{ "id" : "jhipster", "realm" : "jhipster", "notBefore" : 0, "revokeRefreshToken" : false, "refreshTokenMaxReuse" : 0, "accessTokenLifespan" : 300, "accessTokenLifespanForImplicitFlow" : 900, "ssoSessionIdleTimeout" : 1800, "ssoSessionMaxLifespan" : 36000, "ssoSessionIdleTimeoutRememberMe" : 0, "ssoSessionMaxLifespanRememberMe" : 0, "offlineSessionIdleTimeout" : 2592000, "offlineSessionMaxLifespanEnabled" : false, "offlineSessionMaxLifespan" : 5184000, "accessCodeLifespan" : 60, "accessCodeLifespanUserAction" : 300, "accessCodeLifespanLogin" : 1800, "actionTokenGeneratedByAdminLifespan" : 43200, "actionTokenGeneratedByUserLifespan" : 300, "enabled" : true, "sslRequired" : "external", "registrationAllowed" : false, "registrationEmailAsUsername" : false, "rememberMe" : false, "verifyEmail" : false, "loginWithEmailAllowed" : true, "duplicateEmailsAllowed" : false, "resetPasswordAllowed" : false, "editUsernameAllowed" : false, "bruteForceProtected" : false, "permanentLockout" : false, "maxFailureWaitSeconds" : 900, "minimumQuickLoginWaitSeconds" : 60, "waitIncrementSeconds" : 60, "quickLoginCheckMilliSeconds" : 1000, "maxDeltaTimeSeconds" : 43200, "failureFactor" : 30, "roles" : { "realm" : [ { "id" : "2bc84b82-402d-4d13-aa2a-8ebe0101ccd8", "name" : "offline_access", "description" : "${role_offline-access}", "composite" : false, "clientRole" : false, "containerId" : "jhipster", "attributes" : { } }, { "id" : "a05e1619-aa02-453f-883d-b1add4717c0f", "name" : "uma_authorization", "description" : "${role_uma_authorization}", "composite" : false, "clientRole" : false, "containerId" : "jhipster", "attributes" : { } } ], "client" : { "realm-management" : [ { "id" : "c8199cf8-140b-4c22-80e0-5b248d213409", "name" : "manage-events", "description" : "${role_manage-events}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "cee94b96-d21d-4b85-bd75-7a67e5a1b21c", "name" : "manage-authorization", "description" : "${role_manage-authorization}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "2ee2e75c-60df-4de7-8e8a-66bb447d4b52", "name" : "impersonation", "description" : "${role_impersonation}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "f2d68c99-3424-4778-9192-8187f73d59f2", "name" : "create-client", "description" : "${role_create-client}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "0a6224da-0d51-49b1-8a13-33e3f79cb807", "name" : "manage-realm", "description" : "${role_manage-realm}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "10a59956-a344-4a5c-887d-ae896867c336", "name" : "manage-users", "description" : "${role_manage-users}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "746b743b-8677-42e2-9ff0-3a7d767de252", "name" : "query-realms", "description" : "${role_query-realms}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "ac8fbaf0-af79-4ec9-86d2-abec1ba63c44", "name" : "view-users", "description" : "${role_view-users}", "composite" : true, "composites" : { "client" : { "realm-management" : [ "query-groups", "query-users" ] } }, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "5c5dfefe-97cc-4971-a412-d8369621fc53", "name" : "query-users", "description" : "${role_query-users}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "c66fe4d1-6e0d-4273-97db-25786ed063e1", "name" : "view-clients", "description" : "${role_view-clients}", "composite" : true, "composites" : { "client" : { "realm-management" : [ "query-clients" ] } }, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "6e05801b-08c2-4dc4-87df-68367ca4fad3", "name" : "view-events", "description" : "${role_view-events}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "7d74c275-8c23-4aa1-b3b2-3f228f035fbe", "name" : "view-realm", "description" : "${role_view-realm}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "4f8441d1-3af2-4996-9429-1fe4c2da2fe4", "name" : "query-clients", "description" : "${role_query-clients}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "9c212912-32e6-4b46-9097-bed7c3e3c385", "name" : "view-authorization", "description" : "${role_view-authorization}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "d8e7c139-23a7-4378-98c0-39c78114cce5", "name" : "manage-clients", "description" : "${role_manage-clients}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "dc76af04-37e5-4256-961f-c46e73af87ed", "name" : "manage-identity-providers", "description" : "${role_manage-identity-providers}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "eecd0497-1b90-43a5-aa71-1c33d3ecb228", "name" : "query-groups", "description" : "${role_query-groups}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "91a440f1-ee90-4b15-9a97-f20c1a436f44", "name" : "view-identity-providers", "description" : "${role_view-identity-providers}", "composite" : false, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } }, { "id" : "b070e38e-9e70-4531-a9de-6412c370e405", "name" : "realm-admin", "description" : "${role_realm-admin}", "composite" : true, "composites" : { "client" : { "realm-management" : [ "manage-events", "manage-authorization", "impersonation", "create-client", "manage-realm", "manage-users", "query-realms", "view-users", "query-users", "view-events", "view-clients", "query-clients", "view-realm", "view-authorization", "manage-clients", "manage-identity-providers", "query-groups", "view-identity-providers" ] } }, "clientRole" : true, "containerId" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "attributes" : { } } ], "security-admin-console" : [ ], "web_app" : [ ], "admin-cli" : [ ], "broker" : [ { "id" : "882ae15c-c112-4c39-9433-71c95a709465", "name" : "read-token", "description" : "${role_read-token}", "composite" : false, "clientRole" : true, "containerId" : "e9b735b6-1b5e-4436-808c-570b732fdb4c", "attributes" : { } } ], "account" : [ { "id" : "9226c1e3-57ff-435f-9a3a-2b827768766a", "name" : "manage-account", "description" : "${role_manage-account}", "composite" : true, "composites" : { "client" : { "account" : [ "manage-account-links" ] } }, "clientRole" : true, "containerId" : "03e39ba7-b0ec-4ce6-8db4-c2a67ef3cc15", "attributes" : { } }, { "id" : "da817c93-0089-4944-a332-43efff19a4f8", "name" : "manage-account-links", "description" : "${role_manage-account-links}", "composite" : false, "clientRole" : true, "containerId" : "03e39ba7-b0ec-4ce6-8db4-c2a67ef3cc15", "attributes" : { } }, { "id" : "3996ec4f-bed4-4b69-8812-7c7aa2ef672e", "name" : "view-profile", "description" : "${role_view-profile}", "composite" : false, "clientRole" : true, "containerId" : "03e39ba7-b0ec-4ce6-8db4-c2a67ef3cc15", "attributes" : { } } ] } }, "groups" : [ ], "defaultRoles" : [ "offline_access", "uma_authorization" ], "requiredCredentials" : [ "password" ], "otpPolicyType" : "totp", "otpPolicyAlgorithm" : "HmacSHA1", "otpPolicyInitialCounter" : 0, "otpPolicyDigits" : 6, "otpPolicyLookAheadWindow" : 1, "otpPolicyPeriod" : 30, "otpSupportedApplications" : [ "FreeOTP", "Google Authenticator" ], "webAuthnPolicyRpEntityName" : "keycloak", "webAuthnPolicySignatureAlgorithms" : [ "ES256" ], "webAuthnPolicyRpId" : "", "webAuthnPolicyAttestationConveyancePreference" : "not specified", "webAuthnPolicyAuthenticatorAttachment" : "not specified", "webAuthnPolicyRequireResidentKey" : "not specified", "webAuthnPolicyUserVerificationRequirement" : "not specified", "webAuthnPolicyCreateTimeout" : 0, "webAuthnPolicyAvoidSameAuthenticatorRegister" : false, "webAuthnPolicyAcceptableAaguids" : [ ], "scopeMappings" : [ { "clientScope" : "offline_access", "roles" : [ "offline_access" ] } ], "clients" : [ { "id" : "03e39ba7-b0ec-4ce6-8db4-c2a67ef3cc15", "clientId" : "account", "name" : "${client_account}", "rootUrl" : "${authBaseUrl}", "baseUrl" : "/realms/jhipster/account/", "surrogateAuthRequired" : false, "enabled" : true, "clientAuthenticatorType" : "client-secret", "secret" : "**********", "defaultRoles" : [ "view-profile", "manage-account" ], "redirectUris" : [ "/realms/jhipster/account/*" ], "webOrigins" : [ ], "notBefore" : 0, "bearerOnly" : false, "consentRequired" : false, "standardFlowEnabled" : true, "implicitFlowEnabled" : false, "directAccessGrantsEnabled" : false, "serviceAccountsEnabled" : false, "publicClient" : false, "frontchannelLogout" : false, "protocol" : "openid-connect", "attributes" : { }, "authenticationFlowBindingOverrides" : { }, "fullScopeAllowed" : false, "nodeReRegistrationTimeout" : 0, "defaultClientScopes" : [ "web-origins", "role_list", "roles", "profile", "email" ], "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ] }, { "id" : "edd85ddc-eb35-430b-a804-b64392746316", "clientId" : "admin-cli", "name" : "${client_admin-cli}", "surrogateAuthRequired" : false, "enabled" : true, "clientAuthenticatorType" : "client-secret", "secret" : "**********", "redirectUris" : [ ], "webOrigins" : [ ], "notBefore" : 0, "bearerOnly" : false, "consentRequired" : false, "standardFlowEnabled" : false, "implicitFlowEnabled" : false, "directAccessGrantsEnabled" : true, "serviceAccountsEnabled" : false, "publicClient" : true, "frontchannelLogout" : false, "protocol" : "openid-connect", "attributes" : { }, "authenticationFlowBindingOverrides" : { }, "fullScopeAllowed" : false, "nodeReRegistrationTimeout" : 0, "defaultClientScopes" : [ "web-origins", "role_list", "roles", "profile", "email" ], "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ] }, { "id" : "e9b735b6-1b5e-4436-808c-570b732fdb4c", "clientId" : "broker", "name" : "${client_broker}", "surrogateAuthRequired" : false, "enabled" : true, "clientAuthenticatorType" : "client-secret", "secret" : "**********", "redirectUris" : [ ], "webOrigins" : [ ], "notBefore" : 0, "bearerOnly" : false, "consentRequired" : false, "standardFlowEnabled" : true, "implicitFlowEnabled" : false, "directAccessGrantsEnabled" : false, "serviceAccountsEnabled" : false, "publicClient" : false, "frontchannelLogout" : false, "protocol" : "openid-connect", "attributes" : { }, "authenticationFlowBindingOverrides" : { }, "fullScopeAllowed" : false, "nodeReRegistrationTimeout" : 0, "defaultClientScopes" : [ "web-origins", "role_list", "roles", "profile", "email" ], "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ] }, { "id" : "611cdda6-c6a2-4218-9520-958aadfb33e6", "clientId" : "realm-management", "name" : "${client_realm-management}", "surrogateAuthRequired" : false, "enabled" : true, "clientAuthenticatorType" : "client-secret", "secret" : "**********", "redirectUris" : [ ], "webOrigins" : [ ], "notBefore" : 0, "bearerOnly" : true, "consentRequired" : false, "standardFlowEnabled" : true, "implicitFlowEnabled" : false, "directAccessGrantsEnabled" : false, "serviceAccountsEnabled" : false, "publicClient" : false, "frontchannelLogout" : false, "protocol" : "openid-connect", "attributes" : { }, "authenticationFlowBindingOverrides" : { }, "fullScopeAllowed" : false, "nodeReRegistrationTimeout" : 0, "defaultClientScopes" : [ "web-origins", "role_list", "roles", "profile", "email" ], "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ] }, { "id" : "c7334efd-2997-4975-89cb-7942d3e62c42", "clientId" : "security-admin-console", "name" : "${client_security-admin-console}", "rootUrl" : "${authAdminUrl}", "baseUrl" : "/admin/jhipster/console/", "surrogateAuthRequired" : false, "enabled" : true, "clientAuthenticatorType" : "client-secret", "secret" : "**********", "redirectUris" : [ "/admin/jhipster/console/*" ], "webOrigins" : [ "+" ], "notBefore" : 0, "bearerOnly" : false, "consentRequired" : false, "standardFlowEnabled" : true, "implicitFlowEnabled" : false, "directAccessGrantsEnabled" : false, "serviceAccountsEnabled" : false, "publicClient" : true, "frontchannelLogout" : false, "protocol" : "openid-connect", "attributes" : { }, "authenticationFlowBindingOverrides" : { }, "fullScopeAllowed" : false, "nodeReRegistrationTimeout" : 0, "protocolMappers" : [ { "id" : "c8c4d5d0-75b5-44c0-8772-41363004b2e7", "name" : "locale", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "locale", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "locale", "jsonType.label" : "String" } } ], "defaultClientScopes" : [ "web-origins", "role_list", "roles", "profile", "email" ], "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ] }, { "id" : "75cd52f6-a66e-45ea-8001-2d8171b48c2f", "clientId" : "web_app", "rootUrl" : "http://localhost:8081", "adminUrl" : "http://localhost:8081", "baseUrl" : "http://localhost:8081", "surrogateAuthRequired" : false, "enabled" : true, "clientAuthenticatorType" : "client-secret", "secret" : "**********", "redirectUris" : [ "*" ], "webOrigins" : [ "http://localhost:8081" ], "notBefore" : 0, "bearerOnly" : false, "consentRequired" : false, "standardFlowEnabled" : true, "implicitFlowEnabled" : false, "directAccessGrantsEnabled" : true, "serviceAccountsEnabled" : false, "publicClient" : true, "frontchannelLogout" : false, "protocol" : "openid-connect", "attributes" : { "saml.assertion.signature" : "false", "saml.force.post.binding" : "false", "saml.multivalued.roles" : "false", "saml.encrypt" : "false", "saml.server.signature" : "false", "saml.server.signature.keyinfo.ext" : "false", "exclude.session.state.from.auth.response" : "false", "saml_force_name_id_format" : "false", "saml.client.signature" : "false", "tls.client.certificate.bound.access.tokens" : "false", "saml.authnstatement" : "false", "display.on.consent.screen" : "false", "saml.onetimeuse.condition" : "false" }, "authenticationFlowBindingOverrides" : { }, "fullScopeAllowed" : true, "nodeReRegistrationTimeout" : -1, "defaultClientScopes" : [ "web-origins", "role_list", "roles", "profile", "email" ], "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ] } ], "clientScopes" : [ { "id" : "989703f8-bd0b-44f4-96fc-fadfe7d5ef6f", "name" : "address", "description" : "OpenID Connect built-in scope: address", "protocol" : "openid-connect", "attributes" : { "include.in.token.scope" : "true", "display.on.consent.screen" : "true", "consent.screen.text" : "${addressScopeConsentText}" }, "protocolMappers" : [ { "id" : "45b53016-8978-40b8-b19d-35deb65274de", "name" : "address", "protocol" : "openid-connect", "protocolMapper" : "oidc-address-mapper", "consentRequired" : false, "config" : { "user.attribute.formatted" : "formatted", "user.attribute.country" : "country", "user.attribute.postal_code" : "postal_code", "userinfo.token.claim" : "true", "user.attribute.street" : "street", "id.token.claim" : "true", "user.attribute.region" : "region", "access.token.claim" : "true", "user.attribute.locality" : "locality" } } ] }, { "id" : "3299eda1-0575-4f02-a964-cac1bf7e9bba", "name" : "email", "description" : "OpenID Connect built-in scope: email", "protocol" : "openid-connect", "attributes" : { "include.in.token.scope" : "true", "display.on.consent.screen" : "true", "consent.screen.text" : "${emailScopeConsentText}" }, "protocolMappers" : [ { "id" : "17f06de2-e85a-4da8-a39a-5b4a8bef6599", "name" : "email", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-property-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "email", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "email", "jsonType.label" : "String" } }, { "id" : "4b9d719c-6404-4366-b13c-a1231cfb9c48", "name" : "email