diff --git a/tools/docker/keycloak/Dockerfile b/tools/docker/keycloak/Dockerfile
index 17a64f3..74684b4 100644
--- a/tools/docker/keycloak/Dockerfile
+++ b/tools/docker/keycloak/Dockerfile
@@ -1,9 +1,17 @@
-FROM jboss/keycloak:1.9.0.Final
+FROM jboss/keycloak:1.9.5.Final
ENV JAVA_OPTS "-Djava.security.egd=file:///dev/urandom"
ENV REALM_DIR $JBOSS_HOME/realms
+ENV REALM_FILE $REALM_DIR/apiman-realm.json
+ENV REALM_FILE_TMPL $REALM_DIR/apiman-realm.json.tmpl
ENV KC_USER_NAME "admin"
ENV KC_USER_PASSWORD "admin123!"
+ENV MANAGER_HOST "localhost"
+ENV GATEWAY_HOST "localhost"
+ENV MANAGER_PORT "8080"
+ENV GATEWAY_PORT "8080"
+ENV MANAGER_HTTPS_PORT "8443"
+ENV GATEWAY_HTTPS_PORT "8443"
# Add wrapping docker entrypoint
ADD scripts/docker-entrypoint.sh ${JBOSS_HOME}/bin/docker-entrypoint.sh
@@ -11,4 +19,11 @@ ADD scripts/docker-entrypoint.sh ${JBOSS_HOME}/bin/docker-entrypoint.sh
# Add realm definition file
ADD realms $REALM_DIR
+# change owner of newely created directory and install gettext package for envsubst
+USER root
+RUN chown -R jboss:jboss ${REALM_DIR} &&\
+ yum update -y &&\
+ yum install -y gettext
+USER jboss
+
ENTRYPOINT ["sh", "/opt/jboss/keycloak/bin/docker-entrypoint.sh"]
diff --git a/tools/docker/keycloak/realms/apiman-realm.json b/tools/docker/keycloak/realms/apiman-realm.json
deleted file mode 100644
index 40aad33..0000000
--- a/tools/docker/keycloak/realms/apiman-realm.json
+++ /dev/null
@@ -1,1400 +0,0 @@
-{
- "id" : "apiman",
- "realm" : "apiman",
- "displayName" : "Apiman Realm",
- "displayNameHtml" : "
Apiman Realm
",
- "notBefore" : 0,
- "revokeRefreshToken" : false,
- "accessTokenLifespan" : 300,
- "accessTokenLifespanForImplicitFlow" : 900,
- "ssoSessionIdleTimeout" : 1800,
- "ssoSessionMaxLifespan" : 36000,
- "offlineSessionIdleTimeout" : 2592000,
- "accessCodeLifespan" : 60,
- "accessCodeLifespanUserAction" : 300,
- "accessCodeLifespanLogin" : 1800,
- "enabled" : true,
- "sslRequired" : "none",
- "registrationAllowed" : true,
- "registrationEmailAsUsername" : false,
- "rememberMe" : true,
- "verifyEmail" : false,
- "resetPasswordAllowed" : true,
- "editUsernameAllowed" : false,
- "bruteForceProtected" : false,
- "maxFailureWaitSeconds" : 900,
- "minimumQuickLoginWaitSeconds" : 60,
- "waitIncrementSeconds" : 60,
- "quickLoginCheckMilliSeconds" : 1000,
- "maxDeltaTimeSeconds" : 43200,
- "failureFactor" : 30,
- "privateKey" : "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",
- "publicKey" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyG61ohrfJQKNmDA/ePZtqZVpPXjwn3k3T+iWiTvMsxW2+WlnqIEmL5qZ09DMhBH9r50WZRO2gVoCb657Er9x0vfD6GNf/47XU2y33TX8axhP+hSwkv/VViaDlu4jQrfgPWz/FXMjWIZxg1xQS+nOBF2ScCRYWNQ/ZnUNnvrq8dGC2/AlyeYcgDUOdwlJuvgkGlF0QoVPQiRPurR3RwlG+BjL8JB3hbaAZhdJqwqApmGQbcpgLj2tODnlrZnEAp5cPPU/lgqCE1OOp78BAEiE91ZLPl/+D8qDHk+Maz0Io3bkeRZMXPpvtbL3qN+3GlF8Yz264HDSsTNrH+nd19tFQIDAQAB",
- "certificate" : "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",
- "codeSecret" : "2cc97335-f941-4f94-9470-80b4d15be5e3",
- "roles" : {
- "realm" : [ {
- "id" : "b70f7106-062d-4780-a8ec-6b324d9df542",
- "name" : "apiadmin",
- "description" : "Administrator privileges.",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "7d8ae6ce-99cc-48c7-9b98-25df71be574f",
- "name" : "offline_access",
- "description" : "${role_offline-access}",
- "scopeParamRequired" : true,
- "composite" : false
- }, {
- "id" : "c7bae0cb-400b-4c64-8b49-abd51ee978a7",
- "name" : "apiuser",
- "description" : "User privileges.",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "4e65194d-670d-4976-ba96-7983559aa937",
- "name" : "apipublisher",
- "description" : "Required to publish to the API Gateway.",
- "scopeParamRequired" : false,
- "composite" : false
- } ],
- "client" : {
- "apiman" : [ ],
- "apimanui" : [ ],
- "realm-management" : [ {
- "id" : "bfde4829-5da9-4359-bb9a-59adfc719eeb",
- "name" : "manage-identity-providers",
- "description" : "${role_manage-identity-providers}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "fddf1c14-c222-48ab-b102-44d8ddbdcbc5",
- "name" : "create-client",
- "description" : "${role_create-client}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "1444120a-70e7-4f08-9120-f13c0bb96d4e",
- "name" : "manage-clients",
- "description" : "${role_manage-clients}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "1a23aaf3-4f3e-4fb7-bb2d-d1113e560145",
- "name" : "manage-events",
- "description" : "${role_manage-events}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "b20267b4-f6d0-4f35-bd0a-215dbcecd322",
- "name" : "impersonation",
- "description" : "${role_impersonation}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "e0b37a3c-c7ab-4f9f-a825-93000599ab30",
- "name" : "realm-admin",
- "description" : "${role_realm-admin}",
- "scopeParamRequired" : false,
- "composite" : true,
- "composites" : {
- "client" : {
- "realm-management" : [ "manage-identity-providers", "create-client", "view-events", "manage-clients", "manage-events", "impersonation", "manage-users", "view-realm", "view-clients", "manage-realm", "view-users", "view-identity-providers" ]
- }
- }
- }, {
- "id" : "227a7df3-3ba8-4620-8c66-d6967dfb419e",
- "name" : "view-events",
- "description" : "${role_view-events}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "6f2d8f8c-dfff-43f1-860e-ba29bf7e028d",
- "name" : "manage-users",
- "description" : "${role_manage-users}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "4dbf7a04-9680-4907-bc6e-bde5f5551307",
- "name" : "view-realm",
- "description" : "${role_view-realm}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "0c0d81ed-cc3a-418a-b7aa-4b1b3d00c748",
- "name" : "manage-realm",
- "description" : "${role_manage-realm}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "61e5fa34-f82f-4531-8bdf-9c11e55d28d5",
- "name" : "view-clients",
- "description" : "${role_view-clients}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "7295f14d-c95e-4c97-97fa-f201b9a92bde",
- "name" : "view-users",
- "description" : "${role_view-users}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "315c6df2-0028-4c01-9cda-7b5237b3fe2b",
- "name" : "view-identity-providers",
- "description" : "${role_view-identity-providers}",
- "scopeParamRequired" : false,
- "composite" : false
- } ],
- "security-admin-console" : [ ],
- "apiman-gateway-api" : [ ],
- "admin-cli" : [ ],
- "broker" : [ {
- "id" : "13bc4e5e-9058-4958-ac46-e2e3d155ba5b",
- "name" : "read-token",
- "description" : "${role_read-token}",
- "scopeParamRequired" : false,
- "composite" : false
- } ],
- "account" : [ {
- "id" : "dc68e64a-c8ef-4b75-9523-72fe39f5c2fe",
- "name" : "manage-account",
- "description" : "${role_manage-account}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "27c46da3-4c9b-48bd-909b-a7b0449c5498",
- "name" : "view-profile",
- "description" : "${role_view-profile}",
- "scopeParamRequired" : false,
- "composite" : false
- } ]
- }
- },
- "groups" : [ ],
