{ "id": "jhipster", "realm": "jhipster", "notBefore": 0, "revokeRefreshToken": false, "refreshTokenMaxReuse": 0, "accessTokenLifespan": 300, "accessTokenLifespanForImplicitFlow": 900, "ssoSessionIdleTimeout": 1800, "ssoSessionMaxLifespan": 36000, "ssoSessionIdleTimeoutRememberMe": 0, "ssoSessionMaxLifespanRememberMe": 0, "offlineSessionIdleTimeout": 2592000, "offlineSessionMaxLifespanEnabled": false, "offlineSessionMaxLifespan": 5184000, "clientSessionIdleTimeout": 0, "clientSessionMaxLifespan": 0, "accessCodeLifespan": 60, "accessCodeLifespanUserAction": 300, "accessCodeLifespanLogin": 1800, "actionTokenGeneratedByAdminLifespan": 43200, "actionTokenGeneratedByUserLifespan": 300, "enabled": true, "sslRequired": "external", "registrationAllowed": false, "registrationEmailAsUsername": false, "rememberMe": false, "verifyEmail": false, "loginWithEmailAllowed": true, "duplicateEmailsAllowed": false, "resetPasswordAllowed": false, "editUsernameAllowed": false, "bruteForceProtected": false, "permanentLockout": false, "maxFailureWaitSeconds": 900, "minimumQuickLoginWaitSeconds": 60, "waitIncrementSeconds": 60, "quickLoginCheckMilliSeconds": 1000, "maxDeltaTimeSeconds": 43200, "failureFactor": 30, "roles": { "realm": [ { "id": "a2350d85-938e-440c-847c-35086fe0f1d8", "name": "ROLE_ADMIN", "description": "Jhipster administrator role", "composite": false, "clientRole": false, "containerId": "jhipster", "attributes": {} }, { "id": "932ca70d-a311-42f9-9042-431cef835b9e", "name": "offline_access", "description": "${role_offline-access}", "composite": false, "clientRole": false, "containerId": "jhipster", "attributes": {} }, { "id": "8b1a0e78-24be-49ed-bc74-6471bd8d0f8f", "name": "ROLE_USER", "description": "Jhipster user role", "composite": false, "clientRole": false, "containerId": "jhipster", "attributes": {} }, { "id": "96c0124c-0f00-4769-8cd3-f7dfd74a0af3", "name": "uma_authorization", "description": "${role_uma_authorization}", "composite": false, "clientRole": false, "containerId": "jhipster", "attributes": {} } ], "client": { "internal": [ { "id": "6ceaaca5-30a4-444b-9078-723b7cc13591", "name": "uma_protection", "composite": false, "clientRole": true, "containerId": "98ae8603-4547-4218-8fb9-ebc550a0e10b", "attributes": {} } ], "realm-management": [ { "id": "2f58d746-0582-47fe-9b67-30809d5ad461", "name": "query-users", "description": "${role_query-users}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "4873b8a8-8035-4b5e-bdd9-99ac74a4a43b", "name": "query-clients", "description": "${role_query-clients}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "5aa18f9b-2fb1-4edb-bdde-fb79273eee38", "name": "view-events", "description": "${role_view-events}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "84752518-6f2f-451f-ab59-de3ce6674ba1", "name": "view-users", "description": "${role_view-users}", "composite": true, "composites": { "client": { "realm-management": ["query-users", "query-groups"] } }, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "c9fb6965-e734-46b4-a174-fa9d1fb7e1cc", "name": "manage-events", "description": "${role_manage-events}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "42abef51-b33b-4eb3-8515-3c6b16ca3849", "name": "manage-identity-providers", "description": "${role_manage-identity-providers}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "a3f9ba91-6ed5-47ff-a1cc-384c00cc203d", "name": "impersonation", "description": "${role_impersonation}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "24493c26-5ea3-4e53-b949-ca27a06ff098", "name": "manage-users", "description": "${role_manage-users}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "24ba1589-1141-4836-91bb-ad1b10db4944", "name": "create-client", "description": "${role_create-client}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "38cbec3e-9ca1-4292-a513-09e86fdcf6b1", "name": "view-identity-providers", "description": "${role_view-identity-providers}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "2d8a0ec8-111b-41a2-bf49-7f1ae086c5b1", "name": "manage-realm", "description": "${role_manage-realm}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "4ee94804-bc06-4d02-8541-410768b88a49", "name": "manage-authorization", "description": "${role_manage-authorization}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "3774414f-db0d-4928-b080-f22599622e97", "name": "manage-clients", "description": "${role_manage-clients}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "2a54d26e-7a55-4fc9-92cb-45e613084562", "name": "view-realm", "description": "${role_view-realm}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "8fdff21b-f46c-407c-b566-ce4fcc4c51d4", "name": "view-authorization", "description": "${role_view-authorization}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "083a848a-49cb-457f-9615-120be8c74d9e", "name": "realm-admin", "description": "${role_realm-admin}", "composite": true, "composites": { "client": { "realm-management": [ "query-users", "query-clients", "view-events", "view-users", "manage-events", "manage-identity-providers", "impersonation", "manage-users", "create-client", "manage-realm", "view-identity-providers", "manage-authorization", "manage-clients", "view-realm", "view-authorization", "view-clients", "query-realms", "query-groups" ] } }, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "11bc32e5-55a6-431d-b6c7-32bd9504d070", "name": "view-clients", "description": "${role_view-clients}", "composite": true, "composites": { "client": { "realm-management": ["query-clients"] } }, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "5ea73aac-d0cf-4303-87a4-c9d7f5852734", "name": "query-realms", "description": "${role_query-realms}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} }, { "id": "8018bd1e-0b43-4b0c-8e5a-fbf31f8ee6db", "name": "query-groups", "description": "${role_query-groups}", "composite": false, "clientRole": true, "containerId": "48fb7988-d909-445a-81db-fe825dca0db2", "attributes": {} } ], "security-admin-console": [], "web_app": [], "admin-cli": [], "account-console": [], "broker": [ { "id": "225066d4-4a07-4550-a851-3d9359cbbac2", "name": "read-token", "description": "${role_read-token}", "composite": false, "clientRole": true, "containerId": "274afcdb-7742-4a3a-acc5-17db61a4d200", "attributes": {} } ], "account": [ { "id": "42dcf4f5-8f73-4907-bd90-669cccd66c23", "name": "manage-consent", "description": "${role_manage-consent}", "composite": true, "composites": { "client": { "account": ["view-consent"] } }, "clientRole": true, "containerId": "e07da50b-cddc-4524-b630-436a5a6ba8ab", "attributes": {} }, { "id": "354b3a09-47a6-4051-957c-c6a3ee28a190", "name": "view-profile", "description": "${role_view-profile}", "composite": false, "clientRole": true, "containerId": "e07da50b-cddc-4524-b630-436a5a6ba8ab", "attributes": {} }, { "id": "8d650dc2-d0e7-4ad7-8193-3ce1b7361b02", "name": "manage-account-links", "description": "${role_manage-account-links}", "composite": false, "clientRole": true, "containerId": "e07da50b-cddc-4524-b630-436a5a6ba8ab", "attributes": {} }, { "id": "21b65e52-b4e3-453e-b0f0-10a44a4a887d", "name": "manage-account", "description": "${role_manage-account}", "composite": true, "composites": { "client": { "account": ["manage-account-links"] } }, "clientRole": true, "containerId": "e07da50b-cddc-4524-b630-436a5a6ba8ab", "attributes": {} }, { "id": "5328d093-e39c-4a2d-b664-01ed54505337", "name": "view-applications", "description": "${role_view-applications}", "composite": false, "clientRole": true, "containerId": "e07da50b-cddc-4524-b630-436a5a6ba8ab", "attributes": {} }, { "id": "91f398b2-23a0-4cd3-8bc0-c3097df0e1e5", "name": "view-consent", "description": "${role_view-consent}", "composite": false, "clientRole": true, "containerId": "e07da50b-cddc-4524-b630-436a5a6ba8ab", "attributes": {} } ] } }, "groups": [ { "id": "c4255caa-6cf7-40fb-8d5a-1b8799a438b8", "name": "Admins", "path": "/Admins", "attributes": {}, "realmRoles": ["ROLE_ADMIN"], "clientRoles": {}, "subGroups": [] }, { "id": "ab0947d8-3b91-42a0-81e7-953a3c207316", "name": "Users", "path": "/Users", "attributes": {}, "realmRoles": ["ROLE_USER"], "clientRoles": {}, "subGroups": [] } ], "defaultRoles": ["offline_access", "uma_authorization"], "requiredCredentials": ["password"], "otpPolicyType": "totp", "otpPolicyAlgorithm": "HmacSHA1", "otpPolicyInitialCounter": 0, "otpPolicyDigits": 6, "otpPolicyLookAheadWindow": 1, "otpPolicyPeriod": 30, "otpSupportedApplications": ["FreeOTP", "Google Authenticator"], "webAuthnPolicyRpEntityName": "keycloak", "webAuthnPolicySignatureAlgorithms": ["ES256"], "webAuthnPolicyRpId": "", "webAuthnPolicyAttestationConveyancePreference": "not specified", "webAuthnPolicyAuthenticatorAttachment": "not specified", "webAuthnPolicyRequireResidentKey": "not specified", "webAuthnPolicyUserVerificationRequirement": "not specified", "webAuthnPolicyCreateTimeout": 0, "webAuthnPolicyAvoidSameAuthenticatorRegister": false, "webAuthnPolicyAcceptableAaguids": [], "webAuthnPolicyPasswordlessRpEntityName": "keycloak", "webAuthnPolicyPasswordlessSignatureAlgorithms": ["ES256"], "webAuthnPolicyPasswordlessRpId": "", "webAuthnPolicyPasswordlessAttestationConveyancePreference": "not specified", "webAuthnPolicyPasswordlessAuthenticatorAttachment": "not specified", "webAuthnPolicyPasswordlessRequireResidentKey": "not specified", "webAuthnPolicyPasswordlessUserVerificationRequirement": "not specified", "webAuthnPolicyPasswordlessCreateTimeout": 0, "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister": false, "webAuthnPolicyPasswordlessAcceptableAaguids": [], "users": [ { "id": "7e26ba47-6ff0-42ed-a425-ecaf01d121af", "createdTimestamp": 1588436272389, "username": "service-account-internal", "enabled": true, "totp": false, "emailVerified": false, "serviceAccountClientId": "internal", "disableableCredentialTypes": [], "requiredActions": [], "realmRoles": ["offline_access", "uma_authorization"], "clientRoles": { "internal": ["uma_protection"], "account": ["view-profile", "manage-account"] }, "notBefore": 0, "groups": [] } ], "scopeMappings": [ { "clientScope": "offline_access", "roles": ["offline_access"] } ], "clientScopeMappings": { "account": [ { "client": "account-console", "roles": ["manage-account"] } ] }, "clients": [ { "id": "e07da50b-cddc-4524-b630-436a5a6ba8ab", "clientId": "account", "name": "${client_account}", "rootUrl": "${authBaseUrl}", "baseUrl": "/realms/jhipster/account/", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "secret": "**********", "defaultRoles": ["manage-account", "view-profile"], "redirectUris": ["/realms/jhipster/account/*"], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": false, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": {}, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": false, "nodeReRegistrationTimeout": 