verified", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-property-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "emailVerified", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "email_verified", "jsonType.label" : "boolean" } } ] }, { "id" : "8eeb7956-4d13-42e8-a6bd-2631a8c86636", "name" : "microprofile-jwt", "description" : "Microprofile - JWT built-in scope", "protocol" : "openid-connect", "attributes" : { "include.in.token.scope" : "true", "display.on.consent.screen" : "false" }, "protocolMappers" : [ { "id" : "ddab6a8c-7f44-4e8c-9c01-fe3a25b4aab1", "name" : "upn", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-property-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "username", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "upn", "jsonType.label" : "String" } }, { "id" : "961aee39-5ada-4eac-b562-7c19dc31489a", "name" : "groups", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-realm-role-mapper", "consentRequired" : false, "config" : { "multivalued" : "true", "userinfo.token.claim" : "true", "user.attribute" : "foo", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "groups", "jsonType.label" : "String" } } ] }, { "id" : "302b9f57-2b33-41a2-a148-f7de92534d0c", "name" : "offline_access", "description" : "OpenID Connect built-in scope: offline_access", "protocol" : "openid-connect", "attributes" : { "consent.screen.text" : "${offlineAccessScopeConsentText}", "display.on.consent.screen" : "true" } }, { "id" : "a79a3335-cd1a-4018-84e7-c8307cd4eb39", "name" : "phone", "description" : "OpenID Connect built-in scope: phone", "protocol" : "openid-connect", "attributes" : { "include.in.token.scope" : "true", "display.on.consent.screen" : "true", "consent.screen.text" : "${phoneScopeConsentText}" }, "protocolMappers" : [ { "id" : "170c18c8-0d59-4c5c-9d0e-3d4cb0d4c952", "name" : "phone number verified", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "phoneNumberVerified", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "phone_number_verified", "jsonType.label" : "boolean" } }, { "id" : "4b7d4236-465c-4d3c-a9ce-8fc5ff460f80", "name" : "phone number", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "phoneNumber", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "phone_number", "jsonType.label" : "String" } } ] }, { "id" : "b6a364ae-f751-401c-a8c1-be797a2b617b", "name" : "profile", "description" : "OpenID Connect built-in scope: profile", "protocol" : "openid-connect", "attributes" : { "include.in.token.scope" : "true", "display.on.consent.screen" : "true", "consent.screen.text" : "${profileScopeConsentText}" }, "protocolMappers" : [ { "id" : "94a85ac7-7f27-4e4b-a5b5-3afdce6fb3c9", "name" : "nickname", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "nickname", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "nickname", "jsonType.label" : "String" } }, { "id" : "49f1aab6-52b6-43a7-8398-6fa9810037fc", "name" : "gender", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "gender", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "gender", "jsonType.label" : "String" } }, { "id" : "2bce6e88-8d3a-414e-8929-ba10710b649d", "name" : "zoneinfo", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "zoneinfo", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "zoneinfo", "jsonType.label" : "String" } }, { "id" : "809a2d37-a7a2-4d16-b919-4e2a57f86ea8", "name" : "birthdate", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "birthdate", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "birthdate", "jsonType.label" : "String" } }, { "id" : "a5bc14d2-954c-4034-9b66-1ca6fe50cec3", "name" : "locale", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "locale", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "locale", "jsonType.label" : "String" } }, { "id" : "32bfa83a-8985-4552-856b-e90a546cd5c4", "name" : "updated at", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "updatedAt", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "updated_at", "jsonType.label" : "String" } }, { "id" : "079d267d-2c62-498a-ac6b-5aa56c0e2adf", "name" : "middle name", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "middleName", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "middle_name", "jsonType.label" : "String" } }, { "id" : "120fc1e6-8eb8-42b3-81b5-f6f5c0c5427d", "name" : "website", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "website", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "website", "jsonType.label" : "String" } }, { "id" : "e9c78ca4-a200-4e86-bfb4-a4c9330e3c9a", "name" : "profile", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "profile", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "profile", "jsonType.label" : "String" } }, { "id" : "46b5ff64-eb8a-4062-b153-8eecc8958505", "name" : "given name", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-property-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "firstName", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "given_name", "jsonType.label" : "String" } }, { "id" : "09d593fd-5a7e-4e93-86ef-a6398cbcfc64", "name" : "username", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-property-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "username", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "preferred_username", "jsonType.label" : "String" } }, { "id" : "c5e0abdb-59df-4459-ac41-a9492f74ee61", "name" : "family name", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-property-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "lastName", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "family_name", "jsonType.label" : "String" } }, { "id" : "5090a3bb-5f5c-49d8-99ab-95d3f0183ff1", "name" : "picture", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-attribute-mapper", "consentRequired" : false, "config" : { "userinfo.token.claim" : "true", "user.attribute" : "picture", "id.token.claim" : "true", "access.token.claim" : "true", "claim.name" : "picture", "jsonType.label" : "String" } }, { "id" : "12e24b60-dd5f-4f1f-b246-dff45966e3d8", "name" : "full name", "protocol" : "openid-connect", "protocolMapper" : "oidc-full-name-mapper", "consentRequired" : false, "config" : { "id.token.claim" : "true", "access.token.claim" : "true", "userinfo.token.claim" : "true" } } ] }, { "id" : "a31c2abe-92e0-464d-9946-f0c9f5109867", "name" : "role_list", "description" : "SAML role list", "protocol" : "saml", "attributes" : { "consent.screen.text" : "${samlRoleListScopeConsentText}", "display.on.consent.screen" : "true" }, "protocolMappers" : [ { "id" : "8c802ea6-4aab-4211-aa21-d822dcab92b8", "name" : "role list", "protocol" : "saml", "protocolMapper" : "saml-role-list-mapper", "consentRequired" : false, "config" : { "single" : "false", "attribute.nameformat" : "Basic", "attribute.name" : "Role" } } ] }, { "id" : "8d40a94d-7354-4e80-b1e3-529c067dbc31", "name" : "roles", "description" : "OpenID Connect scope for add user roles to the access token", "protocol" : "openid-connect", "attributes" : { "include.in.token.scope" : "false", "display.on.consent.screen" : "true", "consent.screen.text" : "${rolesScopeConsentText}" }, "protocolMappers" : [ { "id" : "6743a69a-c25a-4416-9081-e33bef148f17", "name" : "client roles", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-client-role-mapper", "consentRequired" : false, "config" : { "user.attribute" : "foo", "access.token.claim" : "true", "claim.name" : "resource_access.${client_id}.roles", "jsonType.label" : "String", "multivalued" : "true" } }, { "id" : "582c95cb-a89a-48f0-8d3a-b71afba29af1", "name" : "realm roles", "protocol" : "openid-connect", "protocolMapper" : "oidc-usermodel-realm-role-mapper", "consentRequired" : false, "config" : { "user.attribute" : "foo", "access.token.claim" : "true", "claim.name" : "realm_access.roles", "jsonType.label" : "String", "multivalued" : "true" } }, { "id" : "94c41f1e-41fa-480e-a609-9d110b670d39", "name" : "audience resolve", "protocol" : "openid-connect", "protocolMapper" : "oidc-audience-resolve-mapper", "consentRequired" : false, "config" : { } } ] }, { "id" : "6311d8fd-dffa-4b84-86a4-e8e86ffb74bc", "name" : "web-origins", "description" : "OpenID Connect scope for add allowed web origins to the access token", "protocol" : "openid-connect", "attributes" : { "include.in.token.scope" : "false", "display.on.consent.screen" : "false", "consent.screen.text" : "" }, "protocolMappers" : [ { "id" : "d7eaf422-e000-470d-92ed-a1ee7af53757", "name" : "allowed web origins", "protocol" : "openid-connect", "protocolMapper" : "oidc-allowed-origins-mapper", "consentRequired" : false, "config" : { } } ] } ], "defaultDefaultClientScopes" : [ "email", "web-origins", "roles", "role_list", "profile" ], "defaultOptionalClientScopes" : [ "offline_access", "microprofile-jwt", "address", "phone" ], "browserSecurityHeaders" : { "contentSecurityPolicyReportOnly" : "", "xContentTypeOptions" : "nosniff", "xRobotsTag" : "none", "xFrameOptions" : "SAMEORIGIN", "contentSecurityPolicy" : "frame-src 'self'; frame-ancestors 'self'; object-src 'none';", "xXSSProtection" : "1; mode=block", "strictTransportSecurity" : "max-age=31536000; includeSubDomains" }, "smtpServer" : { }, "eventsEnabled" : false, "eventsListeners" : [ "jboss-logging" ], "enabledEventTypes" : [ ], "adminEventsEnabled" : false, "adminEventsDetailsEnabled" : false, "components" : { "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy" : [ { "id" : "cea05f27-df32-4c47-a444-3cab7349d00a", "name" : "Allowed Client Scopes", "providerId" : "allowed-client-templates", "subType" : "authenticated", "subComponents" : { }, "config" : { "allow-default-scopes" : [ "true" ] } }, { "id" : "87d6cad0-5ab1-4874-bd5b-0d8985782125", "name" : "Consent Required", "providerId" : "consent-required", "subType" : "anonymous", "subComponents" : { }, "config" : { } }, { "id" : "77d3dcd3-0817-41dc-a84d-903c51268913", "name" : "Allowed Client Scopes", "providerId" : "allowed-client-templates", "subType" : "anonymous", "subComponents" : { }, "config" : { "allow-default-scopes" : [ "true" ] } }, { "id" : "44457f83-1f8f-4a20-b1eb-45b3779a91c9", "name" : "Trusted