- "defaultRoles" : [ "offline_access", "apiuser" ],
- "requiredCredentials" : [ "password" ],
- "otpPolicyType" : "totp",
- "otpPolicyAlgorithm" : "HmacSHA1",
- "otpPolicyInitialCounter" : 0,
- "otpPolicyDigits" : 6,
- "otpPolicyLookAheadWindow" : 1,
- "otpPolicyPeriod" : 30,
- "clientScopeMappings" : {
- "realm-management" : [ {
- "client" : "admin-cli",
- "roles" : [ "realm-admin" ]
- }, {
- "client" : "security-admin-console",
- "roles" : [ "realm-admin" ]
- } ]
- },
- "clients" : [ {
- "id" : "a8d14e70-bd9c-42ca-9945-7eb4db8b5709",
- "clientId" : "account",
- "name" : "${client_account}",
- "baseUrl" : "/auth/realms/apiman/account",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "d42dc5b5-1050-4d2c-898b-6be1ef4095b8",
- "defaultRoles" : [ "view-profile", "manage-account" ],
- "redirectUris" : [ "/auth/realms/apiman/account/*" ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : false,
- "serviceAccountsEnabled" : false,
- "publicClient" : false,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "28ce3b33-6e0e-4dbf-8a5d-a31cbc7a25df",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "2dd59350-bdf9-489c-bfff-15cdb4a7e112",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "993a14ce-98b8-4ddc-acd7-71fc1f06292b",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "91c78c09-419a-459c-bb23-88547e5429c2",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "484ed91c-961e-424f-8fb8-f1528b62fee0",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "6d69b352-2b0f-48e3-963f-889f15a46579",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "a3473aca-faf5-42e8-add4-6e7b8f88ef00",
- "clientId" : "admin-cli",
- "name" : "${client_admin-cli}",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "c62e4c4d-53db-45bf-9bf0-ba50a636b149",
- "redirectUris" : [ ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : false,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : true,
- "serviceAccountsEnabled" : false,
- "publicClient" : true,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "cd891fe3-46a6-4d9d-9c66-b91780cecbbf",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "5d419e4c-a9d6-4f71-99a0-346c6bd5e9d3",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "a968f2a4-da35-4fd9-b03a-b0518d6f7128",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "4b16db84-6fc6-4cd7-b6fc-ed3a901ca01c",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "c3e492e3-1eb4-4fdf-8557-9fe8f7bbeece",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "f94ede04-b2bb-4be7-81ec-e2faa0fbf798",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "1abb0913-8c31-400b-92d6-61293b13f3d3",
- "clientId" : "apiman",
- "name" : "Apiman",
- "description" : "The apiman rest layer.",
- "rootUrl" : "",
- "baseUrl" : "/apiman",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "5af5458f-0a96-4251-8f92-08ebcc3a8aa2",
- "redirectUris" : [ "http://localhost:8080/apiman/*", "https://localhost:8080/apiman/*" ],
- "webOrigins" : [ "*" ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : true,
- "serviceAccountsEnabled" : false,
- "publicClient" : true,
- "frontchannelLogout" : false,
- "protocol" : "openid-connect",
- "attributes" : {
- "saml.assertion.signature" : "false",
- "saml.force.post.binding" : "false",
- "saml.multivalued.roles" : "false",
- "saml.signature.algorithm" : "RSA_SHA256",
- "saml.encrypt" : "false",
- "saml_force_name_id_format" : "false",
- "saml.client.signature" : "false",
- "saml.authnstatement" : "true",
- "saml_name_id_format" : "username",
- "saml.server.signature" : "false",
- "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#"
- },
- "fullScopeAllowed" : true,
- "nodeReRegistrationTimeout" : -1,
- "protocolMappers" : [ {
- "id" : "5b44de25-e322-4d83-9684-5c2a8830c2e4",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "39a09c47-539c-43c8-be7a-c1a8e2a21d03",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "a3fa08bc-b147-4c57-8bda-d57388b9dd80",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "264cc4e4-22a2-4979-86f4-e70d19eb92ab",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "ce359e53-4427-4f19-8587-63a7ce55d2d8",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "00f118c4-54ca-445e-b4ce-12ff1698d0e5",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "98e30b6d-907c-49d5-b466-202f7c7cd82a",
- "clientId" : "apiman-gateway-api",
- "name" : "Apiman Gateway API",
- "description" : "The apiman Gateway REST layer.",
- "rootUrl" : "",
- "baseUrl" : "/apiman-gateway-api",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "217b725d-7790-47a7-a3fc-5cf31f92a8db",
- "redirectUris" : [ "http://localhost:8080/apiman-gateway-api/*", "https://localhost:8080/apiman-gateway-api/*" ],
- "webOrigins" : [ "*" ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : true,
- "serviceAccountsEnabled" : false,
- "publicClient" : true,
- "frontchannelLogout" : false,
- "protocol" : "openid-connect",
- "attributes" : {
- "saml.assertion.signature" : "false",
- "saml.force.post.binding" : "false",
- "saml.multivalued.roles" : "false",
- "saml.signature.algorithm" : "RSA_SHA256",
- "saml.encrypt" : "false",
- "saml_force_name_id_format" : "false",
- "saml.client.signature" : "false",
- "saml.authnstatement" : "true",
- "saml_name_id_format" : "username",
- "saml.server.signature" : "false",
- "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#"
- },
- "fullScopeAllowed" : true,
- "nodeReRegistrationTimeout" : -1,
- "protocolMappers" : [ {
- "id" : "ef8a8d17-9797-4912-981a-f1e706d38f46",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "f31aa721-cc51-4aaf-abcf-9d0d90bed438",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "71bbac19-ad9e-4caf-90e3-ad8096ddf4e5",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "6aa48269-a109-438b-8b13-1a6d3b43db63",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "64d82ade-ba98-41f3-a748-a4e111d5016b",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "0b90fb5a-79de-4aed-bd5f-ff6302d14e7c",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "d33348b3-93a3-4591-83e3-20204776808d",
- "clientId" : "apimanui",
- "name" : "Apiman UI",
- "description" : "The apiman user interface.",
- "rootUrl" : "",
- "baseUrl" : "/apimanui",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "722557fd-a725-4cc0-9dff-7d09c0c47038",
- "redirectUris" : [ "http://localhost:8080/apimanui/*", "http://localhost:8080/apimanui/*" ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : true,
- "serviceAccountsEnabled" : false,
- "publicClient" : true,
- "frontchannelLogout" : false,
- "protocol" : "openid-connect",
- "attributes" : {
- "saml.assertion.signature" : "false",
- "saml.force.post.binding" : "false",
- "saml.multivalued.roles" : "false",
- "saml.signature.algorithm" : "RSA_SHA256",
- "saml.encrypt" : "false",
- "saml_force_name_id_format" : "false",
- "saml.client.signature" : "false",
- "saml.authnstatement" : "true",
- "saml_name_id_format" : "username",