0, "defaultClientScopes": ["web-origins", "role_list", "roles", "profile", "email"], "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"] }, { "id": "7b6ab455-242e-42aa-96d8-9c9e2b74da9d", "clientId": "account-console", "name": "${client_account-console}", "rootUrl": "${authBaseUrl}", "baseUrl": "/realms/jhipster/account/", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "secret": "**********", "redirectUris": ["/realms/jhipster/account/*"], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": true, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "pkce.code.challenge.method": "S256" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": false, "nodeReRegistrationTimeout": 0, "protocolMappers": [ { "id": "013df1b5-9a5b-44f2-a0b6-5bf6d448556b", "name": "audience resolve", "protocol": "openid-connect", "protocolMapper": "oidc-audience-resolve-mapper", "consentRequired": false, "config": {} } ], "defaultClientScopes": ["web-origins", "role_list", "roles", "profile", "email"], "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"] }, { "id": "5a9610bf-6a47-46a1-9442-9e43eacd98e8", "clientId": "admin-cli", "name": "${client_admin-cli}", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "secret": "**********", "redirectUris": [], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": false, "implicitFlowEnabled": false, "directAccessGrantsEnabled": true, "serviceAccountsEnabled": false, "publicClient": true, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": {}, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": false, "nodeReRegistrationTimeout": 0, "defaultClientScopes": ["web-origins", "role_list", "roles", "profile", "email"], "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"] }, { "id": "274afcdb-7742-4a3a-acc5-17db61a4d200", "clientId": "broker", "name": "${client_broker}", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "secret": "**********", "redirectUris": [], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": false, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": {}, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": false, "nodeReRegistrationTimeout": 0, "defaultClientScopes": ["web-origins", "role_list", "roles", "profile", "email"], "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"] }, { "id": "98ae8603-4547-4218-8fb9-ebc550a0e10b", "clientId": "internal", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "secret": "internal", "redirectUris": [], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": false, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": true, "authorizationServicesEnabled": true, "publicClient": false, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "saml.assertion.signature": "false", "saml.force.post.binding": "false", "saml.multivalued.roles": "false", "saml.encrypt": "false", "saml.server.signature": "false", "saml.server.signature.keyinfo.ext": "false", "exclude.session.state.from.auth.response": "false", "saml_force_name_id_format": "false", "saml.client.signature": "false", "tls.client.certificate.bound.access.tokens": "false", "saml.authnstatement": "false", "display.on.consent.screen": "false", "saml.onetimeuse.condition": "false" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": true, "nodeReRegistrationTimeout": -1, "protocolMappers": [ { "id": "46513189-074c-4ba5-bfa7-29bae63faaaf", "name": "Client IP Address", "protocol": "openid-connect", "protocolMapper": "oidc-usersessionmodel-note-mapper", "consentRequired": false, "config": { "user.session.note": "clientAddress", "userinfo.token.claim": "true", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "clientAddress", "jsonType.label": "String" } }, { "id": "974887a2-e14a-4afd-84fc-a848009079ae", "name": "Client ID", "protocol": "openid-connect", "protocolMapper": "oidc-usersessionmodel-note-mapper", "consentRequired": false, "config": { "user.session.note": "clientId", "userinfo.token.claim": "true", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "clientId", "jsonType.label": "String" } }, { "id": "1b1a1f44-66df-4670-badb-46a3d361ec7c", "name": "Client Host", "protocol": "openid-connect", "protocolMapper": "oidc-usersessionmodel-note-mapper", "consentRequired": false, "config": { "user.session.note": "clientHost", "userinfo.token.claim": "true", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "clientHost", "jsonType.label": "String" } } ], "defaultClientScopes": ["web-origins", "role_list", "roles", "profile", "email"], "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"], "authorizationSettings": { "allowRemoteResourceManagement": false, "policyEnforcementMode": "ENFORCING", "resources": [ { "name": "Default Resource", "type": "urn:internal:resources:default", "ownerManagedAccess": false, "attributes": {}, "_id": "9e347a4d-ab6b-4075-9d24-23d20dfd30bc", "uris": ["/*"] } ], "policies": [ { "id": "ff09b194-0615-4cfd-9851-74adf540dabd", "name": "Default Policy", "description": "A policy that grants access only for users within this realm", "type": "js", "logic": "POSITIVE", "decisionStrategy": "AFFIRMATIVE", "config": { "code": "// by default, grants any permission associated with this policy\n$evaluation.grant();\n" } }, { "id": "4b5c72cc-b8b8-4bfc-95ac-61815669f985", "name": "Default Permission", "description": "A permission that applies to the default resource type", "type": "resource", "logic": "POSITIVE", "decisionStrategy": "UNANIMOUS", "config": { "defaultResourceType": "urn:internal:resources:default", "applyPolicies": "[\"Default