": "view-groups",
  419. "description": "${role_view-groups}",
  420. "composite": false,
  421. "clientRole": true,
  422. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  423. "attributes": {
  424. }
  425. },
  426. {
  427. "id": "b357a260-95e3-47a6-9b20-8e700436c92d",
  428. "name": "delete-account",
  429. "description": "${role_delete-account}",
  430. "composite": false,
  431. "clientRole": true,
  432. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  433. "attributes": {
  434. }
  435. },
  436. {
  437. "id": "f841bb71-8424-4a83-8bfb-931b3df9fe27",
  438. "name": "view-applications",
  439. "description": "${role_view-applications}",
  440. "composite": false,
  441. "clientRole": true,
  442. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  443. "attributes": {
  444. }
  445. },
  446. {
  447. "id": "ddb11f37-c8d2-4bae-9da9-53ced9896ff5",
  448. "name": "manage-consent",
  449. "description": "${role_manage-consent}",
  450. "composite": true,
  451. "composites": {
  452. "client": {
  453. "account": [
  454. "view-consent"
  455. ]
  456. }
  457. },
  458. "clientRole": true,
  459. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  460. "attributes": {
  461. }
  462. },
  463. {
  464. "id": "8036e72f-0dcd-435c-a4e9-e5d59254052b",
  465. "name": "view-profile",
  466. "description": "${role_view-profile}",
  467. "composite": false,
  468. "clientRole": true,
  469. "containerId": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  470. "attributes": {
  471. }
  472. }
  473. ]
  474. }
  475. },
  476. "groups": [
  477. ],
  478. "defaultRole": {
  479. "id": "554c4233-4d09-456b-a471-d6d86b9d1526",
  480. "name": "default-roles-demo",
  481. "description": "${role_default-roles}",
  482. "composite": true,
  483. "clientRole": false,
  484. "containerId": "4f9e1112-f254-4f70-a92e-cbe3e8d98865"
  485. },
  486. "requiredCredentials": [
  487. "password"
  488. ],
  489. "otpPolicyType": "totp",
  490. "otpPolicyAlgorithm": "HmacSHA1",
  491. "otpPolicyInitialCounter": 0,
  492. "otpPolicyDigits": 6,
  493. "otpPolicyLookAheadWindow": 1,
  494. "otpPolicyPeriod": 30,
  495. "otpPolicyCodeReusable": false,
  496. "otpSupportedApplications": [
  497. "totpAppFreeOTPName",
  498. "totpAppGoogleName",
  499. "totpAppMicrosoftAuthenticatorName"
  500. ],
  501. "localizationTexts": {
  502. },
  503. "webAuthnPolicyRpEntityName": "keycloak",
  504. "webAuthnPolicySignatureAlgorithms": [
  505. "ES256"
  506. ],
  507. "webAuthnPolicyRpId": "",
  508. "webAuthnPolicyAttestationConveyancePreference": "not specified",
  509. "webAuthnPolicyAuthenticatorAttachment": "not specified",
  510. "webAuthnPolicyRequireResidentKey": "not specified",
  511. "webAuthnPolicyUserVerificationRequirement": "not specified",
  512. "webAuthnPolicyCreateTimeout": 0,
  513. "webAuthnPolicyAvoidSameAuthenticatorRegister": false,
  514. "webAuthnPolicyAcceptableAaguids": [
  515. ],
  516. "webAuthnPolicyExtraOrigins": [
  517. ],
  518. "webAuthnPolicyPasswordlessRpEntityName": "keycloak",
  519. "webAuthnPolicyPasswordlessSignatureAlgorithms": [
  520. "ES256"
  521. ],
  522. "webAuthnPolicyPasswordlessRpId": "",
  523. "webAuthnPolicyPasswordlessAttestationConveyancePreference": "not specified",
  524. "webAuthnPolicyPasswordlessAuthenticatorAttachment": "not specified",
  525. "webAuthnPolicyPasswordlessRequireResidentKey": "not specified",
  526. "webAuthnPolicyPasswordlessUserVerificationRequirement": "not specified",
  527. "webAuthnPolicyPasswordlessCreateTimeout": 0,
  528. "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister": false,
  529. "webAuthnPolicyPasswordlessAcceptableAaguids": [
  530. ],
  531. "webAuthnPolicyPasswordlessExtraOrigins": [
  532. ],
  533. "scopeMappings": [
  534. {
  535. "clientScope": "offline_access",
  536. "roles": [
  537. "offline_access"
  538. ]
  539. }
  540. ],
  541. "clientScopeMappings": {
  542. "account": [
  543. {
  544. "client": "account-console",
  545. "roles": [
  546. "manage-account",
  547. "view-groups"
  548. ]
  549. }
  550. ]
  551. },
  552. "clients": [
  553. {
  554. "id": "89655faf-3735-4dc2-b91b-cae6c4d09d8f",
  555. "clientId": "account",
  556. "name": "${client_account}",
  557. "rootUrl": "${authBaseUrl}",
  558. "baseUrl": "/realms/demo/account/",
  559. "surrogateAuthRequired": false,
  560. "enabled": true,
  561. "alwaysDisplayInConsole": false,
  562. "clientAuthenticatorType": "client-secret",
  563. "redirectUris": [
  564. "/realms/demo/account/*"
  565. ],
  566. "webOrigins": [
  567. ],
  568. "notBefore": 0,
  569. "bearerOnly": false,
  570. "consentRequired": false,
  571. "standardFlowEnabled": true,
  572. "implicitFlowEnabled": false,
  573. "directAccessGrantsEnabled": false,
  574. "serviceAccountsEnabled": false,
  575. "publicClient": true,
  576. "frontchannelLogout": false,
  577. "protocol": "openid-connect",
  578. "attributes": {
  579. "realm_client": "false",
  580. "post.logout.redirect.uris": "+"
  581. },
  582. "authenticationFlowBindingOverrides": {
  583. },
  584. "fullScopeAllowed": false,
  585. "nodeReRegistrationTimeout": 0,
  586. "defaultClientScopes": [
  587. "web-origins",
  588. "acr",
  589. "profile",
  590. "roles",
  591. "basic",
  592. "email"
  593. ],
  594. "optionalClientScopes": [
  595. "address",
  596. "phone",
  597. "offline_access",
  598. "microprofile-jwt"
  599. ]
  600. },
  601. {
  602. "id": "f3997272-761b-452f-ab04-f3545773c1e8",
  603. "clientId": "account-console",
  604. "name": "${client_account-console}",
  605. "rootUrl": "${authBaseUrl}",
  606. "baseUrl": "/realms/demo/account/",
  607. "surrogateAuthRequired": false,
  608. "enabled": true,
  609. "alwaysDisplayInConsole": false,
  610. "clientAuthenticatorType": "client-secret",
  611. "redirectUris": [
  612. "/realms/demo/account/*"
  613. ],
  614. "webOrigins": [
  615. ],
  616. "notBefore": 0,
  617. "bearerOnly": false,
  618. "consentRequired": false,
  619. "standardFlowEnabled": true,
  620. "implicitFlowEnabled": false,
  621. "directAccessGrantsEnabled": false,
  622. "serviceAccountsEnabled": false,
  623. "publicClient": true,
  624. "frontchannelLogout": false,
  625. "protocol": "openid-connect",
  626. "attributes": {
  627. "realm_client": "false",
  628. "post.logout.redirect.uris": "+",
  629. "pkce.code.challenge.method": "S256"
  630. },
  631. "authenticationFlowBindingOverrides": {
  632. },
  633. "fullScopeAllowed": false,
  634. "nodeReRegistrationTimeout": 0,
  635. "protocolMappers": [
  636. {
  637. "id": "42f280a1-f189-4fdb-92e2-3fcfb4b0ebcf",
  638. "name": "audience resolve",
  639. "protocol": "openid-connect",
  640. "protocolMapper": "oidc-audience-resolve-mapper",
  641. "consentRequired": false,
  642. "config": {
  643. }
  644. }
  645. ],
  646. "defaultClientScopes": [
  647. "web-origins",
  648. "acr",
  649. "profile",
  650. "roles",
  651. "basic",
  652. "email"
  653. ],
  654. "optionalClientScopes": [
  655. "address",
  656. "phone",
  657. "offline_access",
  658. "microprofile-jwt"
  659. ]
  660. },
  661. {
  662. "id": "cfd55a45-7166-4c40-9ada-bdcbec2c6999",
  663. "clientId": "admin-cli",
  664. "name": "${client_admin-cli}",
  665. "surrogateAuthRequired": false,
  666. "enabled": true,
  667. "alwaysDisplayInConsole": false,
  668. "clientAuthenticatorType": "client-secret",
  669. "redirectUris": [
  670. ],
  671. "webOrigins": [
  672. ],
  673. "notBefore": 0,
  674. "bearerOnly": false,
  675. "consentRequired": false,
  676. "standardFlowEnabled": false,
  677. "implicitFlowEnabled": false,
  678. "directAccessGrantsEnabled": true,
  679. "serviceAccountsEnabled": false,
  680. "publicClient": true,
  681. "frontchannelLogout": false,
  682. "protocol": "openid-connect",
  683. "attributes": {
  684. "realm_client": "false",
  685. "client.use.lightweight.access.token.enabled": "true",
  686. "post.logout.redirect.uris": "+"
  687. },
  688. "authenticationFlowBindingOverrides": {
  689. },
  690. "fullScopeAllowed": true,
  691. "nodeReRegistrationTimeout": 0,
  692. "defaultClientScopes": [