- "saml.server.signature" : "false",
- "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#"
- },
- "fullScopeAllowed" : true,
- "nodeReRegistrationTimeout" : -1,
- "protocolMappers" : [ {
- "id" : "aa49713e-f06f-429c-8e01-6c40af2a9233",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "9dd13c7c-dc31-4fa8-8f1c-6b9b4d5d3fc9",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "aef631b8-c8db-4e8d-b9dc-2715adbd1912",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "d040ae37-516d-44cc-b75f-e8398ce64ccd",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "18eca5f9-ea5a-40b5-ab55-0daa9675640c",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "a8bcaea4-4e75-4d6e-8c2a-90333594742d",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "34bd3689-5952-49a2-bbc6-c4c2f3b19306",
- "clientId" : "broker",
- "name" : "${client_broker}",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "656feef3-a682-4fae-98b9-5af112ccf6f2",
- "redirectUris" : [ ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : false,
- "serviceAccountsEnabled" : false,
- "publicClient" : false,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "0aadd34d-9b4f-4748-86d0-aaf059179ce8",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "ef0cfed0-e489-42f2-9508-6f18700c46ad",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "aeec7844-5ce7-4cfc-9e57-59f5b1bc2fe1",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "c7fc0e6f-44c3-4bbd-b6c6-0efcb523acde",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "7e5d027a-8ad0-4e72-9da2-d853b6de9891",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "28ffb043-6a79-4d3a-986f-a74ddda49b5d",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "07c77079-7ce8-4879-8e20-4b042b59f9f9",
- "clientId" : "realm-management",
- "name" : "${client_realm-management}",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "37818abe-3f6e-4fcd-8fff-9a39c9dfbd72",
- "redirectUris" : [ ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : true,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : false,
- "serviceAccountsEnabled" : false,
- "publicClient" : false,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "81512b74-8ca0-4b56-aee6-8796d32ef08e",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "46dd0a74-4e67-49d3-a4bd-9b942477ea8d",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "19a045d2-7c70-4975-bd97-15337a5c6cea",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "a05f7bab-83b9-455e-a6d7-c420eee2a568",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "77afffb5-4afc-42a0-9629-4e1a952b05b6",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "7035d549-8da1-4660-8a21-9b5acbd92fc1",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "a33a0ea7-c67e-4a75-8be6-5be2bf638145",
- "clientId" : "security-admin-console",
- "name" : "${client_security-admin-console}",
- "baseUrl" : "/auth/admin/apiman/console/index.html",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "5f5482ac-cf0c-4ff6-acd5-787dbbfb9f75",
- "redirectUris" : [ "/auth/admin/apiman/console/*" ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : false,
- "serviceAccountsEnabled" : false,
- "publicClient" : true,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "a3483a2d-1075-403e-a461-4c19e1ff19d4",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "2b2bcbb1-75c0-49dd-8f34-4b460c3dc62f",
- "name" : "locale",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-attribute-mapper",
- "consentRequired" : false,
- "consentText" : "${locale}",
- "config" : {
- "user.attribute" : "locale",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "locale",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "a944a4ca-957c-4833-b667-fe12cf4d1fef",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "bfe92fd4-7c40-43bf-92ab-5401d7c8d7b6",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "8bf2c5c0-8bb6-4e65-811c-64e9d14ca508",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "6b0df5f5-0cb3-4ed1-8ece-9b4d6ce55f61",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "41be8005-d6f6-47de-88d4-9ed1bff7d092",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- } ],
- "clientTemplates" : [ ],
- "browserSecurityHeaders" : {
- "xFrameOptions" : "SAMEORIGIN",
- "contentSecurityPolicy" : "frame-src 'self'"
- },
- "smtpServer" : { },
- "eventsEnabled" : false,
- "eventsListeners" : [ "jboss-logging" ],
- "enabledEventTypes" : [ ],
- "adminEventsEnabled" : false,
- "adminEventsDetailsEnabled" : false,
- "internationalizationEnabled" : false,
- "supportedLocales" : [ "" ],
- "authenticationFlows" : [ {
- "id" : "973d3861-45ad-4e54-af5e-e95fa3f5ee28",
- "alias" : "Handle Existing Account",
- "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider",
- "providerId" : "basic-flow",
- "topLevel" : false,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "idp-confirm-link",
- "requirement" : "REQUIRED",
- "priority" : 10,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "idp-email-verification",
- "requirement" : "ALTERNATIVE",
- "priority" : 20,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "requirement" : "ALTERNATIVE",
- "priority" : 30,
- "flowAlias" : "Verify Existing Account by Re-authentication",
- "userSetupAllowed" : false,
- "autheticatorFlow" : true
- } ]
- }, {
- "id" : "9fb80da7-4d77-46eb-be7b-cf4a8b8ec262",
- "alias" : "Verify Existing Account by Re-authentication",
- "description" : "Reauthentication of existing account",
- "providerId" : "basic-flow",
- "topLevel" : false,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "idp-username-password-form",
- "requirement" : "REQUIRED",
- "priority" : 10,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "auth-otp-form",
- "requirement" : "OPTIONAL",
- "priority" : 20,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- } ]
- }, {
- "id" : "3806972b-fda8-4dfa-8fa3-cb9de13d88e1",
- "alias" : "browser",
- "description" : "browser based authentication",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "auth-cookie",
- "requirement" : "ALTERNATIVE",
- "priority" : 10,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "auth-spnego",
- "requirement" : "DISABLED",
- "priority" : 20,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "requirement" : "ALTERNATIVE",
- "priority" : 30,
- "flowAlias" : "forms",
- "userSetupAllowed" : false,
- "autheticatorFlow" : true
- } ]
- }, {
- "id" : "221195b2-9bc5-4413-8a31-18bde3eb9255",
- "alias" : "clients",
- "description" : "Base authentication for clients",
- "providerId" : "client-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "client-secret",
- "requirement" : "ALTERNATIVE",
- "priority" : 10,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "client-jwt",
- "requirement" : "ALTERNATIVE",
- "priority" : 20,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- } ]
- }, {
- "id" : "54979a7f-5398-4e49-adbe-b6f720953d39",
- "alias" : "direct grant",