Policy\"]" } } ], "scopes": [], "decisionStrategy": "UNANIMOUS" } }, { "id": "48fb7988-d909-445a-81db-fe825dca0db2", "clientId": "realm-management", "name": "${client_realm-management}", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "secret": "**********", "redirectUris": [], "webOrigins": [], "notBefore": 0, "bearerOnly": true, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": false, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": {}, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": false, "nodeReRegistrationTimeout": 0, "defaultClientScopes": ["role_list", "profile", "email"], "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"] }, { "id": "0aa176c1-8d28-4a8b-8e97-7e4b49a289ff", "clientId": "security-admin-console", "name": "${client_security-admin-console}", "rootUrl": "${authAdminUrl}", "baseUrl": "/admin/jhipster/console/", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "secret": "**********", "redirectUris": ["/admin/jhipster/console/*"], "webOrigins": ["+"], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": true, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "pkce.code.challenge.method": "S256" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": false, "nodeReRegistrationTimeout": 0, "protocolMappers": [ { "id": "abfaa4cd-4bc1-4223-be5d-c56c641369f2", "name": "locale", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "locale", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "locale", "jsonType.label": "String" } } ], "defaultClientScopes": ["web-origins", "role_list", "roles", "profile", "email"], "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"] }, { "id": "1eabef67-6473-4ba8-b07c-14bdbae4aaed", "clientId": "web_app", "rootUrl": "http://localhost:8080", "adminUrl": "http://localhost:8080", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "secret": "web_app", "redirectUris": ["http://localhost:*", "https://localhost:*", "http://127.0.0.1:*", "https://127.0.0.1:*", "dev.localhost.ionic:*"], "webOrigins": ["*"], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": true, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": true, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "saml.assertion.signature": "false", "saml.force.post.binding": "false", "saml.multivalued.roles": "false", "saml.encrypt": "false", "saml.server.signature": "false", "saml.server.signature.keyinfo.ext": "false", "exclude.session.state.from.auth.response": "false", "saml_force_name_id_format": "false", "saml.client.signature": "false", "tls.client.certificate.bound.access.tokens": "false", "saml.authnstatement": "false", "display.on.consent.screen": "false", "saml.onetimeuse.condition": "false" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": true, "nodeReRegistrationTimeout": -1, "defaultClientScopes": ["web-origins", "jhipster", "role_list", "roles", "profile", "email"], "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"] } ], "clientScopes": [ { "id": "1dc1e050-891a-4f5b-ac9d-5ea0c2e3c05e", "name": "address", "description": "OpenID Connect built-in scope: address", "protocol": "openid-connect", "attributes": { "consent.screen.text": "${addressScopeConsentText}", "display.on.consent.screen": "true" }, "protocolMappers": [ { "id": "b9a92105-8ca5-45d1-8a99-626255ac174f", "name": "address", "protocol": "openid-connect", "protocolMapper": "oidc-address-mapper", "consentRequired": false, "config": { "user.attribute.formatted": "formatted", "user.attribute.country": "country", "user.attribute.postal_code": "postal_code", "userinfo.token.claim": "true", "user.attribute.street": "street", "id.token.claim": "true", "user.attribute.region": "region", "access.token.claim": "true", "user.attribute.locality": "locality" } } ] }, { "id": "39e1693b-a924-4fbb-b98c-520869771f83", "name": "email", "description": "OpenID Connect built-in scope: email", "protocol": "openid-connect", "attributes": { "consent.screen.text": "${emailScopeConsentText}", "display.on.consent.screen": "true" }, "protocolMappers": [ { "id": "76f898bc-70e4-4e0a-a259-ae4cb58260f9", "name": "email verified", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "emailVerified", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "email_verified", "jsonType.label": "boolean" } }, { "id": "e348c7f8-e835-4539-a80b-b588510a82a9", "name": "email", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "email", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "email", "jsonType.label": "String" } } ] }, { "id": "3880d5d9-fced-4446-97fe-0434f2bb76ea", "name": "jhipster", "description": "Jhipster specific claims", "protocol": "openid-connect", "attributes": { "display.on.consent.screen": "false" }, "protocolMappers": [ { "id": "e7c536ca-1711-4ed5-9f21-20a25435f475", "name": "login", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "user.attribute": "preferred_username", "claim.name": "login", "jsonType.label": "String", "userinfo.token.claim": "true" } }, { "id": "646e3a98-5f0c-4192-91f0-9719c295b278", "name": "langKey", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "user.attribute": "langKey", "claim.name": "langKey", "jsonType.label": "String", "userinfo.token.claim": "true" } }, { "id": "70b3e85f-e7b4-4c30-9d10-e0b589776951", "name": "roles", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-realm-role-mapper", "consentRequired": false, "config": { "access.token.claim": "true", "claim.name": "roles", "jsonType.label": "String", "multivalued": "true", "userinfo.token.claim": "true" } } ] }, { "id": "a72d436e-111b-445b-804a-967d249f6455", "name": "microprofile-jwt", "description": "Microprofile - JWT built-in scope", "protocol": "openid-connect", "attributes": { "include.in.token.scope": "true", "display.on.consent.screen": "false" }, "protocolMappers": [ { "id": "dec0c468-3c11-429b-844e-dfd632b20ba7", "name": "upn", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "username", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "upn", "jsonType.label": "String" } }, { "id": "1ac09ef6-ab67-4379-b15a-5e54e50783be", "name": "groups", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-realm-role-mapper", "consentRequired": false, "config": { "multivalued": "true", "userinfo.token.claim": "true", "user.attribute": "foo", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "groups", "jsonType.label": "String" } } ] }, { "id": "5253d2be-3116-4510-ac05-99619ce2494c", "name": "offline_access", "description": "OpenID Connect built-in scope: offline_access", "protocol": "openid-connect", "attributes": { "consent.screen.text": "${offlineAccessScopeConsentText}", "display.on.consent.screen": "true" } }, { "id": "0d3b55db-e68b-4c83-91d4-7370a6810a24", "name": "phone", "description": "OpenID Connect built-in scope: phone", "protocol": "openid-connect", "attributes": { "consent.screen.text": "${phoneScopeConsentText}", "display.on.consent.screen": "true" }, "protocolMappers": [ { "id": "bbc582f4-4749-42b8-9c65-71f4edfd3979", "name": "phone number", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "phoneNumber", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "phone_number", "jsonType.label": "String" } }, { "id": "74840763-9b35-4c9a-8789-4008fedc26c2", "name": "phone number verified", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "phoneNumberVerified", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "phone_number_verified", "jsonType.label": "boolean" } } ] }, { "id": "d5de6a8a-8894-4e72-b6ef-f9bf3a7a6541", "name": "profile", "description": "OpenID Connect built-in scope: profile", "protocol": "openid-connect", "attributes": { "consent.screen.text": "${profileScopeConsentText}", "display.on.consent.screen": "true" }, "protocolMappers": [ { "id": "ecb34ff7-d27d-4696-b536-0512044b21a9", "name": "website", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "website", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "website", "jsonType.label": "String" } }, { "id": "f3cf3c8b-891a-48a1-97b3-1d10d55ddecd", "name": "locale", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "locale", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "locale", "jsonType.label": "String" } }, { "id": "fa3b86c8-abaf-4261-b48d-41cd3cf2dc6a", "name": "full name", "protocol": "openid-connect", "protocolMapper": "oidc-full-name-mapper", "consentRequired": false, "config": { "id.token.claim": "true", "access.token.claim": "true", "userinfo.token.claim": "true" } }, { "id": "219532f1-3c5c-4b30-a018-ae99adb6fc87", "name": "birthdate", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "birthdate", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "birthdate", "jsonType.label": "String" } }, { "id": "c443f4cd-1174-49a7-a2b3-65d5ccde5efa", "name": "nickname", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "nickname", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "nickname", "jsonType.label": "String" } }, { "id": "14631b9c-83eb-48ab-a224-29f047015e52", "name": "username", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "username", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "preferred_username", "jsonType.label": "String" } }, { "id": "cedd1f1b-951a-4332-9fa1-2edf1a266283", "name": "middle name", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "middleName", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "middle_name", "jsonType.label": "String" } }, { "id": "5a33d5e4-e124-412e-be4d-b6b28b41382a", "name": "family name", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "lastName", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "family_name", "jsonType.label": "String" } }, { "id": "c4122959-6738-4883-b50a-acd0033a477a", "name": "profile", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "profile", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "profile", "jsonType.label": "String" } }, { "id": "d7db1b88-2c3c-419a-91cf-19ad13355a56", "name": "zoneinfo", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "zoneinfo", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "zoneinfo", "jsonType.label": "String" } }, { "id": "dfd19868-5c87-4a51-80e0-2a82dfabb16c", "name": "updated at", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "updatedAt", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "updated_at", "jsonType.label": "String" } }, { "id": "19551b04-fc0c-44c4-b2bf-966da87ba3c3", "name": "given name", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "firstName", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "given_name", "jsonType.label": "String" } }, { "id": "c422b63f-e809-41c2-854c-e801e8e25485", "name": "gender", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "gender", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "gender", "jsonType.label": "String" } }, { "id": "2ccf435c-c255-4715-8dcd-15091f97c5a5", "name": "picture", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "userinfo.token.claim": "true", "user.attribute": "picture", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "picture", "jsonType.label": "String" } } ] }, { "id": "391f1641-cb22-41a3-a0ed-752d9264aaf5", "name": "role_list", "description": "SAML