  693. "web-origins",
  694. "acr",
  695. "profile",
  696. "roles",
  697. "basic",
  698. "email"
  699. ],
  700. "optionalClientScopes": [
  701. "address",
  702. "phone",
  703. "offline_access",
  704. "microprofile-jwt"
  705. ]
  706. },
  707. {
  708. "id": "581abb70-3b7f-4004-aa0d-64ba7d8dfc34",
  709. "clientId": "auth-gateway",
  710. "name": "auth-gateway",
  711. "description": "",
  712. "rootUrl": "",
  713. "adminUrl": "",
  714. "baseUrl": "",
  715. "surrogateAuthRequired": false,
  716. "enabled": true,
  717. "alwaysDisplayInConsole": false,
  718. "clientAuthenticatorType": "client-secret-basic",
  719. "secret": "ENabIdvbZEy9a7stSPjhFlbeWpPQLpZj",
  720. "redirectUris": [
  721. "http://localhost:8080/login/oauth2/code/*",
  722. "http://localhost:5173",
  723. "http://localhost:5173/*",
  724. "http://127.0.0.1:5173",
  725. "http://127.0.0.1:5173/*",
  726. "http://localhost:5173/profile"
  727. ],
  728. "webOrigins": [
  729. "http://localhost:8080",
  730. "http://localhost:5173",
  731. "http://127.0.0.1:5173"
  732. ],
  733. "notBefore": 0,
  734. "bearerOnly": false,
  735. "consentRequired": false,
  736. "standardFlowEnabled": true,
  737. "implicitFlowEnabled": false,
  738. "directAccessGrantsEnabled": false,
  739. "serviceAccountsEnabled": false,
  740. "publicClient": true,
  741. "frontchannelLogout": true,
  742. "protocol": "openid-connect",
  743. "attributes": {
  744. "realm_client": "false",
  745. "logout.confirmation.enabled": "false",
  746. "oidc.ciba.grant.enabled": "false",
  747. "client.secret.creation.time": "1774020712",
  748. "backchannel.logout.session.required": "true",
  749. "standard.token.exchange.enabled": "false",
  750. "post.logout.redirect.uris": "http://localhost:5173/",
  751. "frontchannel.logout.session.required": "true",
  752. "oauth2.device.authorization.grant.enabled": "false",
  753. "display.on.consent.screen": "false",
  754. "backchannel.logout.revoke.offline.tokens": "false",
  755. "dpop.bound.access.tokens": "false"
  756. },
  757. "authenticationFlowBindingOverrides": {
  758. },
  759. "fullScopeAllowed": true,
  760. "nodeReRegistrationTimeout": -1,
  761. "defaultClientScopes": [
  762. "web-origins",
  763. "acr",
  764. "TEST",
  765. "profile",
  766. "roles",
  767. "basic",
  768. "email",
  769. "phone"
  770. ],
  771. "optionalClientScopes": [
  772. "address",
  773. "offline_access",
  774. "microprofile-jwt"
  775. ]
  776. },
  777. {
  778. "id": "38363b4a-8051-4265-83e7-aefee4ca8392",
  779. "clientId": "broker",
  780. "name": "${client_broker}",
  781. "surrogateAuthRequired": false,
  782. "enabled": true,
  783. "alwaysDisplayInConsole": false,
  784. "clientAuthenticatorType": "client-secret",
  785. "redirectUris": [
  786. ],
  787. "webOrigins": [
  788. ],
  789. "notBefore": 0,
  790. "bearerOnly": true,
  791. "consentRequired": false,
  792. "standardFlowEnabled": true,
  793. "implicitFlowEnabled": false,
  794. "directAccessGrantsEnabled": false,
  795. "serviceAccountsEnabled": false,
  796. "publicClient": false,
  797. "frontchannelLogout": false,
  798. "protocol": "openid-connect",
  799. "attributes": {
  800. "realm_client": "true",
  801. "post.logout.redirect.uris": "+"
  802. },
  803. "authenticationFlowBindingOverrides": {
  804. },
  805. "fullScopeAllowed": false,
  806. "nodeReRegistrationTimeout": 0,
  807. "defaultClientScopes": [
  808. "web-origins",
  809. "acr",
  810. "profile",
  811. "roles",
  812. "email"
  813. ],
  814. "optionalClientScopes": [
  815. "address",
  816. "phone",
  817. "offline_access",
  818. "microprofile-jwt"
  819. ]
  820. },
  821. {
  822. "id": "2955862f-58a5-4d81-b578-6691d707d074",
  823. "clientId": "realm-management",
  824. "name": "${client_realm-management}",
  825. "surrogateAuthRequired": false,
  826. "enabled": true,
  827. "alwaysDisplayInConsole": false,
  828. "clientAuthenticatorType": "client-secret",
  829. "redirectUris": [
  830. ],
  831. "webOrigins": [
  832. ],
  833. "notBefore": 0,
  834. "bearerOnly": true,
  835. "consentRequired": false,
  836. "standardFlowEnabled": true,
  837. "implicitFlowEnabled": false,
  838. "directAccessGrantsEnabled": false,
  839. "serviceAccountsEnabled": false,
  840. "publicClient": false,
  841. "frontchannelLogout": false,
  842. "protocol": "openid-connect",
  843. "attributes": {
  844. "realm_client": "true",
  845. "post.logout.redirect.uris": "+"
  846. },
  847. "authenticationFlowBindingOverrides": {
  848. },
  849. "fullScopeAllowed": false,
  850. "nodeReRegistrationTimeout": 0,
  851. "defaultClientScopes": [
  852. "web-origins",
  853. "acr",
  854. "profile",
  855. "roles",
  856. "email"
  857. ],
  858. "optionalClientScopes": [
  859. "address",
  860. "phone",
  861. "offline_access",
  862. "microprofile-jwt"
  863. ]
  864. },
  865. {
  866. "id": "1e81f14a-9211-4224-bc7a-16208aa53390",
  867. "clientId": "security-admin-console",
  868. "name": "${client_security-admin-console}",
  869. "rootUrl": "${authAdminUrl}",
  870. "baseUrl": "/admin/demo/console/",
  871. "surrogateAuthRequired": false,
  872. "enabled": true,
  873. "alwaysDisplayInConsole": false,
  874. "clientAuthenticatorType": "client-secret",
  875. "redirectUris": [
  876. "/admin/demo/console/*"
  877. ],
  878. "webOrigins": [
  879. "+"
  880. ],
  881. "notBefore": 0,
  882. "bearerOnly": false,
  883. "consentRequired": false,
  884. "standardFlowEnabled": true,
  885. "implicitFlowEnabled": false,
  886. "directAccessGrantsEnabled": false,
  887. "serviceAccountsEnabled": false,
  888. "publicClient": true,
  889. "frontchannelLogout": false,
  890. "protocol": "openid-connect",
  891. "attributes": {
  892. "realm_client": "false",
  893. "client.use.lightweight.access.token.enabled": "true",
  894. "post.logout.redirect.uris": "+",
  895. "pkce.code.challenge.method": "S256"
  896. },
  897. "authenticationFlowBindingOverrides": {
  898. },
  899. "fullScopeAllowed": true,
  900. "nodeReRegistrationTimeout": 0,
  901. "protocolMappers": [
  902. {
  903. "id": "37f7b15a-1ed4-4930-9a5d-c682fe406b70",
  904. "name": "locale",
  905. "protocol": "openid-connect",
  906. "protocolMapper": "oidc-usermodel-attribute-mapper",
  907. "consentRequired": false,
  908. "config": {
  909. "introspection.token.claim": "true",
  910. "userinfo.token.claim": "true",
  911. "user.attribute": "locale",
  912. "id.token.claim": "true",
  913. "access.token.claim": "true",
  914. "claim.name": "locale",
  915. "jsonType.label": "String"
  916. }
  917. }
  918. ],
  919. "defaultClientScopes": [
  920. "web-origins",
  921. "acr",
  922. "profile",
  923. "roles",
  924. "basic",
  925. "email"
  926. ],
  927. "optionalClientScopes": [
  928. "address",
  929. "phone",
  930. "offline_access",
  931. "microprofile-jwt"
  932. ]
  933. }
  934. ],
  935. "clientScopes": [
  936. {
  937. "id": "6006db13-8a86-4189-8236-c463d74e128c",
  938. "name": "email",
  939. "description": "OpenID Connect built-in scope: email",
  940. "protocol": "openid-connect",
  941. "attributes": {
  942. "include.in.token.scope": "true",
  943. "consent.screen.text": "${emailScopeConsentText}",
  944. "display.on.consent.screen": "true"
  945. },
  946. "protocolMappers": [
  947. {
  948. "id": "3348237b-d54c-4992-9ff7-626936d0b1c3",
  949. "name": "email verified",
  950. "protocol": "openid-connect",
  951. "protocolMapper": "oidc-usermodel-property-mapper",
  952. "consentRequired": false,
  953. "config": {
  954. "introspection.token.claim": "true",
  955. "userinfo.token.claim": "true",
  956. "user.attribute": "emailVerified",
  957. "id.token.claim": "true",
  958. "access.token.claim": "true",
  959. "claim.name": "email_verified",
  960. "jsonType.label": "boolean"
  961. }
  962. },
  963. {
  964. "id": "561397a1-6fe1-4910-b2b8-e8a62ddf45ca",
  965. "name": "email",
  966. "protocol": "openid-connect",
  967. "protocolMapper": "oidc-usermodel-attribute-mapper",
  968. "consentRequired": false,
  969. "config": {
  970. "introspection.token.claim": "true",