Hosts", "providerId" : "trusted-hosts", "subType" : "anonymous", "subComponents" : { }, "config" : { "host-sending-registration-request-must-match" : [ "true" ], "client-uris-must-match" : [ "true" ] } }, { "id" : "d29c8215-84c1-4a70-ace3-6277bf39aba2", "name" : "Max Clients Limit", "providerId" : "max-clients", "subType" : "anonymous", "subComponents" : { }, "config" : { "max-clients" : [ "200" ] } }, { "id" : "abfae6e8-a790-4a75-9ac5-5d832096febb", "name" : "Allowed Protocol Mapper Types", "providerId" : "allowed-protocol-mappers", "subType" : "anonymous", "subComponents" : { }, "config" : { "allowed-protocol-mapper-types" : [ "saml-user-attribute-mapper", "saml-user-property-mapper", "oidc-usermodel-property-mapper", "oidc-full-name-mapper", "oidc-sha256-pairwise-sub-mapper", "oidc-usermodel-attribute-mapper", "oidc-address-mapper", "saml-role-list-mapper" ] } }, { "id" : "9d4b8848-5e7d-4102-8eae-4838ce35aeac", "name" : "Full Scope Disabled", "providerId" : "scope", "subType" : "anonymous", "subComponents" : { }, "config" : { } }, { "id" : "f0612b69-722e-4332-a0b9-cabc282a0ec0", "name" : "Allowed Protocol Mapper Types", "providerId" : "allowed-protocol-mappers", "subType" : "authenticated", "subComponents" : { }, "config" : { "allowed-protocol-mapper-types" : [ "saml-role-list-mapper", "saml-user-property-mapper", "oidc-sha256-pairwise-sub-mapper", "oidc-usermodel-property-mapper", "oidc-usermodel-attribute-mapper", "oidc-full-name-mapper", "saml-user-attribute-mapper", "oidc-address-mapper" ] } } ], "org.keycloak.keys.KeyProvider" : [ { "id" : "139136d9-540a-433a-81ce-e76d125683a4", "name" : "hmac-generated", "providerId" : "hmac-generated", "subComponents" : { }, "config" : { "kid" : [ "bffd0fb4-54eb-4f1a-a493-1237da6a5732" ], "secret" : [ "EzU3xewdKZxiJHL3j8rCB9Nb4GiHA0izNj7IPZbdx1IXiAUg6HtRF2hXMRsPTAmnVrhLvLzcdL5T-arlfVcQ5A" ], "priority" : [ "100" ], "algorithm" : [ "HS256" ] } }, { "id" : "84351cc5-dcc2-444f-b0ee-c79c999fbbbc", "name" : "aes-generated", "providerId" : "aes-generated", "subComponents" : { }, "config" : { "kid" : [ "7ec333af-999b-4fa3-9c55-94dd924e3494" ], "secret" : [ "LQiwbttUAZdfe-4CdNGa3A" ], "priority" : [ "100" ] } }, { "id" : "a13b688e-f8ee-4d6b-a825-6e186a2272f0", "name" : "rsa-generated", "providerId" : "rsa-generated", "subComponents" : { }, "config" : { "privateKey" : [ "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" ], "certificate" : [ "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" ], "priority" : [ "100" ] } } ] }, "internationalizationEnabled" : false, "supportedLocales" : [ ], "authenticationFlows" : [ { "id" : "ce62115b-c3e0-498c-a6b8-596d24d1156f", "alias" : "Account verification options", "description" : "Method with which to verity the existing account", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "idp-email-verification", "requirement" : "ALTERNATIVE", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "ALTERNATIVE", "priority" : 20, "flowAlias" : "Verify Existing Account by Re-authentication", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "9a94f4e2-9c10-4516-bc73-221f9c25fad6", "alias" : "Authentication Options", "description" : "Authentication options.", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "basic-auth", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "basic-auth-otp", "requirement" : "DISABLED", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "auth-spnego", "requirement" : "DISABLED", "priority" : 30, "userSetupAllowed" : false, "autheticatorFlow" : false } ] }, { "id" : "bdc4c79b-38d6-4283-a6a3-7c41442b6dde", "alias" : "Browser - Conditional OTP", "description" : "Flow to determine if the OTP is required for the authentication", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "conditional-user-configured", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "auth-otp-form", "requirement" : "REQUIRED", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false } ] }, { "id" : "6902a4f8-2c67-43a0-b16c-04d10446230d", "alias" : "Direct Grant - Conditional OTP", "description" : "Flow to determine if the OTP is required for the authentication", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "conditional-user-configured", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "direct-grant-validate-otp", "requirement" : "REQUIRED", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false } ] }, { "id" : "3727773d-c0d2-4413-9200-1cc3a15a2fac", "alias" : "First broker login - Conditional OTP", "description" : "Flow to determine if the OTP is required for the authentication", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "conditional-user-configured", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "auth-otp-form", "requirement" : "REQUIRED", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false } ] }, { "id" : "6feeb9d0-5145-4a38-b7b6-7eb385d8227a", "alias" : "Handle Existing Account", "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "idp-confirm-link", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "REQUIRED", "priority" : 