role list", "protocol": "saml", "attributes": { "consent.screen.text": "${samlRoleListScopeConsentText}", "display.on.consent.screen": "true" }, "protocolMappers": [ { "id": "7cbb4477-af0c-4394-a754-b72a1b4638e0", "name": "role list", "protocol": "saml", "protocolMapper": "saml-role-list-mapper", "consentRequired": false, "config": { "single": "false", "attribute.nameformat": "Basic", "attribute.name": "Role" } } ] }, { "id": "021d9ac1-9650-401c-b2a2-efa2f3e6b70c", "name": "roles", "description": "OpenID Connect scope for add user roles to the access token", "protocol": "openid-connect", "attributes": { "include.in.token.scope": "false", "display.on.consent.screen": "true", "consent.screen.text": "${rolesScopeConsentText}" }, "protocolMappers": [ { "id": "bbbd7dc1-63d0-468f-9463-4772833ef2fa", "name": "client roles", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-client-role-mapper", "consentRequired": false, "config": { "user.attribute": "foo", "access.token.claim": "true", "claim.name": "resource_access.${client_id}.roles", "jsonType.label": "String", "multivalued": "true" } }, { "id": "9271d821-b803-406d-8574-2f5a2693f065", "name": "realm roles", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-realm-role-mapper", "consentRequired": false, "config": { "user.attribute": "foo", "access.token.claim": "true", "claim.name": "realm_access.roles", "jsonType.label": "String", "multivalued": "true" } }, { "id": "90b1a715-e12e-4af8-89f6-82a370d57d1a", "name": "audience resolve", "protocol": "openid-connect", "protocolMapper": "oidc-audience-resolve-mapper", "consentRequired": false, "config": {} } ] }, { "id": "84fdcb72-668b-408e-aaea-110d594afe5e", "name": "web-origins", "description": "OpenID Connect scope for add allowed web origins to the access token", "protocol": "openid-connect", "attributes": { "include.in.token.scope": "false", "display.on.consent.screen": "false", "consent.screen.text": "" }, "protocolMappers": [ { "id": "134b3451-cf2d-4ead-8fce-bf24b32f014c", "name": "allowed web origins", "protocol": "openid-connect", "protocolMapper": "oidc-allowed-origins-mapper", "consentRequired": false, "config": {} } ] } ], "defaultDefaultClientScopes": ["roles", "role_list", "email", "web-origins", "profile"], "defaultOptionalClientScopes": ["phone", "address", "offline_access", "microprofile-jwt"], "browserSecurityHeaders": { "contentSecurityPolicyReportOnly": "", "xContentTypeOptions": "nosniff", "xRobotsTag": "none", "xFrameOptions": "SAMEORIGIN", "contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';", "xXSSProtection": "1; mode=block", "strictTransportSecurity": "max-age=31536000; includeSubDomains" }, "smtpServer": {}, "eventsEnabled": false, "eventsListeners": ["jboss-logging"], "enabledEventTypes": [], "adminEventsEnabled": false, "adminEventsDetailsEnabled": false, "components": { "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [ { "id": "96bb5289-e057-4a3d-a273-89372bbc8cc0", "name": "Allowed Client Scopes", "providerId": "allowed-client-templates", "subType": "authenticated", "subComponents": {}, "config": { "allow-default-scopes": ["true"] } }, { "id": "5782d02c-2ba5-47d1-9732-dfaaf0e5cfdf", "name": "Allowed Protocol Mapper Types", "providerId": "allowed-protocol-mappers", "subType": "authenticated", "subComponents": {}, "config": { "allowed-protocol-mapper-types": [ "oidc-full-name-mapper", "saml-user-property-mapper", "oidc-usermodel-attribute-mapper", "saml-user-attribute-mapper", "oidc-address-mapper", "saml-role-list-mapper", "oidc-usermodel-property-mapper", "oidc-sha256-pairwise-sub-mapper" ] } }, { "id": "c8d395e2-dd81-4118-b838-7095be5cc1c8", "name": "Allowed Protocol Mapper Types", "providerId": "allowed-protocol-mappers", "subType": "anonymous", "subComponents": {}, "config": { "allowed-protocol-mapper-types": [ "oidc-address-mapper", "oidc-full-name-mapper", "oidc-usermodel-attribute-mapper", "oidc-usermodel-property-mapper", "saml-user-attribute-mapper", "saml-user-property-mapper", "oidc-sha256-pairwise-sub-mapper", "saml-role-list-mapper" ] } }, { "id": "1175c6f8-2d58-437f-bb21-4660c8c1a62c", "name": "Full Scope Disabled", "providerId": "scope", "subType": "anonymous", "subComponents": {}, "config": {} }, { "id": "4bd2778a-908f-4ac3-873f-61e674eecc2f", "name": "Consent Required", "providerId": "consent-required", "subType": "anonymous", "subComponents": {}, "config": {} }, { "id": "65809493-b60f-4b44-b1dc-28a22772c321", "name": "Allowed Client Scopes", "providerId": "allowed-client-templates", "subType": "anonymous", "subComponents": {}, "config": { "allow-default-scopes": ["true"] } }, { "id": "950acf43-614d-47a3-a7c9-d5072433c4b8", "name": "Max Clients Limit", "providerId": "max-clients", "subType": "anonymous", "subComponents": {}, "config": { "max-clients": ["200"] } }, { "id": "e2a65f9f-5ad8-4634-ab3a-810409a3e067", "name": "Trusted Hosts", "providerId": "trusted-hosts", "subType": "anonymous", "subComponents": {}, "config": { "host-sending-registration-request-must-match": ["true"], "client-uris-must-match": ["true"] } } ], "org.keycloak.keys.KeyProvider": [ { "id": "8ab3be1d-3e01-4eb6-8ff2-d116b02ffc48", "name": "aes-generated", "providerId": "aes-generated", "subComponents": {}, "config": { "priority": ["100"] } }, { "id": "2a3661d8-3594-4872-881a-9f2d394b675d", "name": "rsa-generated", "providerId": "rsa-generated", "subComponents": {}, "config": { "priority": ["100"] } }, { "id": "1d291cea-3d41-41cb-9ab6-ef1513fe3fe8", "name": "hmac-generated", "providerId": "hmac-generated", "subComponents": {}, "config": { "priority": ["100"] } } ] }, "internationalizationEnabled": false, "supportedLocales": [], "authenticationFlows": [ { "id": "20a3af86-1f13-489d-bb67-db3b7df52875", "alias": "Handle Existing Account", "description": "Handle what to do if there is existing account with same email/username like authenticated identity provider", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "idp-confirm-link", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "requirement": "REQUIRED", "priority": 20, "flowAlias": "Handle Existing Account - Alternatives - 0", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "bd5b10aa-4005-4ea6-8995-9d1caac7b53e", "alias": "Handle Existing Account - Alternatives - 0", "description": "Subflow of Handle Existing Account with alternative executions", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "idp-email-verification", "requirement": "ALTERNATIVE", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "requirement": "ALTERNATIVE", "priority": 20, "flowAlias": "Verify Existing Account by Re-authentication", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "1a5ca248-a893-40ad-b184-63f59c06e988", "alias": "Verify Existing Account by Re-authentication", "description": "Reauthentication of existing account", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "idp-username-password-form", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "requirement": "CONDITIONAL", "priority": 20, "flowAlias": "Verify Existing Account by Re-authentication - auth-otp-form - Conditional", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "e13aa76b-dfe1-4158-82f2-c4bad23cf32a", "alias": "Verify Existing Account by Re-authentication - auth-otp-form - Conditional", "description": "Flow to determine if the auth-otp-form authenticator should be used or not.", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "auth-otp-form", "requirement": "REQUIRED", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false } ] }, { "id": "173ece89-908a-4c0e-9a6e-ccf6c871a2fc", "alias": "browser", "description": "browser based authentication", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "auth-cookie", "requirement": "ALTERNATIVE", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "auth-spnego", "requirement": "DISABLED", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "identity-provider-redirector", "requirement": "ALTERNATIVE", "priority": 25, "userSetupAllowed": false, "autheticatorFlow": false }, { "requirement": "ALTERNATIVE", "priority": 30, "flowAlias": "forms", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "4f469fff-9c0f-40d5-94d2-87ce8ecd34b7", "alias": "clients", "description": "Base authentication for clients", "providerId": "client-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "client-secret", "requirement": "ALTERNATIVE", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "client-jwt", "requirement": "ALTERNATIVE", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "client-secret-jwt", "requirement": "ALTERNATIVE", "priority": 30, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "client-x509", "requirement": "ALTERNATIVE", "priority": 40, "userSetupAllowed": false, "autheticatorFlow": false } ] }, { "id": "d17ed54c-9c98-4155-b8eb-c697101a325d", "alias": "direct grant", "description": "OpenID Connect Resource Owner Grant", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "direct-grant-validate-username", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "direct-grant-validate-password", "requirement": "REQUIRED", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false }, { "requirement": "CONDITIONAL", "priority": 30, "flowAlias": "direct grant - direct-grant-validate-otp - Conditional", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "b4d3e6be-fd6d-4588-a4cc-cfe4420c1fba", "alias": "direct grant - direct-grant-validate-otp - Conditional", "description": "Flow to determine if the direct-grant-validate-otp authenticator should be used or not.", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "direct-grant-validate-otp", "requirement": "REQUIRED", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false } ] }, { "id": "7c5067b6-513d-4676-9afa-47b199c7194e", "alias": "docker auth", "description": "Used by Docker clients to authenticate against the IDP", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "docker-http-basic-authenticator", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false } ] }, { "id": "76be1624-c049-4e13-8ecd-8d01ac9433ac", "alias": "first broker login", "description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticatorConfig": "review profile config", "authenticator": "idp-review-profile", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "requirement": "REQUIRED", "priority": 20, "flowAlias": "first broker login - Alternatives - 0", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "91ee6c4e-dedd-4024-b6a8-c332ef2444a5", "alias": "first broker login - Alternatives - 0", "description": "Subflow of first broker login with alternative executions", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticatorConfig": "create unique user config", "authenticator": "idp-create-user-if-unique", "requirement": "ALTERNATIVE", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "requirement": "ALTERNATIVE", "priority": 20, "flowAlias": "Handle