- "description" : "OpenID Connect Resource Owner Grant",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "direct-grant-validate-username",
- "requirement" : "REQUIRED",
- "priority" : 10,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "direct-grant-validate-password",
- "requirement" : "REQUIRED",
- "priority" : 20,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "direct-grant-validate-otp",
- "requirement" : "OPTIONAL",
- "priority" : 30,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- } ]
- }, {
- "id" : "1909260e-4fdf-4966-b7bd-15d1fefb41be",
- "alias" : "first broker login",
- "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticatorConfig" : "review profile config",
- "authenticator" : "idp-review-profile",
- "requirement" : "REQUIRED",
- "priority" : 10,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticatorConfig" : "create unique user config",
- "authenticator" : "idp-create-user-if-unique",
- "requirement" : "ALTERNATIVE",
- "priority" : 20,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "requirement" : "ALTERNATIVE",
- "priority" : 30,
- "flowAlias" : "Handle Existing Account",
- "userSetupAllowed" : false,
- "autheticatorFlow" : true
- } ]
- }, {
- "id" : "bf4450a5-9081-4558-8d17-ac2e825ea990",
- "alias" : "forms",
- "description" : "Username, password, otp and other auth forms.",
- "providerId" : "basic-flow",
- "topLevel" : false,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "auth-username-password-form",
- "requirement" : "REQUIRED",
- "priority" : 10,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "auth-otp-form",
- "requirement" : "OPTIONAL",
- "priority" : 20,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- } ]
- }, {
- "id" : "4be6e758-3734-496a-8355-97a420ed3e6d",
- "alias" : "registration",
- "description" : "registration flow",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "registration-page-form",
- "requirement" : "REQUIRED",
- "priority" : 10,
- "flowAlias" : "registration form",
- "userSetupAllowed" : false,
- "autheticatorFlow" : true
- } ]
- }, {
- "id" : "3e2eeef8-1df0-476f-a0a6-cf103b8ad1d4",
- "alias" : "registration form",
- "description" : "registration form",
- "providerId" : "form-flow",
- "topLevel" : false,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "registration-user-creation",
- "requirement" : "REQUIRED",
- "priority" : 20,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "registration-profile-action",
- "requirement" : "REQUIRED",
- "priority" : 40,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "registration-password-action",
- "requirement" : "REQUIRED",
- "priority" : 50,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "registration-recaptcha-action",
- "requirement" : "DISABLED",
- "priority" : 60,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- } ]
- }, {
- "id" : "fc73607e-8219-4296-910b-40c8c4b3bf54",
- "alias" : "reset credentials",
- "description" : "Reset credentials for a user if they forgot their password or something",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "reset-credentials-choose-user",
- "requirement" : "REQUIRED",
- "priority" : 10,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "reset-credential-email",
- "requirement" : "REQUIRED",
- "priority" : 20,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "reset-password",
- "requirement" : "REQUIRED",
- "priority" : 30,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- }, {
- "authenticator" : "reset-otp",
- "requirement" : "OPTIONAL",
- "priority" : 40,
- "userSetupAllowed" : false,
- "autheticatorFlow" : false
- } ]
- } ],
- "authenticatorConfig" : [ {
- "alias" : "create unique user config",
- "config" : {
- "require.password.update.after.registration" : "false"
- }
- }, {
- "alias" : "review profile config",
- "config" : {
- "update.profile.on.first.login" : "missing"
- }
- } ],
- "requiredActions" : [ {
- "alias" : "CONFIGURE_TOTP",
- "name" : "Configure Totp",
- "providerId" : "CONFIGURE_TOTP",
- "enabled" : true,
- "defaultAction" : false,
- "config" : { }
- }, {
- "alias" : "UPDATE_PASSWORD",
- "name" : "Update Password",
- "providerId" : "UPDATE_PASSWORD",
- "enabled" : true,
- "defaultAction" : false,
- "config" : { }
- }, {
- "alias" : "UPDATE_PROFILE",
- "name" : "Update Profile",
- "providerId" : "UPDATE_PROFILE",
- "enabled" : true,
- "defaultAction" : false,
- "config" : { }
- }, {
- "alias" : "VERIFY_EMAIL",
- "name" : "Verify Email",
- "providerId" : "VERIFY_EMAIL",
- "enabled" : true,
- "defaultAction" : false,
- "config" : { }
- }, {
- "alias" : "terms_and_conditions",
- "name" : "Terms and Conditions",
- "providerId" : "terms_and_conditions",
- "enabled" : false,
- "defaultAction" : false,
- "config" : { }
- } ],
- "browserFlow" : "browser",
- "registrationFlow" : "registration",
- "directGrantFlow" : "direct grant",
- "resetCredentialsFlow" : "reset credentials",
- "clientAuthenticationFlow" : "clients"
-}
diff --git a/tools/docker/keycloak/realms/apiman-realm.json.tmpl b/tools/docker/keycloak/realms/apiman-realm.json.tmpl
new file mode 100644
index 0000000..1391386
--- /dev/null
+++ b/tools/docker/keycloak/realms/apiman-realm.json.tmpl
@@ -0,0 +1,2772 @@
+[
+ {
+ "id" : "apiman",
+ "realm" : "apiman",
+ "displayName" : "Apiman Realm",
+ "displayNameHtml" : "Apiman Realm
",
+ "notBefore" : 0,
+ "revokeRefreshToken" : false,
+ "accessTokenLifespan" : 300,
+ "accessTokenLifespanForImplicitFlow" : 900,
+ "ssoSessionIdleTimeout" : 1800,
+ "ssoSessionMaxLifespan" : 36000,
+ "offlineSessionIdleTimeout" : 2592000,
+ "accessCodeLifespan" : 60,
+ "accessCodeLifespanUserAction" : 300,
+ "accessCodeLifespanLogin" : 1800,
+ "enabled" : true,
+ "sslRequired" : "none",
+ "registrationAllowed" : true,
+ "registrationEmailAsUsername" : false,
+ "rememberMe" : true,
+ "verifyEmail" : false,
+ "resetPasswordAllowed" : true,
+ "editUsernameAllowed" : false,
+ "bruteForceProtected" : false,
+ "maxFailureWaitSeconds" : 900,
+ "minimumQuickLoginWaitSeconds" : 60,
+ "waitIncrementSeconds" : 60,
+ "quickLoginCheckMilliSeconds" : 1000,
+ "maxDeltaTimeSeconds" : 43200,
+ "failureFactor" : 30,
+ "privateKey" : "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",
+ "publicKey" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyG61ohrfJQKNmDA/ePZtqZVpPXjwn3k3T+iWiTvMsxW2+WlnqIEmL5qZ09DMhBH9r50WZRO2gVoCb657Er9x0vfD6GNf/47XU2y33TX8axhP+hSwkv/VViaDlu4jQrfgPWz/FXMjWIZxg1xQS+nOBF2ScCRYWNQ/ZnUNnvrq8dGC2/AlyeYcgDUOdwlJuvgkGlF0QoVPQiRPurR3RwlG+BjL8JB3hbaAZhdJqwqApmGQbcpgLj2tODnlrZnEAp5cPPU/lgqCE1OOp78BAEiE91ZLPl/+D8qDHk+Maz0Io3bkeRZMXPpvtbL3qN+3GlF8Yz264HDSsTNrH+nd19tFQIDAQAB",
+ "certificate" : "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",
+ "codeSecret" : "2cc97335-f941-4f94-9470-80b4d15be5e3",
+ "roles" : {
+ "realm" : [ {
+ "id" : "b35c1e8e-0823-4604-8377-5def2817ccaa",
+ "name" : "apipublisher",
+ "description" : "Required to publish to the API Gateway.",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "a0ba4669-65b4-4db2-ab7f-8144068e6521",