20, "flowAlias" : "Account verification options", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "ed69c4e8-b74e-4f97-b239-dcf86bc814be", "alias" : "Reset - Conditional OTP", "description" : "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "conditional-user-configured", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "reset-otp", "requirement" : "REQUIRED", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false } ] }, { "id" : "e9f461af-5b51-4509-a2f9-1c48c2700f3a", "alias" : "User creation or linking", "description" : "Flow for the existing/non-existing user alternatives", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticatorConfig" : "create unique user config", "authenticator" : "idp-create-user-if-unique", "requirement" : "ALTERNATIVE", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "ALTERNATIVE", "priority" : 20, "flowAlias" : "Handle Existing Account", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "0b6b14c6-616c-4449-90eb-e4705ea4d2a6", "alias" : "Verify Existing Account by Re-authentication", "description" : "Reauthentication of existing account", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "idp-username-password-form", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "CONDITIONAL", "priority" : 20, "flowAlias" : "First broker login - Conditional OTP", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "824dffba-b8ef-40c3-a86a-058a80a837ec", "alias" : "browser", "description" : "browser based authentication", "providerId" : "basic-flow", "topLevel" : true, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "auth-cookie", "requirement" : "ALTERNATIVE", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "auth-spnego", "requirement" : "DISABLED", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "identity-provider-redirector", "requirement" : "ALTERNATIVE", "priority" : 25, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "ALTERNATIVE", "priority" : 30, "flowAlias" : "forms", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "8e0f676a-2d8c-4c09-982a-7dd9edf3ba61", "alias" : "clients", "description" : "Base authentication for clients", "providerId" : "client-flow", "topLevel" : true, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "client-secret", "requirement" : "ALTERNATIVE", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "client-jwt", "requirement" : "ALTERNATIVE", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "client-secret-jwt", "requirement" : "ALTERNATIVE", "priority" : 30, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "client-x509", "requirement" : "ALTERNATIVE", "priority" : 40, "userSetupAllowed" : false, "autheticatorFlow" : false } ] }, { "id" : "ec58257b-e3dd-43f8-a16e-334aa088daf9", "alias" : "direct grant", "description" : "OpenID Connect Resource Owner Grant", "providerId" : "basic-flow", "topLevel" : true, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "direct-grant-validate-username", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "direct-grant-validate-password", "requirement" : "REQUIRED", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "CONDITIONAL", "priority" : 30, "flowAlias" : "Direct Grant - Conditional OTP", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "02494a31-b20a-4889-b999-acadf0d248fc", "alias" : "docker auth", "description" : "Used by Docker clients to authenticate against the IDP", "providerId" : "basic-flow", "topLevel" : true, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "docker-http-basic-authenticator", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false } ] }, { "id" : "fd2d645f-b992-4d23-82e0-f3489c2083b1", "alias" : "first broker login", "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account", "providerId" : "basic-flow", "topLevel" : true, "builtIn" : true, "authenticationExecutions" : [ { "authenticatorConfig" : "review profile config", "authenticator" : "idp-review-profile", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "REQUIRED", "priority" : 20, "flowAlias" : "User creation or linking", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "714a74ee-bad6-4fe7-b5a7-ee7d8fe4d8fb", "alias" : "forms", "description" : "Username, password, otp and other auth forms.", "providerId" : "basic-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "auth-username-password-form", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "CONDITIONAL", "priority" : 20, "flowAlias" : "Browser - Conditional OTP", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "1f70aaea-78fc-4c6a-86c5-3c35811662b5", "alias" : "http challenge", "description" : "An authentication flow based on challenge-response HTTP Authentication Schemes", "providerId" : "basic-flow", "topLevel" : true, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "no-cookie-redirect", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "REQUIRED", "priority" : 20, "flowAlias" : "Authentication Options", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "7c2e79c6-e46b-4d90-aa86-687091ac2caf", "alias" : "registration", "description" : "registration