  971. "userinfo.token.claim": "true",
  972. "user.attribute": "email",
  973. "id.token.claim": "true",
  974. "access.token.claim": "true",
  975. "claim.name": "email",
  976. "jsonType.label": "String"
  977. }
  978. }
  979. ]
  980. },
  981. {
  982. "id": "1220684e-e78d-42b4-9348-2e2de133860f",
  983. "name": "web-origins",
  984. "description": "OpenID Connect scope for add allowed web origins to the access token",
  985. "protocol": "openid-connect",
  986. "attributes": {
  987. "include.in.token.scope": "false",
  988. "consent.screen.text": "",
  989. "display.on.consent.screen": "false"
  990. },
  991. "protocolMappers": [
  992. {
  993. "id": "527b913f-f92e-49c4-be9b-f65391768d60",
  994. "name": "allowed web origins",
  995. "protocol": "openid-connect",
  996. "protocolMapper": "oidc-allowed-origins-mapper",
  997. "consentRequired": false,
  998. "config": {
  999. "introspection.token.claim": "true",
  1000. "access.token.claim": "true"
  1001. }
  1002. }
  1003. ]
  1004. },
  1005. {
  1006. "id": "1f0718f5-3780-44db-89ae-03c74a20bbf7",
  1007. "name": "service_account",
  1008. "description": "Specific scope for a client enabled for service accounts",
  1009. "protocol": "openid-connect",
  1010. "attributes": {
  1011. "include.in.token.scope": "false",
  1012. "display.on.consent.screen": "false"
  1013. },
  1014. "protocolMappers": [
  1015. {
  1016. "id": "f051c4d6-ef46-4d2a-be31-0d00d8a9af75",
  1017. "name": "Client Host",
  1018. "protocol": "openid-connect",
  1019. "protocolMapper": "oidc-usersessionmodel-note-mapper",
  1020. "consentRequired": false,
  1021. "config": {
  1022. "user.session.note": "clientHost",
  1023. "introspection.token.claim": "true",
  1024. "userinfo.token.claim": "true",
  1025. "id.token.claim": "true",
  1026. "access.token.claim": "true",
  1027. "claim.name": "clientHost",
  1028. "jsonType.label": "String"
  1029. }
  1030. },
  1031. {
  1032. "id": "c15d5cb1-ed81-41b1-85c0-06c2ef929280",
  1033. "name": "Client ID",
  1034. "protocol": "openid-connect",
  1035. "protocolMapper": "oidc-usersessionmodel-note-mapper",
  1036. "consentRequired": false,
  1037. "config": {
  1038. "user.session.note": "client_id",
  1039. "introspection.token.claim": "true",
  1040. "userinfo.token.claim": "true",
  1041. "id.token.claim": "true",
  1042. "access.token.claim": "true",
  1043. "claim.name": "client_id",
  1044. "jsonType.label": "String"
  1045. }
  1046. },
  1047. {
  1048. "id": "98b21ba6-2243-4c0b-8235-4393d993cca5",
  1049. "name": "Client IP Address",
  1050. "protocol": "openid-connect",
  1051. "protocolMapper": "oidc-usersessionmodel-note-mapper",
  1052. "consentRequired": false,
  1053. "config": {
  1054. "user.session.note": "clientAddress",
  1055. "introspection.token.claim": "true",
  1056. "userinfo.token.claim": "true",
  1057. "id.token.claim": "true",
  1058. "access.token.claim": "true",
  1059. "claim.name": "clientAddress",
  1060. "jsonType.label": "String"
  1061. }
  1062. }
  1063. ]
  1064. },
  1065. {
  1066. "id": "9ad87b4c-7c4e-4b38-b93b-5fbe0d9efde6",
  1067. "name": "TEST",
  1068. "description": "",
  1069. "protocol": "openid-connect",
  1070. "attributes": {
  1071. "include.in.token.scope": "true",
  1072. "display.on.consent.screen": "true",
  1073. "gui.order": "",
  1074. "consent.screen.text": ""
  1075. }
  1076. },
  1077. {
  1078. "id": "64c5d036-700c-4ab1-b559-4ae00fd6adb5",
  1079. "name": "phone",
  1080. "description": "OpenID Connect built-in scope: phone",
  1081. "protocol": "openid-connect",
  1082. "attributes": {
  1083. "include.in.token.scope": "true",
  1084. "consent.screen.text": "${phoneScopeConsentText}",
  1085. "display.on.consent.screen": "true"
  1086. },
  1087. "protocolMappers": [
  1088. {
  1089. "id": "80e568b7-4e46-46a5-8d68-c3229642366b",
  1090. "name": "phone number",
  1091. "protocol": "openid-connect",
  1092. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1093. "consentRequired": false,
  1094. "config": {
  1095. "introspection.token.claim": "true",
  1096. "userinfo.token.claim": "true",
  1097. "user.attribute": "phoneNumber",
  1098. "id.token.claim": "true",
  1099. "access.token.claim": "true",
  1100. "claim.name": "phone_number",
  1101. "jsonType.label": "String"
  1102. }
  1103. },
  1104. {
  1105. "id": "e8a0436f-e6fd-4410-846d-3bd644b7f4b0",
  1106. "name": "phone number verified",
  1107. "protocol": "openid-connect",
  1108. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1109. "consentRequired": false,
  1110. "config": {
  1111. "introspection.token.claim": "true",
  1112. "userinfo.token.claim": "true",
  1113. "user.attribute": "phoneNumberVerified",
  1114. "id.token.claim": "true",
  1115. "access.token.claim": "true",
  1116. "claim.name": "phone_number_verified",
  1117. "jsonType.label": "boolean"
  1118. }
  1119. }
  1120. ]
  1121. },
  1122. {
  1123. "id": "d0657cd1-b78b-4140-8051-8b20369d633c",
  1124. "name": "roles",
  1125. "description": "OpenID Connect scope for add user roles to the access token",
  1126. "protocol": "openid-connect",
  1127. "attributes": {
  1128. "include.in.token.scope": "false",
  1129. "consent.screen.text": "${rolesScopeConsentText}",
  1130. "display.on.consent.screen": "true"
  1131. },
  1132. "protocolMappers": [
  1133. {
  1134. "id": "8962874f-fba2-4d49-b31e-ffa778ed6c2a",
  1135. "name": "audience resolve",
  1136. "protocol": "openid-connect",
  1137. "protocolMapper": "oidc-audience-resolve-mapper",
  1138. "consentRequired": false,
  1139. "config": {
  1140. "introspection.token.claim": "true",
  1141. "access.token.claim": "true"
  1142. }
  1143. },
  1144. {
  1145. "id": "f5a3952f-898a-4871-9eaf-12b54a5c4869",
  1146. "name": "client roles",
  1147. "protocol": "openid-connect",
  1148. "protocolMapper": "oidc-usermodel-client-role-mapper",
  1149. "consentRequired": false,
  1150. "config": {
  1151. "user.attribute": "foo",
  1152. "introspection.token.claim": "true",
  1153. "access.token.claim": "true",
  1154. "claim.name": "resource_access.${client_id}.roles",
  1155. "jsonType.label": "String",
  1156. "multivalued": "true"
  1157. }
  1158. },
  1159. {
  1160. "id": "36ab92f7-fc4f-48ea-80c0-86853c1d1d7a",
  1161. "name": "realm roles",
  1162. "protocol": "openid-connect",
  1163. "protocolMapper": "oidc-usermodel-realm-role-mapper",
  1164. "consentRequired": false,
  1165. "config": {
  1166. "user.attribute": "foo",
  1167. "introspection.token.claim": "true",
  1168. "access.token.claim": "true",
  1169. "claim.name": "realm_access.roles",
  1170. "jsonType.label": "String",
  1171. "multivalued": "true"
  1172. }
  1173. }
  1174. ]
  1175. },
  1176. {
  1177. "id": "14aeb9e4-d546-4a57-a46d-dd198c2e474b",
  1178. "name": "offline_access",
  1179. "description": "OpenID Connect built-in scope: offline_access",
  1180. "protocol": "openid-connect",
  1181. "attributes": {
  1182. "consent.screen.text": "${offlineAccessScopeConsentText}",
  1183. "display.on.consent.screen": "true"
  1184. }
  1185. },
  1186. {
  1187. "id": "75614a06-9fb3-466b-ad1b-09e2c709b713",
  1188. "name": "profile",
  1189. "description": "OpenID Connect built-in scope: profile",
  1190. "protocol": "openid-connect",
  1191. "attributes": {
  1192. "include.in.token.scope": "true",
  1193. "consent.screen.text": "${profileScopeConsentText}",
  1194. "display.on.consent.screen": "true"
  1195. },
  1196. "protocolMappers": [
  1197. {
  1198. "id": "3483780b-dca3-4219-b6aa-3c3eccd89aac",
  1199. "name": "locale",
  1200. "protocol": "openid-connect",
  1201. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1202. "consentRequired": false,
  1203. "config": {
  1204. "introspection.token.claim": "true",
  1205. "userinfo.token.claim": "true",
  1206. "user.attribute": "locale",
  1207. "id.token.claim": "true",
  1208. "access.token.claim": "true",
  1209. "claim.name": "locale",
  1210. "jsonType.label": "String"
  1211. }
  1212. },
  1213. {
  1214. "id": "25757e7d-8344-4e48-8bed-c8581c22f099",
  1215. "name": "nickname",
  1216. "protocol": "openid-connect",