+ "name" : "offline_access",
+ "description" : "${role_offline-access}",
+ "scopeParamRequired" : true,
+ "composite" : false
+ }, {
+ "id" : "4bc7f1b6-7b2a-4c87-8910-924d1774a933",
+ "name" : "apiadmin",
+ "description" : "Administrator privileges.",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "b086849c-e19a-40f7-b962-5b3f718fff3c",
+ "name" : "apiuser",
+ "description" : "User privileges.",
+ "scopeParamRequired" : false,
+ "composite" : false
+ } ],
+ "client" : {
+ "apiman" : [ ],
+ "apimanui" : [ ],
+ "realm-management" : [ {
+ "id" : "bfde4829-5da9-4359-bb9a-59adfc719eeb",
+ "name" : "manage-identity-providers",
+ "description" : "${role_manage-identity-providers}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "fddf1c14-c222-48ab-b102-44d8ddbdcbc5",
+ "name" : "create-client",
+ "description" : "${role_create-client}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "1444120a-70e7-4f08-9120-f13c0bb96d4e",
+ "name" : "manage-clients",
+ "description" : "${role_manage-clients}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "1a23aaf3-4f3e-4fb7-bb2d-d1113e560145",
+ "name" : "manage-events",
+ "description" : "${role_manage-events}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "b20267b4-f6d0-4f35-bd0a-215dbcecd322",
+ "name" : "impersonation",
+ "description" : "${role_impersonation}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "e0b37a3c-c7ab-4f9f-a825-93000599ab30",
+ "name" : "realm-admin",
+ "description" : "${role_realm-admin}",
+ "scopeParamRequired" : false,
+ "composite" : true,
+ "composites" : {
+ "client" : {
+ "realm-management" : [ "manage-identity-providers", "create-client", "view-events", "manage-clients", "manage-events", "impersonation", "manage-users", "view-realm", "view-clients", "manage-realm", "view-users", "view-identity-providers" ]
+ }
+ }
+ }, {
+ "id" : "227a7df3-3ba8-4620-8c66-d6967dfb419e",
+ "name" : "view-events",
+ "description" : "${role_view-events}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "6f2d8f8c-dfff-43f1-860e-ba29bf7e028d",
+ "name" : "manage-users",
+ "description" : "${role_manage-users}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "4dbf7a04-9680-4907-bc6e-bde5f5551307",
+ "name" : "view-realm",
+ "description" : "${role_view-realm}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "0c0d81ed-cc3a-418a-b7aa-4b1b3d00c748",
+ "name" : "manage-realm",
+ "description" : "${role_manage-realm}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "61e5fa34-f82f-4531-8bdf-9c11e55d28d5",
+ "name" : "view-clients",
+ "description" : "${role_view-clients}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "7295f14d-c95e-4c97-97fa-f201b9a92bde",
+ "name" : "view-users",
+ "description" : "${role_view-users}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "315c6df2-0028-4c01-9cda-7b5237b3fe2b",
+ "name" : "view-identity-providers",
+ "description" : "${role_view-identity-providers}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ } ],
+ "security-admin-console" : [ ],
+ "apiman-gateway-api" : [ ],
+ "admin-cli" : [ ],
+ "broker" : [ {
+ "id" : "13bc4e5e-9058-4958-ac46-e2e3d155ba5b",
+ "name" : "read-token",
+ "description" : "${role_read-token}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ } ],
+ "account" : [ {
+ "id" : "dc68e64a-c8ef-4b75-9523-72fe39f5c2fe",
+ "name" : "manage-account",
+ "description" : "${role_manage-account}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "27c46da3-4c9b-48bd-909b-a7b0449c5498",
+ "name" : "view-profile",
+ "description" : "${role_view-profile}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ } ]
+ }
+ },
+ "groups" : [ ],
+ "defaultRoles" : [ "offline_access", "apiuser" ],
+ "requiredCredentials" : [ "password" ],
+ "otpPolicyType" : "totp",
+ "otpPolicyAlgorithm" : "HmacSHA1",
+ "otpPolicyInitialCounter" : 0,
+ "otpPolicyDigits" : 6,
+ "otpPolicyLookAheadWindow" : 1,
+ "otpPolicyPeriod" : 30,
+ "users" : [ {
+ "id" : "7e1812bb-652d-4343-8ce0-0d9ff6340b09",
+ "createdTimestamp" : 1452717177895,
+ "username" : "admin",
+ "enabled" : true,
+ "totp" : false,
+ "emailVerified" : true,
+ "firstName" : "Admin",
+ "lastName" : "User",
+ "email" : "admin@example.org",
+ "credentials" : [ {
+ "type" : "password",
+ "hashedSaltedValue" : "VfNsGOUkrhrh4KcESDOxhNde1amTyhETqSTDmgeIfBxsniM3vcyQdEYDzuEgW5GwWCyTE4cGHstAzSpzXnJIyg==",
+ "salt" : "04otAOy0+i+LEtmmX0iGhw==",
+ "hashIterations" : 1,
+ "counter" : 0,
+ "algorithm" : "pbkdf2",
+ "digits" : 0,
+ "createdDate" : 1452717197000
+ } ],
+ "requiredActions" : [ ],
+ "realmRoles" : [ "offline_access", "apiadmin", "apiuser" ],
+ "clientRoles" : {
+ "account" : [ "manage-account", "view-profile" ]
+ },
+ "groups" : [ ]
+ }, {
+ "id" : "47fa988a-73c3-4a12-9e5d-92b0edd3115a",
+ "createdTimestamp" : 1452717220155,
+ "username" : "apimanager",
+ "enabled" : true,
+ "totp" : false,
+ "emailVerified" : true,
+ "firstName" : "API",
+ "lastName" : "Manager",
+ "email" : "apimanager@example.org",
+ "credentials" : [ {
+ "type" : "password",
+ "hashedSaltedValue" : "opeyac9aLYiFXeNC7E2g3wSUUg5/HilmjJNd0HP3ipGaeMK2MfGsutNfkjqSmQ+F8xXwzMDIzUn8gQtTSN3fng==",
+ "salt" : "9T1xFfaLFBc1QXcdaH7Uow==",
+ "hashIterations" : 1,
+ "counter" : 0,
+ "algorithm" : "pbkdf2",
+ "digits" : 0,
+ "createdDate" : 1452717231000
+ } ],
+ "requiredActions" : [ ],
+ "realmRoles" : [ "apipublisher", "offline_access", "apiuser" ],
+ "clientRoles" : {
+ "account" : [ "manage-account", "view-profile" ]
+ },
+ "groups" : [ ]
+ } ],
+ "clientScopeMappings" : {
+ "realm-management" : [ {
+ "client" : "admin-cli",
+ "roles" : [ "realm-admin" ]
+ }, {
+ "client" : "security-admin-console",
+ "roles" : [ "realm-admin" ]
+ } ]
+ },
+ "clients" : [ {
+ "id" : "a8d14e70-bd9c-42ca-9945-7eb4db8b5709",
+ "clientId" : "account",
+ "name" : "${client_account}",
+ "baseUrl" : "/auth/realms/apiman/account",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "d42dc5b5-1050-4d2c-898b-6be1ef4095b8",
+ "defaultRoles" : [ "view-profile", "manage-account" ],
+ "redirectUris" : [ "/auth/realms/apiman/account/*" ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : false,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : false,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "28ce3b33-6e0e-4dbf-8a5d-a31cbc7a25df",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "2dd59350-bdf9-489c-bfff-15cdb4a7e112",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "993a14ce-98b8-4ddc-acd7-71fc1f06292b",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "91c78c09-419a-459c-bb23-88547e5429c2",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "484ed91c-961e-424f-8fb8-f1528b62fee0",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "6d69b352-2b0f-48e3-963f-889f15a46579",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "a3473aca-faf5-42e8-add4-6e7b8f88ef00",
+ "clientId" : "admin-cli",