Existing Account", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "2dc1cb10-ea2c-48a2-8131-3c950784a60e", "alias": "forms", "description": "Username, password, otp and other auth forms.", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "auth-username-password-form", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "requirement": "CONDITIONAL", "priority": 20, "flowAlias": "forms - auth-otp-form - Conditional", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "7cdad543-5bdf-4f4a-a527-34e1b30889de", "alias": "forms - auth-otp-form - Conditional", "description": "Flow to determine if the auth-otp-form authenticator should be used or not.", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "auth-otp-form", "requirement": "REQUIRED", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false } ] }, { "id": "98562c33-8964-42c4-8a69-204226d0c4c7", "alias": "http challenge", "description": "An authentication flow based on challenge-response HTTP Authentication Schemes", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "no-cookie-redirect", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "basic-auth", "requirement": "REQUIRED", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "basic-auth-otp", "requirement": "DISABLED", "priority": 30, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "auth-spnego", "requirement": "DISABLED", "priority": 40, "userSetupAllowed": false, "autheticatorFlow": false } ] }, { "id": "6f1cb686-0852-4600-8eec-7c00cb465b35", "alias": "registration", "description": "registration flow", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "registration-page-form", "requirement": "REQUIRED", "priority": 10, "flowAlias": "registration form", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "f335a41a-4044-43bf-ab0a-c39ea0a9246e", "alias": "registration form", "description": "registration form", "providerId": "form-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "registration-user-creation", "requirement": "REQUIRED", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "registration-profile-action", "requirement": "REQUIRED", "priority": 40, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "registration-password-action", "requirement": "REQUIRED", "priority": 50, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "registration-recaptcha-action", "requirement": "DISABLED", "priority": 60, "userSetupAllowed": false, "autheticatorFlow": false } ] }, { "id": "d1364557-be6a-4e58-9db0-d1fda2305e6e", "alias": "reset credentials", "description": "Reset credentials for a user if they forgot their password or something", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "reset-credentials-choose-user", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "reset-credential-email", "requirement": "REQUIRED", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "reset-password", "requirement": "REQUIRED", "priority": 30, "userSetupAllowed": false, "autheticatorFlow": false }, { "requirement": "CONDITIONAL", "priority": 40, "flowAlias": "reset credentials - reset-otp - Conditional", "userSetupAllowed": false, "autheticatorFlow": true } ] }, { "id": "558b807f-fed5-4c79-a80e-136a4468fbc5", "alias": "reset credentials - reset-otp - Conditional", "description": "Flow to determine if the reset-otp authenticator should be used or not.", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false }, { "authenticator": "reset-otp", "requirement": "REQUIRED", "priority": 20, "userSetupAllowed": false, "autheticatorFlow": false } ] }, { "id": "e86247fb-5e43-41fb-88f4-355a32d2b89d", "alias": "saml ecp", "description": "SAML ECP Profile Authentication Flow", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "http-basic-authenticator", "requirement": "REQUIRED", "priority": 10, "userSetupAllowed": false, "autheticatorFlow": false } ] } ], "authenticatorConfig": [ { "id": "d2ce2a29-3a8f-4797-9529-b5e498d835b7", "alias": "create unique user config", "config": { "require.password.update.after.registration": "false" } }, { "id": "949fe63b-47a4-41b6-9872-0aabe1806b57", "alias": "review profile config", "config": { "update.profile.on.first.login": "missing" } } ], "requiredActions": [ { "alias": "CONFIGURE_TOTP", "name": "Configure OTP", "providerId": "CONFIGURE_TOTP", "enabled": true, "defaultAction": false, "priority": 10, "config": {} }, { "alias": "terms_and_conditions", "name": "Terms and Conditions", "providerId": "terms_and_conditions", "enabled": false, "defaultAction": false, "priority": 20, "config": {} }, { "alias": "UPDATE_PASSWORD", "name": "Update Password", "providerId": "UPDATE_PASSWORD", "enabled": true, "defaultAction": false, "priority": 30, "config": {} }, { "alias": "UPDATE_PROFILE", "name": "Update Profile", "providerId": "UPDATE_PROFILE", "enabled": true, "defaultAction": false, "priority": 40, "config": {} }, { "alias": "VERIFY_EMAIL", "name": "Verify Email", "providerId": "VERIFY_EMAIL", "enabled": true, "defaultAction": false, "priority": 50, "config": {} }, { "alias": "update_user_locale", "name": "Update User Locale", "providerId": "update_user_locale", "enabled": true, "defaultAction": false, "priority": 1000, "config": {} } ], "browserFlow": "browser", "registrationFlow": "registration", "directGrantFlow": "direct grant", "resetCredentialsFlow": "reset credentials", "clientAuthenticationFlow": "clients", "dockerAuthenticationFlow": "docker auth", "attributes": {}, "keycloakVersion": "10.0.0", "userManagedAccessAllowed": false }