  1217. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1218. "consentRequired": false,
  1219. "config": {
  1220. "introspection.token.claim": "true",
  1221. "userinfo.token.claim": "true",
  1222. "user.attribute": "nickname",
  1223. "id.token.claim": "true",
  1224. "access.token.claim": "true",
  1225. "claim.name": "nickname",
  1226. "jsonType.label": "String"
  1227. }
  1228. },
  1229. {
  1230. "id": "09150a54-8ae2-428b-b146-a76a4a0856e7",
  1231. "name": "gender",
  1232. "protocol": "openid-connect",
  1233. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1234. "consentRequired": false,
  1235. "config": {
  1236. "introspection.token.claim": "true",
  1237. "userinfo.token.claim": "true",
  1238. "user.attribute": "gender",
  1239. "id.token.claim": "true",
  1240. "access.token.claim": "true",
  1241. "claim.name": "gender",
  1242. "jsonType.label": "String"
  1243. }
  1244. },
  1245. {
  1246. "id": "7215834d-485d-4d5d-8fee-808db16615aa",
  1247. "name": "middle name",
  1248. "protocol": "openid-connect",
  1249. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1250. "consentRequired": false,
  1251. "config": {
  1252. "introspection.token.claim": "true",
  1253. "userinfo.token.claim": "true",
  1254. "user.attribute": "middleName",
  1255. "id.token.claim": "true",
  1256. "access.token.claim": "true",
  1257. "claim.name": "middle_name",
  1258. "jsonType.label": "String"
  1259. }
  1260. },
  1261. {
  1262. "id": "befdb28f-e861-40c6-af37-660070b20dfb",
  1263. "name": "profile",
  1264. "protocol": "openid-connect",
  1265. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1266. "consentRequired": false,
  1267. "config": {
  1268. "introspection.token.claim": "true",
  1269. "userinfo.token.claim": "true",
  1270. "user.attribute": "profile",
  1271. "id.token.claim": "true",
  1272. "access.token.claim": "true",
  1273. "claim.name": "profile",
  1274. "jsonType.label": "String"
  1275. }
  1276. },
  1277. {
  1278. "id": "d5cf7d6b-8c44-4839-b6aa-aa96ad04e133",
  1279. "name": "birthdate",
  1280. "protocol": "openid-connect",
  1281. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1282. "consentRequired": false,
  1283. "config": {
  1284. "introspection.token.claim": "true",
  1285. "userinfo.token.claim": "true",
  1286. "user.attribute": "birthdate",
  1287. "id.token.claim": "true",
  1288. "access.token.claim": "true",
  1289. "claim.name": "birthdate",
  1290. "jsonType.label": "String"
  1291. }
  1292. },
  1293. {
  1294. "id": "99146a5f-9437-465f-95b3-c228fd3a9976",
  1295. "name": "given name",
  1296. "protocol": "openid-connect",
  1297. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1298. "consentRequired": false,
  1299. "config": {
  1300. "introspection.token.claim": "true",
  1301. "userinfo.token.claim": "true",
  1302. "user.attribute": "firstName",
  1303. "id.token.claim": "true",
  1304. "access.token.claim": "true",
  1305. "claim.name": "given_name",
  1306. "jsonType.label": "String"
  1307. }
  1308. },
  1309. {
  1310. "id": "7dfa9437-4156-42e8-b5b5-bca8ea52a6fe",
  1311. "name": "zoneinfo",
  1312. "protocol": "openid-connect",
  1313. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1314. "consentRequired": false,
  1315. "config": {
  1316. "introspection.token.claim": "true",
  1317. "userinfo.token.claim": "true",
  1318. "user.attribute": "zoneinfo",
  1319. "id.token.claim": "true",
  1320. "access.token.claim": "true",
  1321. "claim.name": "zoneinfo",
  1322. "jsonType.label": "String"
  1323. }
  1324. },
  1325. {
  1326. "id": "43a7d8a9-0dcd-4fe0-b20a-ebcf48f5a38a",
  1327. "name": "full name",
  1328. "protocol": "openid-connect",
  1329. "protocolMapper": "oidc-full-name-mapper",
  1330. "consentRequired": false,
  1331. "config": {
  1332. "id.token.claim": "true",
  1333. "introspection.token.claim": "true",
  1334. "access.token.claim": "true",
  1335. "userinfo.token.claim": "true"
  1336. }
  1337. },
  1338. {
  1339. "id": "05a01a36-cde8-4f21-828a-1818506b8ce9",
  1340. "name": "family name",
  1341. "protocol": "openid-connect",
  1342. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1343. "consentRequired": false,
  1344. "config": {
  1345. "introspection.token.claim": "true",
  1346. "userinfo.token.claim": "true",
  1347. "user.attribute": "lastName",
  1348. "id.token.claim": "true",
  1349. "access.token.claim": "true",
  1350. "claim.name": "family_name",
  1351. "jsonType.label": "String"
  1352. }
  1353. },
  1354. {
  1355. "id": "2b285d61-96e9-46d9-8277-fb7bc08b343b",
  1356. "name": "picture",
  1357. "protocol": "openid-connect",
  1358. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1359. "consentRequired": false,
  1360. "config": {
  1361. "introspection.token.claim": "true",
  1362. "userinfo.token.claim": "true",
  1363. "user.attribute": "picture",
  1364. "id.token.claim": "true",
  1365. "access.token.claim": "true",
  1366. "claim.name": "picture",
  1367. "jsonType.label": "String"
  1368. }
  1369. },
  1370. {
  1371. "id": "4849894e-dc15-48ee-93e4-6065eebcb558",
  1372. "name": "updated at",
  1373. "protocol": "openid-connect",
  1374. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1375. "consentRequired": false,
  1376. "config": {
  1377. "introspection.token.claim": "true",
  1378. "userinfo.token.claim": "true",
  1379. "user.attribute": "updatedAt",
  1380. "id.token.claim": "true",
  1381. "access.token.claim": "true",
  1382. "claim.name": "updated_at",
  1383. "jsonType.label": "long"
  1384. }
  1385. },
  1386. {
  1387. "id": "0a17ebfb-b3dc-4dbb-8980-c2c3d00ec031",
  1388. "name": "username",
  1389. "protocol": "openid-connect",
  1390. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1391. "consentRequired": false,
  1392. "config": {
  1393. "introspection.token.claim": "true",
  1394. "userinfo.token.claim": "true",
  1395. "user.attribute": "username",
  1396. "id.token.claim": "true",
  1397. "access.token.claim": "true",
  1398. "claim.name": "preferred_username",
  1399. "jsonType.label": "String"
  1400. }
  1401. },
  1402. {
  1403. "id": "f8b125b6-f943-4f9a-a1f3-6d964e79ca77",
  1404. "name": "website",
  1405. "protocol": "openid-connect",
  1406. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1407. "consentRequired": false,
  1408. "config": {
  1409. "introspection.token.claim": "true",
  1410. "userinfo.token.claim": "true",
  1411. "user.attribute": "website",
  1412. "id.token.claim": "true",
  1413. "access.token.claim": "true",
  1414. "claim.name": "website",
  1415. "jsonType.label": "String"
  1416. }
  1417. }
  1418. ]
  1419. },
  1420. {
  1421. "id": "42c32a00-023d-4901-9385-5229261e042b",
  1422. "name": "acr",
  1423. "description": "OpenID Connect scope for add acr (authentication context class reference) to the token",
  1424. "protocol": "openid-connect",
  1425. "attributes": {
  1426. "include.in.token.scope": "false",
  1427. "display.on.consent.screen": "false"
  1428. },
  1429. "protocolMappers": [
  1430. {
  1431. "id": "4ca0063b-e84c-4ade-8198-b98c2af6109b",
  1432. "name": "acr loa level",
  1433. "protocol": "openid-connect",
  1434. "protocolMapper": "oidc-acr-mapper",
  1435. "consentRequired": false,
  1436. "config": {
  1437. "id.token.claim": "true",
  1438. "introspection.token.claim": "true",
  1439. "access.token.claim": "true",
  1440. "userinfo.token.claim": "true"
  1441. }
  1442. }
  1443. ]
  1444. },
  1445. {
  1446. "id": "04d40695-3afe-437c-aac0-a3ad7721048b",
  1447. "name": "microprofile-jwt",
  1448. "description": "Microprofile - JWT built-in scope",
  1449. "protocol": "openid-connect",
  1450. "attributes": {
  1451. "include.in.token.scope": "true",
  1452. "display.on.consent.screen": "false"
  1453. },
  1454. "protocolMappers": [
  1455. {
  1456. "id": "b2b3fa95-9301-4a75-a576-0e0c71872e5e",
  1457. "name": "upn",
  1458. "protocol": "openid-connect",
  1459. "protocolMapper": "oidc-usermodel-attribute-mapper",
  1460. "consentRequired": false,
  1461. "config": {
  1462. "introspection.token.claim": "true",
  1463. "userinfo.token.claim": "true",