+ "name" : "${client_admin-cli}",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "c62e4c4d-53db-45bf-9bf0-ba50a636b149",
+ "redirectUris" : [ ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : false,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : true,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : true,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "cd891fe3-46a6-4d9d-9c66-b91780cecbbf",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "5d419e4c-a9d6-4f71-99a0-346c6bd5e9d3",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "a968f2a4-da35-4fd9-b03a-b0518d6f7128",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "4b16db84-6fc6-4cd7-b6fc-ed3a901ca01c",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "c3e492e3-1eb4-4fdf-8557-9fe8f7bbeece",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "f94ede04-b2bb-4be7-81ec-e2faa0fbf798",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "1abb0913-8c31-400b-92d6-61293b13f3d3",
+ "clientId" : "apiman",
+ "name" : "Apiman",
+ "description" : "The apiman rest layer.",
+ "rootUrl" : "",
+ "baseUrl" : "/apiman",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "5af5458f-0a96-4251-8f92-08ebcc3a8aa2",
+ "redirectUris" : $APIMAN_URLS,
+ "webOrigins" : [ "*" ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : true,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : true,
+ "frontchannelLogout" : false,
+ "protocol" : "openid-connect",
+ "attributes" : {
+ "saml.assertion.signature" : "false",
+ "saml.force.post.binding" : "false",
+ "saml.multivalued.roles" : "false",
+ "saml.signature.algorithm" : "RSA_SHA256",
+ "saml.encrypt" : "false",
+ "saml_force_name_id_format" : "false",
+ "saml.client.signature" : "false",
+ "saml.authnstatement" : "true",
+ "saml_name_id_format" : "username",
+ "saml.server.signature" : "false",
+ "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#"
+ },
+ "fullScopeAllowed" : true,
+ "nodeReRegistrationTimeout" : -1,
+ "protocolMappers" : [ {
+ "id" : "5b44de25-e322-4d83-9684-5c2a8830c2e4",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "39a09c47-539c-43c8-be7a-c1a8e2a21d03",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "a3fa08bc-b147-4c57-8bda-d57388b9dd80",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "264cc4e4-22a2-4979-86f4-e70d19eb92ab",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "ce359e53-4427-4f19-8587-63a7ce55d2d8",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "00f118c4-54ca-445e-b4ce-12ff1698d0e5",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "98e30b6d-907c-49d5-b466-202f7c7cd82a",
+ "clientId" : "apiman-gateway-api",
+ "name" : "Apiman Gateway API",
+ "description" : "The apiman Gateway REST layer.",
+ "rootUrl" : "",
+ "baseUrl" : "/apiman-gateway-api",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "217b725d-7790-47a7-a3fc-5cf31f92a8db",
+ "redirectUris" : $APIMAN_GATEWAY_URLS,
+ "webOrigins" : [ "*" ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : true,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : true,
+ "frontchannelLogout" : false,
+ "protocol" : "openid-connect",
+ "attributes" : {
+ "saml.assertion.signature" : "false",
+ "saml.force.post.binding" : "false",
+ "saml.multivalued.roles" : "false",
+ "saml.signature.algorithm" : "RSA_SHA256",
+ "saml.encrypt" : "false",
+ "saml_force_name_id_format" : "false",
+ "saml.client.signature" : "false",
+ "saml.authnstatement" : "true",
+ "saml_name_id_format" : "username",
+ "saml.server.signature" : "false",
+ "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#"
+ },
+ "fullScopeAllowed" : true,
+ "nodeReRegistrationTimeout" : -1,
+ "protocolMappers" : [ {
+ "id" : "ef8a8d17-9797-4912-981a-f1e706d38f46",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "f31aa721-cc51-4aaf-abcf-9d0d90bed438",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "71bbac19-ad9e-4caf-90e3-ad8096ddf4e5",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "6aa48269-a109-438b-8b13-1a6d3b43db63",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "64d82ade-ba98-41f3-a748-a4e111d5016b",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "0b90fb5a-79de-4aed-bd5f-ff6302d14e7c",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "d33348b3-93a3-4591-83e3-20204776808d",
+ "clientId" : "apimanui",
+ "name" : "Apiman UI",
+ "description" : "The apiman user interface.",
+ "rootUrl" : "",
+ "baseUrl" : "/apimanui",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "722557fd-a725-4cc0-9dff-7d09c0c47038",
+ "redirectUris" : $APIMANUI_URLS,
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : true,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : true,
+ "frontchannelLogout" : false,
+ "protocol" : "openid-connect",
+ "attributes" : {
+ "saml.assertion.signature" : "false",
+ "saml.force.post.binding" : "false",
+ "saml.multivalued.roles" : "false",
+ "saml.signature.algorithm" : "RSA_SHA256",
+ "saml.encrypt" : "false",
+ "saml_force_name_id_format" : "false",
+ "saml.client.signature" : "false",
+ "saml.authnstatement" : "true",
+ "saml_name_id_format" : "username",
+ "saml.server.signature" : "false",
+ "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#"
+ },
+ "fullScopeAllowed" : true,
+ "nodeReRegistrationTimeout" : -1,
+ "protocolMappers" : [ {
+ "id" : "aa49713e-f06f-429c-8e01-6c40af2a9233",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "9dd13c7c-dc31-4fa8-8f1c-6b9b4d5d3fc9",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "aef631b8-c8db-4e8d-b9dc-2715adbd1912",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "d040ae37-516d-44cc-b75f-e8398ce64ccd",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "18eca5f9-ea5a-40b5-ab55-0daa9675640c",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "a8bcaea4-4e75-4d6e-8c2a-90333594742d",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "34bd3689-5952-49a2-bbc6-c4c2f3b19306",
+ "clientId" : "broker",
+ "name" : "${client_broker}",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "656feef3-a682-4fae-98b9-5af112ccf6f2",
+ "redirectUris" : [ ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : false,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : false,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "0aadd34d-9b4f-4748-86d0-aaf059179ce8",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "ef0cfed0-e489-42f2-9508-6f18700c46ad",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "aeec7844-5ce7-4cfc-9e57-59f5b1bc2fe1",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "c7fc0e6f-44c3-4bbd-b6c6-0efcb523acde",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "7e5d027a-8ad0-4e72-9da2-d853b6de9891",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "28ffb043-6a79-4d3a-986f-a74ddda49b5d",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "07c77079-7ce8-4879-8e20-4b042b59f9f9",
+ "clientId" : "realm-management",
+ "name" : "${client_realm-management}",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "37818abe-3f6e-4fcd-8fff-9a39c9dfbd72",