flow", "providerId" : "basic-flow", "topLevel" : true, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "registration-page-form", "requirement" : "REQUIRED", "priority" : 10, "flowAlias" : "registration form", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "23053708-3096-45be-a1ff-2177149efd4a", "alias" : "registration form", "description" : "registration form", "providerId" : "form-flow", "topLevel" : false, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "registration-user-creation", "requirement" : "REQUIRED", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "registration-profile-action", "requirement" : "REQUIRED", "priority" : 40, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "registration-password-action", "requirement" : "REQUIRED", "priority" : 50, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "registration-recaptcha-action", "requirement" : "DISABLED", "priority" : 60, "userSetupAllowed" : false, "autheticatorFlow" : false } ] }, { "id" : "068a63f2-74f9-456f-8308-7d4b94577704", "alias" : "reset credentials", "description" : "Reset credentials for a user if they forgot their password or something", "providerId" : "basic-flow", "topLevel" : true, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "reset-credentials-choose-user", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "reset-credential-email", "requirement" : "REQUIRED", "priority" : 20, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "authenticator" : "reset-password", "requirement" : "REQUIRED", "priority" : 30, "userSetupAllowed" : false, "autheticatorFlow" : false }, { "requirement" : "CONDITIONAL", "priority" : 40, "flowAlias" : "Reset - Conditional OTP", "userSetupAllowed" : false, "autheticatorFlow" : true } ] }, { "id" : "3683f54c-d615-4c01-8d23-85fff9e8efbe", "alias" : "saml ecp", "description" : "SAML ECP Profile Authentication Flow", "providerId" : "basic-flow", "topLevel" : true, "builtIn" : true, "authenticationExecutions" : [ { "authenticator" : "http-basic-authenticator", "requirement" : "REQUIRED", "priority" : 10, "userSetupAllowed" : false, "autheticatorFlow" : false } ] } ], "authenticatorConfig" : [ { "id" : "d279242d-de94-4447-90cd-ae4c40420af8", "alias" : "create unique user config", "config" : { "require.password.update.after.registration" : "false" } }, { "id" : "d56bcad0-36ea-4ac9-9077-a7391eb7e84f", "alias" : "review profile config", "config" : { "update.profile.on.first.login" : "missing" } } ], "requiredActions" : [ { "alias" : "CONFIGURE_TOTP", "name" : "Configure OTP", "providerId" : "CONFIGURE_TOTP", "enabled" : true, "defaultAction" : false, "priority" : 10, "config" : { } }, { "alias" : "terms_and_conditions", "name" : "Terms and Conditions", "providerId" : "terms_and_conditions", "enabled" : false, "defaultAction" : false, "priority" : 20, "config" : { } }, { "alias" : "UPDATE_PASSWORD", "name" : "Update Password", "providerId" : "UPDATE_PASSWORD", "enabled" : true, "defaultAction" : false, "priority" : 30, "config" : { } }, { "alias" : "UPDATE_PROFILE", "name" : "Update Profile", "providerId" : "UPDATE_PROFILE", "enabled" : true, "defaultAction" : false, "priority" : 40, "config" : { } }, { "alias" : "VERIFY_EMAIL", "name" : "Verify Email", "providerId" : "VERIFY_EMAIL", "enabled" : true, "defaultAction" : false, "priority" : 50, "config" : { } } ], "browserFlow" : "browser", "registrationFlow" : "registration", "directGrantFlow" : "direct grant", "resetCredentialsFlow" : "reset credentials", "clientAuthenticationFlow" : "clients", "dockerAuthenticationFlow" : "docker auth", "attributes" : { "webAuthnPolicyAuthenticatorAttachment" : "not specified", "_browser_header.xRobotsTag" : "none", "webAuthnPolicyRpEntityName" : "keycloak", "failureFactor" : "30", "actionTokenGeneratedByUserLifespan" : "300", "maxDeltaTimeSeconds" : "43200", "webAuthnPolicySignatureAlgorithms" : "ES256", "offlineSessionMaxLifespan" : "5184000", "_browser_header.contentSecurityPolicyReportOnly" : "", "bruteForceProtected" : "false", "_browser_header.contentSecurityPolicy" : "frame-src 'self'; frame-ancestors 'self'; object-src 'none';", "_browser_header.xXSSProtection" : "1; mode=block", "_browser_header.xFrameOptions" : "SAMEORIGIN", "_browser_header.strictTransportSecurity" : "max-age=31536000; includeSubDomains", "webAuthnPolicyUserVerificationRequirement" : "not specified", "permanentLockout" : "false", "quickLoginCheckMilliSeconds" : "1000", "webAuthnPolicyCreateTimeout" : "0", "webAuthnPolicyRequireResidentKey" : "not specified", "webAuthnPolicyRpId" : "", "webAuthnPolicyAttestationConveyancePreference" : "not specified", "maxFailureWaitSeconds" : "900", "minimumQuickLoginWaitSeconds" : "60", "webAuthnPolicyAvoidSameAuthenticatorRegister" : "false", "_browser_header.xContentTypeOptions" : "nosniff", "actionTokenGeneratedByAdminLifespan" : "43200", "waitIncrementSeconds" : "60", "offlineSessionMaxLifespanEnabled" : "false" }, "keycloakVersion" : "8.0.1", "userManagedAccessAllowed" : false }