  1464. "user.attribute": "username",
  1465. "id.token.claim": "true",
  1466. "access.token.claim": "true",
  1467. "claim.name": "upn",
  1468. "jsonType.label": "String"
  1469. }
  1470. },
  1471. {
  1472. "id": "eb7abecb-09df-445c-a5ac-b906eb84d7ef",
  1473. "name": "groups",
  1474. "protocol": "openid-connect",
  1475. "protocolMapper": "oidc-usermodel-realm-role-mapper",
  1476. "consentRequired": false,
  1477. "config": {
  1478. "introspection.token.claim": "true",
  1479. "multivalued": "true",
  1480. "userinfo.token.claim": "true",
  1481. "user.attribute": "foo",
  1482. "id.token.claim": "true",
  1483. "access.token.claim": "true",
  1484. "claim.name": "groups",
  1485. "jsonType.label": "String"
  1486. }
  1487. }
  1488. ]
  1489. },
  1490. {
  1491. "id": "f8bbbc87-0fea-4cc0-a0cd-5364b03f6016",
  1492. "name": "basic",
  1493. "description": "OpenID Connect scope for add all basic claims to the token",
  1494. "protocol": "openid-connect",
  1495. "attributes": {
  1496. "include.in.token.scope": "false",
  1497. "display.on.consent.screen": "false"
  1498. },
  1499. "protocolMappers": [
  1500. {
  1501. "id": "0fe880c0-6d53-4f39-99a3-7601498d0f4d",
  1502. "name": "auth_time",
  1503. "protocol": "openid-connect",
  1504. "protocolMapper": "oidc-usersessionmodel-note-mapper",
  1505. "consentRequired": false,
  1506. "config": {
  1507. "user.session.note": "AUTH_TIME",
  1508. "introspection.token.claim": "true",
  1509. "userinfo.token.claim": "true",
  1510. "id.token.claim": "true",
  1511. "access.token.claim": "true",
  1512. "claim.name": "auth_time",
  1513. "jsonType.label": "long"
  1514. }
  1515. },
  1516. {
  1517. "id": "52a47652-bdbe-44f5-9d02-0d571d2a173c",
  1518. "name": "sub",
  1519. "protocol": "openid-connect",
  1520. "protocolMapper": "oidc-sub-mapper",
  1521. "consentRequired": false,
  1522. "config": {
  1523. "introspection.token.claim": "true",
  1524. "access.token.claim": "true"
  1525. }
  1526. }
  1527. ]
  1528. },
  1529. {
  1530. "id": "1869a902-489a-4ce2-a729-f639b636c651",
  1531. "name": "address",
  1532. "description": "OpenID Connect built-in scope: address",
  1533. "protocol": "openid-connect",
  1534. "attributes": {
  1535. "include.in.token.scope": "true",
  1536. "consent.screen.text": "${addressScopeConsentText}",
  1537. "display.on.consent.screen": "true"
  1538. },
  1539. "protocolMappers": [
  1540. {
  1541. "id": "3b06c0a9-eb82-4aaf-b175-f22f4afe153f",
  1542. "name": "address",
  1543. "protocol": "openid-connect",
  1544. "protocolMapper": "oidc-address-mapper",
  1545. "consentRequired": false,
  1546. "config": {
  1547. "user.attribute.formatted": "formatted",
  1548. "user.attribute.country": "country",
  1549. "introspection.token.claim": "true",
  1550. "user.attribute.postal_code": "postal_code",
  1551. "userinfo.token.claim": "true",
  1552. "user.attribute.street": "street",
  1553. "id.token.claim": "true",
  1554. "user.attribute.region": "region",
  1555. "access.token.claim": "true",
  1556. "user.attribute.locality": "locality"
  1557. }
  1558. }
  1559. ]
  1560. },
  1561. {
  1562. "id": "67b57903-6e9d-4c83-8f2a-84480d701d40",
  1563. "name": "role_list",
  1564. "description": "SAML role list",
  1565. "protocol": "saml",
  1566. "attributes": {
  1567. "consent.screen.text": "${samlRoleListScopeConsentText}",
  1568. "display.on.consent.screen": "true"
  1569. },
  1570. "protocolMappers": [
  1571. {
  1572. "id": "04ca0bb8-f284-48f7-8556-d07682ab20be",
  1573. "name": "role list",
  1574. "protocol": "saml",
  1575. "protocolMapper": "saml-role-list-mapper",
  1576. "consentRequired": false,
  1577. "config": {
  1578. "single": "false",
  1579. "attribute.nameformat": "Basic",
  1580. "attribute.name": "Role"
  1581. }
  1582. }
  1583. ]
  1584. }
  1585. ],
  1586. "defaultDefaultClientScopes": [
  1587. "role_list",
  1588. "profile",
  1589. "email",
  1590. "roles",
  1591. "web-origins",
  1592. "acr",
  1593. "TEST",
  1594. "basic"
  1595. ],
  1596. "defaultOptionalClientScopes": [
  1597. "offline_access",
  1598. "address",
  1599. "phone",
  1600. "microprofile-jwt"
  1601. ],
  1602. "browserSecurityHeaders": {
  1603. "contentSecurityPolicyReportOnly": "",
  1604. "xContentTypeOptions": "nosniff",
  1605. "referrerPolicy": "no-referrer",
  1606. "xRobotsTag": "none",
  1607. "xFrameOptions": "SAMEORIGIN",
  1608. "contentSecurityPolicy": "frame-src \u0027self\u0027; frame-ancestors \u0027self\u0027; object-src \u0027none\u0027;",
  1609. "xXSSProtection": "1; mode=block",
  1610. "strictTransportSecurity": "max-age=31536000; includeSubDomains"
  1611. },
  1612. "smtpServer": {
  1613. "allowutf8": "",
  1614. "replyToDisplayName": "",
  1615. "debug": "false",
  1616. "starttls": "true",
  1617. "auth": "true",
  1618. "writeTimeout": "10000",
  1619. "envelopeFrom": "",
  1620. "ssl": "false",
  1621. "timeout": "10000",
  1622. "password": "*******",
  1623. "port": "587",
  1624. "replyTo": "",
  1625. "host": "smtp.gmail.com",
  1626. "from": "kiladotestu@gmail.com",
  1627. "fromDisplayName": "Boat Delivery - access",
  1628. "authType": "basic",
  1629. "connectionTimeout": "10000",
  1630. "user": "kiladotestu@gmail.com"
  1631. },
  1632. "loginTheme": "keycloakify-starter",
  1633. "accountTheme": "",
  1634. "adminTheme": "",
  1635. "emailTheme": "",
  1636. "eventsEnabled": true,
  1637. "eventsListeners": [
  1638. "userservice-sync-listener",
  1639. "jboss-logging"
  1640. ],
  1641. "enabledEventTypes": [
  1642. ],
  1643. "adminEventsEnabled": true,
  1644. "adminEventsDetailsEnabled": true,
  1645. "identityProviders": [
  1646. ],
  1647. "identityProviderMappers": [
  1648. ],
  1649. "components": {
  1650. "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [
  1651. {
  1652. "id": "a1722568-457c-4de0-b3e5-003fed1d7140",
  1653. "name": "Max Clients Limit",
  1654. "providerId": "max-clients",
  1655. "subType": "anonymous",
  1656. "subComponents": {
  1657. },
  1658. "config": {
  1659. "max-clients": [
  1660. "200"
  1661. ]
  1662. }
  1663. },
  1664. {
  1665. "id": "55d900ce-adc3-4923-a246-6c4350ce0d63",
  1666. "name": "Allowed Protocol Mapper Types",
  1667. "providerId": "allowed-protocol-mappers",
  1668. "subType": "authenticated",
  1669. "subComponents": {
  1670. },
  1671. "config": {
  1672. "allowed-protocol-mapper-types": [
  1673. "oidc-usermodel-attribute-mapper",
  1674. "oidc-sha256-pairwise-sub-mapper",
  1675. "oidc-full-name-mapper",
  1676. "saml-user-attribute-mapper",
  1677. "oidc-usermodel-property-mapper",
  1678. "saml-user-property-mapper",
  1679. "oidc-address-mapper",
  1680. "saml-role-list-mapper"
  1681. ]
  1682. }
  1683. },
  1684. {
  1685. "id": "fa9582f0-c4db-47b3-9011-a44708bcd356",
  1686. "name": "Full Scope Disabled",
  1687. "providerId": "scope",
  1688. "subType": "anonymous",
  1689. "subComponents": {
  1690. },
  1691. "config": {
  1692. }
  1693. },
  1694. {
  1695. "id": "1df1f757-6d23-4a9e-88e0-c1bd505783e5",
  1696. "name": "Allowed Protocol Mapper Types",
  1697. "providerId": "allowed-protocol-mappers",
  1698. "subType": "anonymous",
  1699. "subComponents": {
  1700. },
  1701. "config": {
  1702. "allowed-protocol-mapper-types": [
  1703. "saml-user-attribute-mapper",
  1704. "oidc-usermodel-attribute-mapper",
  1705. "saml-user-property-mapper",
  1706. "oidc-address-mapper",
  1707. "oidc-usermodel-property-mapper",
  1708. "oidc-sha256-pairwise-sub-mapper",
  1709. "oidc-full-name-mapper",
  1710. "saml-role-list-mapper"
  1711. ]
  1712. }
  1713. },
  1714. {
  1715. "id": "b666b3a2-3ea5-4e23-946e-51f74be4208e",
  1716. "name": "Consent Required",
  1717. "providerId": "consent-required",
  1718. "subType": "anonymous",
  1719. "subComponents": {
  1720. },
  1721. "config": {
  1722. }
  1723. },
  1724. {
  1725. "id": "8d98ef10-96db-418e-98c1-4d49dd0565eb",
  1726. "name": "Allowed Client Scopes",
  1727. "providerId": "allowed-client-templates",
  1728. "subType": "authenticated",
  1729. "subComponents": {
  1730. },
  1731. "config": {