+ "redirectUris" : [ ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : true,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : false,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : false,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "81512b74-8ca0-4b56-aee6-8796d32ef08e",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "46dd0a74-4e67-49d3-a4bd-9b942477ea8d",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "19a045d2-7c70-4975-bd97-15337a5c6cea",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "a05f7bab-83b9-455e-a6d7-c420eee2a568",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "77afffb5-4afc-42a0-9629-4e1a952b05b6",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "7035d549-8da1-4660-8a21-9b5acbd92fc1",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "a33a0ea7-c67e-4a75-8be6-5be2bf638145",
+ "clientId" : "security-admin-console",
+ "name" : "${client_security-admin-console}",
+ "baseUrl" : "/auth/admin/apiman/console/index.html",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "5f5482ac-cf0c-4ff6-acd5-787dbbfb9f75",
+ "redirectUris" : [ "/auth/admin/apiman/console/*" ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : false,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : true,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "a3483a2d-1075-403e-a461-4c19e1ff19d4",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "2b2bcbb1-75c0-49dd-8f34-4b460c3dc62f",
+ "name" : "locale",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-attribute-mapper",
+ "consentRequired" : false,
+ "consentText" : "${locale}",
+ "config" : {
+ "user.attribute" : "locale",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "locale",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "a944a4ca-957c-4833-b667-fe12cf4d1fef",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "bfe92fd4-7c40-43bf-92ab-5401d7c8d7b6",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "8bf2c5c0-8bb6-4e65-811c-64e9d14ca508",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "6b0df5f5-0cb3-4ed1-8ece-9b4d6ce55f61",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "41be8005-d6f6-47de-88d4-9ed1bff7d092",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ } ],
+ "clientTemplates" : [ ],
+ "browserSecurityHeaders" : {
+ "xFrameOptions" : "SAMEORIGIN",
+ "contentSecurityPolicy" : "frame-src 'self'"
+ },
+ "smtpServer" : { },
+ "eventsEnabled" : false,
+ "eventsListeners" : [ "jboss-logging" ],
+ "enabledEventTypes" : [ ],
+ "adminEventsEnabled" : false,
+ "adminEventsDetailsEnabled" : false,
+ "internationalizationEnabled" : false,
+ "supportedLocales" : [ "" ],
+ "authenticationFlows" : [ {
+ "id" : "ebaff4bc-59a0-4f8c-b1e8-af410be940ae",
+ "alias" : "Handle Existing Account",
+ "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider",
+ "providerId" : "basic-flow",
+ "topLevel" : false,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "idp-confirm-link",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "idp-email-verification",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "requirement" : "ALTERNATIVE",
+ "priority" : 30,
+ "flowAlias" : "Verify Existing Account by Re-authentication",
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : true
+ } ]
+ }, {
+ "id" : "5c7b59d3-d5d3-435d-8641-91e95cc4ecfe",
+ "alias" : "Verify Existing Account by Re-authentication",
+ "description" : "Reauthentication of existing account",
+ "providerId" : "basic-flow",
+ "topLevel" : false,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "idp-username-password-form",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "auth-otp-form",
+ "requirement" : "OPTIONAL",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "2a04990d-8260-49bc-8a3a-68426d6c8270",
+ "alias" : "browser",
+ "description" : "browser based authentication",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "auth-cookie",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "auth-spnego",
+ "requirement" : "DISABLED",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "requirement" : "ALTERNATIVE",
+ "priority" : 30,
+ "flowAlias" : "forms",
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : true
+ } ]
+ }, {
+ "id" : "f1a939a1-6799-4414-9dd3-c71ce8345297",
+ "alias" : "clients",
+ "description" : "Base authentication for clients",
+ "providerId" : "client-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "client-secret",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "client-jwt",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "16a866c5-c4ed-41f8-a4c5-841cab9429c9",
+ "alias" : "direct grant",
+ "description" : "OpenID Connect Resource Owner Grant",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "direct-grant-validate-username",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "direct-grant-validate-password",
+ "requirement" : "REQUIRED",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "direct-grant-validate-otp",
+ "requirement" : "OPTIONAL",
+ "priority" : 30,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "a3ff124b-cd36-4b6c-957e-6c1eaf3f44a2",
+ "alias" : "first broker login",
+ "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticatorConfig" : "review profile config",
+ "authenticator" : "idp-review-profile",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticatorConfig" : "create unique user config",
+ "authenticator" : "idp-create-user-if-unique",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "requirement" : "ALTERNATIVE",
+ "priority" : 30,
+ "flowAlias" : "Handle Existing Account",
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : true
+ } ]
+ }, {
+ "id" : "4beb713d-3ced-4712-894d-5609c0c13021",
+ "alias" : "forms",
+ "description" : "Username, password, otp and other auth forms.",
+ "providerId" : "basic-flow",
+ "topLevel" : false,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "auth-username-password-form",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "auth-otp-form",
+ "requirement" : "OPTIONAL",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "dd7b0b4f-ef09-45a5-a792-ba3586805708",
+ "alias" : "registration",
+ "description" : "registration flow",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "registration-page-form",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "flowAlias" : "registration form",
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : true
+ } ]
+ }, {
+ "id" : "84f47627-e602-48dd-a3ae-e177da1b44e1",
+ "alias" : "registration form",
+ "description" : "registration form",
+ "providerId" : "form-flow",
+ "topLevel" : false,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "registration-user-creation",
+ "requirement" : "REQUIRED",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "registration-profile-action",
+ "requirement" : "REQUIRED",
+ "priority" : 40,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "registration-password-action",
+ "requirement" : "REQUIRED",