  1732. "allow-default-scopes": [
  1733. "true"
  1734. ]
  1735. }
  1736. },
  1737. {
  1738. "id": "599ab3a5-3fc2-41a7-ac22-a5bcef69df99",
  1739. "name": "Allowed Client Scopes",
  1740. "providerId": "allowed-client-templates",
  1741. "subType": "anonymous",
  1742. "subComponents": {
  1743. },
  1744. "config": {
  1745. "allow-default-scopes": [
  1746. "true"
  1747. ]
  1748. }
  1749. },
  1750. {
  1751. "id": "39cc13ca-82d4-4f89-aea7-7c676629537f",
  1752. "name": "Trusted Hosts",
  1753. "providerId": "trusted-hosts",
  1754. "subType": "anonymous",
  1755. "subComponents": {
  1756. },
  1757. "config": {
  1758. "host-sending-registration-request-must-match": [
  1759. "true"
  1760. ],
  1761. "client-uris-must-match": [
  1762. "true"
  1763. ]
  1764. }
  1765. }
  1766. ],
  1767. "org.keycloak.userprofile.UserProfileProvider": [
  1768. {
  1769. "id": "80f81f0d-782b-47d3-a100-7b254f435549",
  1770. "providerId": "declarative-user-profile",
  1771. "subComponents": {
  1772. },
  1773. "config": {
  1774. "kc.user.profile.config": [
  1775. "{\"attributes\":[{\"name\":\"username\",\"displayName\":\"${username}\",\"validations\":{\"length\":{\"min\":3,\"max\":255},\"username-prohibited-characters\":{},\"up-username-not-idn-homograph\":{}},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"email\",\"displayName\":\"${email}\",\"validations\":{\"email\":{},\"length\":{\"max\":255}},\"required\":{\"roles\":[\"user\"]},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"firstName\",\"displayName\":\"${firstName}\",\"validations\":{\"length\":{\"max\":255},\"person-name-prohibited-characters\":{}},\"required\":{\"roles\":[\"user\"]},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"lastName\",\"displayName\":\"${lastName}\",\"validations\":{\"length\":{\"max\":255},\"person-name-prohibited-characters\":{}},\"required\":{\"roles\":[\"user\"]},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":\"phoneNumber\",\"displayName\":\"${profile.attributes.phoneNumber}\",\"validations\":{\"unique-phone\":{}},\"annotations\":{},\"required\":{\"roles\":[\"user\"]},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false}],\"groups\":[{\"name\":\"user-metadata\",\"displayHeader\":\"User metadata\",\"displayDescription\":\"Attributes, which refer to user metadata\"}],\"unmanagedAttributePolicy\":\"ENABLED\"}"
  1776. ]
  1777. }
  1778. }
  1779. ],
  1780. "org.keycloak.keys.KeyProvider": [
  1781. {
  1782. "id": "57d769b5-0e13-4f2b-980c-60e9ca3e201f",
  1783. "name": "aes-generated",
  1784. "providerId": "aes-generated",
  1785. "subComponents": {
  1786. },
  1787. "config": {
  1788. "priority": [
  1789. "100"
  1790. ]
  1791. }
  1792. },
  1793. {
  1794. "id": "48af13b1-4d23-420a-9805-c459aac7fc18",
  1795. "name": "rsa-enc-generated",
  1796. "providerId": "rsa-enc-generated",
  1797. "subComponents": {
  1798. },
  1799. "config": {
  1800. "priority": [
  1801. "100"
  1802. ],
  1803. "algorithm": [
  1804. "RSA-OAEP"
  1805. ]
  1806. }
  1807. },
  1808. {
  1809. "id": "b52512d8-f584-4f8a-b3ef-9925f76cc7b3",
  1810. "name": "hmac-generated",
  1811. "providerId": "hmac-generated",
  1812. "subComponents": {
  1813. },
  1814. "config": {
  1815. "priority": [
  1816. "100"
  1817. ],
  1818. "algorithm": [
  1819. "HS256"
  1820. ]
  1821. }
  1822. },
  1823. {
  1824. "id": "b9a4ffb2-caae-473b-adb3-ede9c572616b",
  1825. "name": "hmac-generated-hs512",
  1826. "providerId": "hmac-generated",
  1827. "subComponents": {
  1828. },
  1829. "config": {
  1830. "priority": [
  1831. "100"
  1832. ],
  1833. "algorithm": [
  1834. "HS512"
  1835. ]
  1836. }
  1837. },
  1838. {
  1839. "id": "9fb248d0-ba13-4113-a2f2-a2779ff61de7",
  1840. "name": "rsa-generated",
  1841. "providerId": "rsa-generated",
  1842. "subComponents": {
  1843. },
  1844. "config": {
  1845. "priority": [
  1846. "100"
  1847. ]
  1848. }
  1849. }
  1850. ]
  1851. },
  1852. "internationalizationEnabled": true,
  1853. "supportedLocales": [
  1854. "en",
  1855. "pl"
  1856. ],
  1857. "defaultLocale": "pl",
  1858. "authenticationFlows": [
  1859. {
  1860. "id": "a903d1d7-07b3-4730-b1f3-9d881ea2f742",
  1861. "alias": "Account verification options",
  1862. "description": "Method with which to verity the existing account",
  1863. "providerId": "basic-flow",
  1864. "topLevel": false,
  1865. "builtIn": true,
  1866. "authenticationExecutions": [
  1867. {
  1868. "authenticator": "idp-email-verification",
  1869. "authenticatorFlow": false,
  1870. "requirement": "ALTERNATIVE",
  1871. "priority": 10,
  1872. "autheticatorFlow": false,
  1873. "userSetupAllowed": false
  1874. },
  1875. {
  1876. "authenticatorFlow": true,
  1877. "requirement": "ALTERNATIVE",
  1878. "priority": 20,
  1879. "autheticatorFlow": true,
  1880. "flowAlias": "Verify Existing Account by Re-authentication",
  1881. "userSetupAllowed": false
  1882. }
  1883. ]
  1884. },
  1885. {
  1886. "id": "0c4d7019-ea94-435c-aad3-e854ff527e18",
  1887. "alias": "Browser - Conditional OTP",
  1888. "description": "Flow to determine if the OTP is required for the authentication",
  1889. "providerId": "basic-flow",
  1890. "topLevel": false,
  1891. "builtIn": true,
  1892. "authenticationExecutions": [
  1893. {
  1894. "authenticator": "conditional-user-configured",
  1895. "authenticatorFlow": false,
  1896. "requirement": "REQUIRED",
  1897. "priority": 10,
  1898. "autheticatorFlow": false,
  1899. "userSetupAllowed": false
  1900. },
  1901. {
  1902. "authenticator": "auth-otp-form",
  1903. "authenticatorFlow": false,
  1904. "requirement": "REQUIRED",
  1905. "priority": 20,
  1906. "autheticatorFlow": false,
  1907. "userSetupAllowed": false
  1908. }
  1909. ]
  1910. },
  1911. {
  1912. "id": "057e72ec-efcc-4fe5-a80c-409d4578f7d6",
  1913. "alias": "Direct Grant - Conditional OTP",
  1914. "description": "Flow to determine if the OTP is required for the authentication",
  1915. "providerId": "basic-flow",
  1916. "topLevel": false,
  1917. "builtIn": true,
  1918. "authenticationExecutions": [
  1919. {
  1920. "authenticator": "conditional-user-configured",
  1921. "authenticatorFlow": false,
  1922. "requirement": "REQUIRED",
  1923. "priority": 10,
  1924. "autheticatorFlow": false,
  1925. "userSetupAllowed": false
  1926. },
  1927. {
  1928. "authenticator": "direct-grant-validate-otp",
  1929. "authenticatorFlow": false,
  1930. "requirement": "REQUIRED",
  1931. "priority": 20,
  1932. "autheticatorFlow": false,
  1933. "userSetupAllowed": false
  1934. }
  1935. ]
  1936. },
  1937. {
  1938. "id": "53e01b53-e68d-4d0b-a349-0737cd6984f2",
  1939. "alias": "First broker login - Conditional OTP",
  1940. "description": "Flow to determine if the OTP is required for the authentication",
  1941. "providerId": "basic-flow",
  1942. "topLevel": false,
  1943. "builtIn": true,
  1944. "authenticationExecutions": [
  1945. {
  1946. "authenticator": "conditional-user-configured",
  1947. "authenticatorFlow": false,
  1948. "requirement": "REQUIRED",
  1949. "priority": 10,
  1950. "autheticatorFlow": false,
  1951. "userSetupAllowed": false
  1952. },
  1953. {
  1954. "authenticator": "auth-otp-form",
  1955. "authenticatorFlow": false,
  1956. "requirement": "REQUIRED",
  1957. "priority": 20,
  1958. "autheticatorFlow": false,
  1959. "userSetupAllowed": false
  1960. }
  1961. ]
  1962. },
  1963. {
  1964. "id": "72e8b90b-1efc-4a4b-aa3f-dbbec5115900",
  1965. "alias": "Handle Existing Account",
  1966. "description": "Handle what to do if there is existing account with same email/username like authenticated identity provider",
  1967. "providerId": "basic-flow",
  1968. "topLevel": false,
  1969. "builtIn": true,
  1970. "authenticationExecutions": [
  1971. {
  1972. "authenticator": "idp-confirm-link",
  1973. "authenticatorFlow": false,
  1974. "requirement": "REQUIRED",
  1975. "priority": 10,
  1976. "autheticatorFlow": false,
  1977. "userSetupAllowed": false
  1978. },
  1979. {
  1980. "authenticatorFlow": true,
  1981. "requirement": "REQUIRED",
  1982. "priority": 20,
  1983. "autheticatorFlow": true,
  1984. "flowAlias": "Account verification options",
  1985. "userSetupAllowed": false
  1986. }
  1987. ]
  1988. },
  1989. {
  1990. "id": "c236bba7-8ca3-4cec-8fb4-ba93e840a97e",
  1991. "alias": "Reset - Conditional OTP",
  1992. "description": "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.",
  1993. "providerId": "basic-flow",
  1994. "topLevel": false,
  1995. "builtIn": true,
  1996. "authenticationExecutions": [
  1997. {
  1998. "authenticator": "conditional-user-configured",
  1999. "authenticatorFlow": false,
  2000. "requirement": "REQUIRED",
  2001. "priority": 10,
  2002. "autheticatorFlow": false,
  2003. "userSetupAllowed": false
  2004. },
  2005. {
  2006. "authenticator": "reset-otp",
  2007. "authenticatorFlow": false,
  2008. "requirement": "REQUIRED",
  2009. "priority": 20,
  2010. "autheticatorFlow": false,
  2011. "userSetupAllowed": false
  2012. }
  2013. ]
  2014. },
  2015. {
  2016. "id": "ee6d6b7f-5f92-4b54-9571-5c439ddcdc33",
  2017. "alias": "User creation or linking",
  2018. "description": "Flow for the existing/non-existing user alternatives",
  2019. "providerId": "basic-flow",
  2020. "topLevel": false,
  2021. "builtIn": true,
  2022. "authenticationExecutions": [
  2023. {
  2024. "authenticatorConfig": "create unique user config",
  2025. "authenticator": "idp-create-user-if-unique",
  2026. "authenticatorFlow": false,
  2027. "requirement": "ALTERNATIVE",
  2028. "priority": 10,
  2029. "autheticatorFlow": false,
  2030. "userSetupAllowed": false
  2031. },
  2032. {
  2033. "authenticatorFlow": true,
  2034. "requirement": "ALTERNATIVE",
  2035. "priority": 20,
  2036. "autheticatorFlow": true,
  2037. "flowAlias": "Handle Existing Account",
  2038. "userSetupAllowed": false
  2039. }
  2040. ]
  2041. },
  2042. {
  2043. "id": "6f5063e3-6d12-4a20-8965-f13c4b168606",
  2044. "alias": "Verify Existing Account by Re-authentication",
  2045. "description": "Reauthentication of existing account",
  2046. "providerId": "basic-flow",
  2047. "topLevel": false,
  2048. "builtIn": true,
  2049. "authenticationExecutions": [
  2050. {
  2051. "authenticator": "idp-username-password-form",
  2052. "authenticatorFlow": false,
  2053. "requirement": "REQUIRED",
  2054. "priority": 10,
  2055. "autheticatorFlow": false,
  2056. "userSetupAllowed": false
  2057. },
  2058. {
  2059. "authenticatorFlow": true,
  2060. "requirement": "CONDITIONAL",
  2061. "priority": 20,
  2062. "autheticatorFlow": true,
  2063. "flowAlias": "First broker login - Conditional OTP",
  2064. "userSetupAllowed": false
  2065. }
  2066. ]
  2067. },
  2068. {
  2069. "id": "1117d64a-95d6-4e0a-9a63-321ef04b67f8",
  2070. "alias": "browser",
  2071. "description": "browser based authentication",
  2072. "providerId": "basic-flow",
  2073. "topLevel": true,
  2074. "builtIn": true,
  2075. "authenticationExecutions": [
  2076. {
  2077. "authenticator": "auth-cookie",
  2078. "authenticatorFlow": false,
  2079. "requirement": "ALTERNATIVE",
  2080. "priority": 10,
  2081. "autheticatorFlow": false,
  2082. "userSetupAllowed": false
  2083. },
  2084. {
  2085. "authenticator": "auth-spnego",
  2086. "authenticatorFlow": false,
  2087. "requirement": "DISABLED",
  2088. "priority": 20,
  2089. "autheticatorFlow": false,
  2090. "userSetupAllowed": false
  2091. },
  2092. {
  2093. "authenticator": "identity-provider-redirector",
  2094. "authenticatorFlow": false,
  2095. "requirement": "ALTERNATIVE",
  2096. "priority": 25,
  2097. "autheticatorFlow": false,
  2098. "userSetupAllowed": false
  2099. },
  2100. {
  2101. "authenticatorFlow": true,
  2102. "requirement": "ALTERNATIVE",
  2103. "priority": 30,
  2104. "autheticatorFlow": true,
  2105. "flowAlias": "forms",
  2106. "userSetupAllowed": false
  2107. }
  2108. ]
  2109. },
  2110. {
  2111. "id": "db0d6bb6-6a59-490e-8b20-5f5884d3e26e",
  2112. "alias": "clients",
  2113. "description": "Base authentication for clients",
  2114. "providerId": "client-flow",
  2115. "topLevel": true,
  2116. "builtIn": true,
  2117. "authenticationExecutions": [
  2118. {
  2119. "authenticator": "client-secret",
  2120. "authenticatorFlow": false,
  2121. "requirement": "ALTERNATIVE",
  2122. "priority": 10,
  2123. "autheticatorFlow": false,
  2124. "userSetupAllowed": false
  2125. },
  2126. {
  2127. "authenticator": "client-jwt",
  2128. "authenticatorFlow": false,
  2129. "requirement": "ALTERNATIVE",
  2130. "priority": 20,
  2131. "autheticatorFlow": false,
  2132. "userSetupAllowed": false
  2133. },
  2134. {
  2135. "authenticator": "client-secret-jwt",
  2136. "authenticatorFlow": false,
  2137. "requirement": "ALTERNATIVE",
  2138. "priority": 30,
  2139. "autheticatorFlow": false,
  2140. "userSetupAllowed": false
  2141. },
  2142. {
  2143. "authenticator": "client-x509",
  2144. "authenticatorFlow": false,
  2145. "requirement": "ALTERNATIVE",
  2146. "priority": 40,
  2147. "autheticatorFlow": false,
  2148. "userSetupAllowed": false
  2149. }
  2150. ]
  2151. },
  2152. {
  2153. "id": "178a973b-8f03-4160-aeee-63d40a812df5",
  2154. "alias": "direct grant",
  2155. "description": "OpenID Connect Resource Owner Grant",
  2156. "providerId": "basic-flow",
  2157. "topLevel": true,
  2158. "builtIn": true,
  2159. "authenticationExecutions": [
  2160. {
  2161. "authenticator": "direct-grant-validate-username",
  2162. "authenticatorFlow": false,
  2163. "requirement": "REQUIRED",
  2164. "priority": 10,
  2165. "autheticatorFlow": false,
  2166. "userSetupAllowed": false
  2167. },
  2168. {
  2169. "authenticator": "direct-grant-validate-password",
  2170. "authenticatorFlow": false,
  2171. "requirement": "REQUIRED",
  2172. "priority": 20,
  2173. "autheticatorFlow": false,
  2174. "userSetupAllowed": false
  2175. },
  2176. {
  2177. "authenticatorFlow": true,
  2178. "requirement": "CONDITIONAL",
  2179. "priority": 30,
  2180. "autheticatorFlow": true,
  2181. "flowAlias": "Direct Grant - Conditional OTP",
  2182. "userSetupAllowed": false
  2183. }
  2184. ]
  2185. },
  2186. {
  2187. "id": "c7d05645-3228-473e-8df4-623dd6472f7d",
  2188. "alias": "docker auth",
  2189. "description": "Used by Docker clients to authenticate against the IDP",
  2190. "providerId": "basic-flow",
  2191. "topLevel": true,
  2192. "builtIn": true,
  2193. "authenticationExecutions": [
  2194. {
  2195. "authenticator": "docker-http-basic-authenticator",
  2196. "authenticatorFlow": false,
  2197. "requirement": "REQUIRED",
  2198. "priority": 10,
  2199. "autheticatorFlow": false,
  2200. "userSetupAllowed": false
  2201. }
  2202. ]
  2203. },
  2204. {
  2205. "id": "bb266296-26f7-4e36-8062-ec60571d4b47",
  2206. "alias": "first broker login",
  2207. "description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
  2208. "providerId": "basic-flow",
  2209. "topLevel": true,
  2210. "builtIn": true,
  2211. "authenticationExecutions": [
  2212. {
  2213. "authenticatorConfig": "review profile config",
  2214. "authenticator": "idp-review-profile",
  2215. "authenticatorFlow": false,
  2216. "requirement": "REQUIRED",
  2217. "priority": 10,
  2218. "autheticatorFlow": false,
  2219. "userSetupAllowed": false
  2220. },
  2221. {
  2222. "authenticatorFlow": true,
  2223. "requirement": "REQUIRED",
  2224. "priority": 20,
  2225. "autheticatorFlow": true,
  2226. "flowAlias": "User creation or linking",
  2227. "userSetupAllowed": false
  2228. }
  2229. ]
  2230. },
  2231. {
  2232. "id": "1810e955-c81f-466a-9f71-bff67a7eb64f",
  2233. "alias": "forms",
  2234. "description": "Username, password, otp and other auth forms.",
  2235. "providerId": "basic-flow",
  2236. "topLevel": false,
  2237. "builtIn": true,
  2238. "authenticationExecutions": [
  2239. {
  2240. "authenticator": "auth-username-password-form",
  2241. "authenticatorFlow": false,
  2242. "requirement": "REQUIRED",
  2243. "priority": 10,
  2244. "autheticatorFlow": false,
  2245. "userSetupAllowed": false
  2246. },
  2247. {
  2248. "authenticatorFlow": true,
  2249. "requirement": "CONDITIONAL",
  2250. "priority": 20,
  2251. "autheticatorFlow": true,
  2252. "flowAlias": "Browser - Conditional OTP",
  2253. "userSetupAllowed": false
  2254. }
  2255. ]
  2256. },
  2257. {
  2258. "id": "8e4d4765-c94d-42f0-b933-daf4014e9142",
  2259. "alias": "registration",
  2260. "description": "registration flow",
  2261. "providerId": "basic-flow",
  2262. "topLevel": true,
  2263. "builtIn": true,
  2264. "authenticationExecutions": [
  2265. {
  2266. "authenticator": "registration-page-form",
  2267. "authenticatorFlow": true,
  2268. "requirement": "REQUIRED",
  2269. "priority": 10,
  2270. "autheticatorFlow": true,
  2271. "flowAlias": "registration form",
  2272. "userSetupAllowed": false
  2273. }
  2274. ]
  2275. },
  2276. {
  2277. "id": "f0f3b9b2-1eae-47da-982b-1c0fb3cdb516",
  2278. "alias": "registration form",
  2279. "description": "registration form",
  2280. "providerId": "form-flow",
  2281. "topLevel": false,
  2282. "builtIn": true,
  2283. "authenticationExecutions": [
  2284. {
  2285. "authenticator": "registration-user-creation",
  2286. "authenticatorFlow": false,
  2287. "requirement": "REQUIRED",
  2288. "priority": 20,
  2289. "autheticatorFlow": false,
  2290. "userSetupAllowed": false
  2291. },
  2292. {
  2293. "authenticator": "registration-password-action",
  2294. "authenticatorFlow": false,
  2295. "requirement": "REQUIRED",
  2296. "priority": 50,
  2297. "autheticatorFlow": false,
  2298. "userSetupAllowed": false
  2299. },
  2300. {
  2301. "authenticator": "registration-recaptcha-action",
  2302. "authenticatorFlow": false,
  2303. "requirement": "DISABLED",
  2304. "priority": 60,
  2305. "autheticatorFlow": false,
  2306. "userSetupAllowed": false
  2307. }
  2308. ]
  2309. },
  2310. {
  2311. "id": "4a5fc767-449a-491e-927c-8917be81b92f",
  2312. "alias": "reset credentials",
  2313. "description": "Reset credentials for a user if they forgot their password or something",
  2314. "providerId": "basic-flow",
  2315. "topLevel": true,
  2316. "builtIn": true,
  2317. "authenticationExecutions": [
  2318. {
  2319. "authenticator": "reset-credentials-choose-user",
  2320. "authenticatorFlow": false,
  2321. "requirement": "REQUIRED",
  2322. "priority": 10,
  2323. "autheticatorFlow": false,
  2324. "userSetupAllowed": false
  2325. },
  2326. {
  2327. "authenticator": "reset-credential-email",
  2328. "authenticatorFlow": false,
  2329. "requirement": "REQUIRED",
  2330. "priority": 20,
  2331. "autheticatorFlow": false,
  2332. "userSetupAllowed": false
  2333. },
  2334. {
  2335. "authenticator": "reset-password",
  2336. "authenticatorFlow": false,
  2337. "requirement": "REQUIRED",
  2338. "priority": 30,
  2339. "autheticatorFlow": false,
  2340. "userSetupAllowed": false
  2341. },
  2342. {
  2343. "authenticatorFlow": true,
  2344. "requirement": "CONDITIONAL",
  2345. "priority": 40,
  2346. "autheticatorFlow": true,
  2347. "flowAlias": "Reset - Conditional OTP",
  2348. "userSetupAllowed": false
  2349. }
  2350. ]
  2351. },
  2352. {
  2353. "id": "ed0b5d6e-9633-4d71-bcd2-01c7bbaf84df",
  2354. "alias": "saml ecp",
  2355. "description": "SAML ECP Profile Authentication Flow",
  2356. "providerId": "basic-flow",
  2357. "topLevel": true,
  2358. "builtIn": true,
  2359. "authenticationExecutions": [
  2360. {
  2361. "authenticator": "http-basic-authenticator",
  2362. "authenticatorFlow": false,
  2363. "requirement": "REQUIRED",
  2364. "priority": 10,
  2365. "autheticatorFlow": false,
  2366. "userSetupAllowed": false
  2367. }
  2368. ]
  2369. }
  2370. ],
  2371. "authenticatorConfig": [
  2372. {
  2373. "id": "7cee3b79-8aaf-4514-8349-f55577dd13f8",
  2374. "alias": "create unique user config",
  2375. "config": {
  2376. "require.password.update.after.registration": "false"
  2377. }
  2378. },
  2379. {
  2380. "id": "79ff2c77-922f-40e7-9b70-f0dbb71aa4eb",
  2381. "alias": "review profile config",
  2382. "config": {
  2383. "update.profile.on.first.login": "missing"
  2384. }
  2385. }
  2386. ],
  2387. "requiredActions": [
  2388. {
  2389. "alias": "CONFIGURE_TOTP",
  2390. "name": "Configure OTP",
  2391. "providerId": "CONFIGURE_TOTP",
  2392. "enabled": true,
  2393. "defaultAction": false,
  2394. "priority": 10,
  2395. "config": {
  2396. }
  2397. },
  2398. {
  2399. "alias": "TERMS_AND_CONDITIONS",
  2400. "name": "Terms and Conditions",
  2401. "providerId": "TERMS_AND_CONDITIONS",
  2402. "enabled": false,
  2403. "defaultAction": false,
  2404. "priority": 20,
  2405. "config": {
  2406. }
  2407. },
  2408. {
  2409. "alias": "UPDATE_PASSWORD",
  2410. "name": "Update Password",
  2411. "providerId": "UPDATE_PASSWORD",
  2412. "enabled": true,
  2413. "defaultAction": false,
  2414. "priority": 30,
  2415. "config": {
  2416. }
  2417. },
  2418. {
  2419. "alias": "UPDATE_PROFILE",
  2420. "name": "Update Profile",
  2421. "providerId": "UPDATE_PROFILE",
  2422. "enabled": true,
  2423. "defaultAction": false,
  2424. "priority": 40,
  2425. "config": {
  2426. }
  2427. },
  2428. {
  2429. "alias": "VERIFY_EMAIL",
  2430. "name": "Verify Email",
  2431. "providerId": "VERIFY_EMAIL",
  2432. "enabled": true,
  2433. "defaultAction": false,
  2434. "priority": 50,
  2435. "config": {
  2436. }
  2437. },
  2438. {
  2439. "alias": "delete_account",
  2440. "name": "Delete Account",
  2441. "providerId": "delete_account",
  2442. "enabled": false,
  2443. "defaultAction": false,
  2444. "priority": 60,
  2445. "config": {
  2446. }
  2447. },
  2448. {
  2449. "alias": "webauthn-register",
  2450. "name": "Webauthn Register",
  2451. "providerId": "webauthn-register",
  2452. "enabled": true,
  2453. "defaultAction": false,
  2454. "priority": 70,
  2455. "config": {
  2456. }
  2457. },
  2458. {
  2459. "alias": "webauthn-register-passwordless",
  2460. "name": "Webauthn Register Passwordless",
  2461. "providerId": "webauthn-register-passwordless",
  2462. "enabled": true,
  2463. "defaultAction": false,
  2464. "priority": 80,
  2465. "config": {
  2466. }
  2467. },
  2468. {
  2469. "alias": "delete_credential",
  2470. "name": "Delete Credential",
  2471. "providerId": "delete_credential",
  2472. "enabled": true,
  2473. "defaultAction": false,
  2474. "priority": 110,
  2475. "config": {
  2476. }
  2477. },
  2478. {
  2479. "alias": "idp_link",
  2480. "name": "Linking Identity Provider",
  2481. "providerId": "idp_link",
  2482. "enabled": true,
  2483. "defaultAction": false,
  2484. "priority": 120,
  2485. "config": {
  2486. }
  2487. },
  2488. {
  2489. "alias": "update_user_locale",
  2490. "name": "Update User Locale",
  2491. "providerId": "update_user_locale",
  2492. "enabled": true,
  2493. "defaultAction": false,
  2494. "priority": 1000,
  2495. "config": {
  2496. }
  2497. }
  2498. ],
  2499. "browserFlow": "browser",
  2500. "registrationFlow": "registration",
  2501. "directGrantFlow": "direct grant",
  2502. "resetCredentialsFlow": "reset credentials",
  2503. "clientAuthenticationFlow": "clients",
  2504. "dockerAuthenticationFlow": "docker auth",
  2505. "firstBrokerLoginFlow": "first broker login",
  2506. "attributes": {
  2507. "cibaBackchannelTokenDeliveryMode": "poll",
  2508. "cibaAuthRequestedUserHint": "login_hint",
  2509. "clientOfflineSessionMaxLifespan": "0",
  2510. "oauth2DevicePollingInterval": "5",
  2511. "clientSessionIdleTimeout": "0",
  2512. "clientOfflineSessionIdleTimeout": "0",
  2513. "cibaInterval": "5",
  2514. "realmReusableOtpCode": "false",
  2515. "cibaExpiresIn": "120",
  2516. "oauth2DeviceCodeLifespan": "600",
  2517. "parRequestUriLifespan": "60",
  2518. "clientSessionMaxLifespan": "0",
  2519. "frontendUrl": "",
  2520. "acr.loa.map": "{}",
  2521. "darkMode": "true"
  2522. },
  2523. "keycloakVersion": "26.5.6",
  2524. "userManagedAccessAllowed": false,
  2525. "organizationsEnabled": false,
  2526. "verifiableCredentialsEnabled": false,
  2527. "adminPermissionsEnabled": false,
  2528. "clientProfiles": {
  2529. "profiles": [
  2530. ]
  2531. },
  2532. "clientPolicies": {
  2533. "policies": [
  2534. ]
  2535. }
  2536. }