+ "priority" : 50,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "registration-recaptcha-action",
+ "requirement" : "DISABLED",
+ "priority" : 60,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "ffbb8c15-d55b-4eac-a19b-30d11ded1d16",
+ "alias" : "reset credentials",
+ "description" : "Reset credentials for a user if they forgot their password or something",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "reset-credentials-choose-user",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "reset-credential-email",
+ "requirement" : "REQUIRED",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "reset-password",
+ "requirement" : "REQUIRED",
+ "priority" : 30,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "reset-otp",
+ "requirement" : "OPTIONAL",
+ "priority" : 40,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ } ],
+ "authenticatorConfig" : [ {
+ "alias" : "create unique user config",
+ "config" : {
+ "require.password.update.after.registration" : "false"
+ }
+ }, {
+ "alias" : "review profile config",
+ "config" : {
+ "update.profile.on.first.login" : "missing"
+ }
+ } ],
+ "requiredActions" : [ {
+ "alias" : "CONFIGURE_TOTP",
+ "name" : "Configure Totp",
+ "providerId" : "CONFIGURE_TOTP",
+ "enabled" : true,
+ "defaultAction" : false,
+ "config" : { }
+ }, {
+ "alias" : "UPDATE_PASSWORD",
+ "name" : "Update Password",
+ "providerId" : "UPDATE_PASSWORD",
+ "enabled" : true,
+ "defaultAction" : false,
+ "config" : { }
+ }, {
+ "alias" : "UPDATE_PROFILE",
+ "name" : "Update Profile",
+ "providerId" : "UPDATE_PROFILE",
+ "enabled" : true,
+ "defaultAction" : false,
+ "config" : { }
+ }, {
+ "alias" : "VERIFY_EMAIL",
+ "name" : "Verify Email",
+ "providerId" : "VERIFY_EMAIL",
+ "enabled" : true,
+ "defaultAction" : false,
+ "config" : { }
+ }, {
+ "alias" : "terms_and_conditions",
+ "name" : "Terms and Conditions",
+ "providerId" : "terms_and_conditions",
+ "enabled" : false,
+ "defaultAction" : false,
+ "config" : { }
+ } ],
+ "browserFlow" : "browser",
+ "registrationFlow" : "registration",
+ "directGrantFlow" : "direct grant",
+ "resetCredentialsFlow" : "reset credentials",
+ "clientAuthenticationFlow" : "clients"
+},
+ {
+ "id" : "qerealm",
+ "realm" : "qerealm",
+ "notBefore" : 0,
+ "revokeRefreshToken" : false,
+ "accessTokenLifespan" : 30,
+ "accessTokenLifespanForImplicitFlow" : 900,
+ "ssoSessionIdleTimeout" : 300,
+ "ssoSessionMaxLifespan" : 300,
+ "offlineSessionIdleTimeout" : 864000,
+ "accessCodeLifespan" : 60,
+ "accessCodeLifespanUserAction" : 60,
+ "accessCodeLifespanLogin" : 60,
+ "enabled" : true,
+ "sslRequired" : "none",
+ "registrationAllowed" : false,
+ "registrationEmailAsUsername" : false,
+ "rememberMe" : false,
+ "verifyEmail" : false,
+ "resetPasswordAllowed" : false,
+ "editUsernameAllowed" : false,
+ "bruteForceProtected" : false,
+ "maxFailureWaitSeconds" : 900,
+ "minimumQuickLoginWaitSeconds" : 60,
+ "waitIncrementSeconds" : 60,
+ "quickLoginCheckMilliSeconds" : 1000,
+ "maxDeltaTimeSeconds" : 43200,
+ "failureFactor" : 30,
+ "privateKey" : "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",
+ "publicKey" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWGyngp7pGoEUnfw+U6IeO8e8ugeQbSN06AaO2sNTQJ2kX7lqeCnuHrCHp+txZPHEH/SplWdd5xoNKy0QaYmWzuaFssjIpgch1lv0gU8oyVMbbzoyviRhAuVnVjdaDz6x0vG+ci65do9bacdR/wenVN6Vc2YTJapTw/g6t6ylZh0mCdbcu8IV/UecQkuwn8/c2emJvY5qngIfHOgxIDqFkxsmn/YT3oY0w+QUpODUrMFy6+GnFITNv0JvV1hypqajuxzBu3mGlZYB58e1/+9OS/bFwGAlG3rluUuJ+Ry65FW6gfIe2Nd13V8JKn9zplQPuYyPXkKPybdzSFUYnn+MQIDAQAB",
+ "certificate" : "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",
+ "codeSecret" : "21a2ac72-a548-42bd-9c29-cb9e6b78f9e3",
+ "roles" : {
+ "realm" : [ {
+ "id" : "f96277cd-c6d0-43fa-9d35-c46f57555976",
+ "name" : "user",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "0e1c7cd9-b486-4efc-9447-9edb4de09d02",
+ "name" : "admin",
+ "description" : "Is allowed access to anything echo-related",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "b8c3b90b-1eaf-4cdd-b9d9-3161e3140d8c",
+ "name" : "offline_access",
+ "description" : "${role_offline-access}",
+ "scopeParamRequired" : true,
+ "composite" : false
+ } ],
+ "client" : {
+ "qeclient" : [ ],
+ "realm-management" : [ {
+ "id" : "b41e8abc-2f79-4021-ad37-015642058b7a",
+ "name" : "view-identity-providers",
+ "description" : "${role_view-identity-providers}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "9cd240ca-2111-4eda-8a75-de220df783e9",
+ "name" : "view-realm",
+ "description" : "${role_view-realm}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "d699120d-7a18-4def-9188-f9f366ea4010",
+ "name" : "manage-events",
+ "description" : "${role_manage-events}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "df4b79af-2a98-4ca0-a2ae-a8bb62d33ce2",
+ "name" : "impersonation",
+ "description" : "${role_impersonation}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "c8ad469f-6fa9-47f5-9648-c88944fb43da",
+ "name" : "view-users",
+ "description" : "${role_view-users}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "bf99a374-c5be-4f81-9f24-890998bc51c9",
+ "name" : "manage-clients",
+ "description" : "${role_manage-clients}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "ec0f0ad0-0fbc-45cc-967b-b408a48b582d",
+ "name" : "manage-realm",
+ "description" : "${role_manage-realm}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "88f42a84-ad03-4bd6-bafe-0ff408232b8e",
+ "name" : "view-events",
+ "description" : "${role_view-events}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "ab3ca10c-9301-4285-b7ba-1d298ffb2aa7",
+ "name" : "manage-users",
+ "description" : "${role_manage-users}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "fdbb6b19-7f95-46a0-8db7-1fb81bd3f03f",
+ "name" : "manage-identity-providers",
+ "description" : "${role_manage-identity-providers}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "207f27db-70a8-4cc3-918a-b90a4d11ff8f",
+ "name" : "view-clients",
+ "description" : "${role_view-clients}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "6122efcc-15d5-439c-a5e8-9fe6163913ef",
+ "name" : "realm-admin",
+ "description" : "${role_realm-admin}",
+ "scopeParamRequired" : false,
+ "composite" : true,
+ "composites" : {
+ "client" : {
+ "realm-management" : [ "view-identity-providers", "view-realm", "manage-events", "impersonation", "manage-clients", "view-users", "manage-realm", "view-events", "manage-users", "manage-identity-providers", "view-clients" ]
+ }
+ }
+ } ],
+ "apiman_conf" : [ ],
+ "security-admin-console" : [ ],
+ "admin-cli" : [ ],
+ "broker" : [ {
+ "id" : "408a0363-a07c-49fd-aabe-4e8bd8f6f63a",
+ "name" : "read-token",
+ "description" : "${role_read-token}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ } ],
+ "account" : [ {
+ "id" : "67ed553b-a528-4479-bf4b-2fabf2119bd0",
+ "name" : "manage-account",
+ "description" : "${role_manage-account}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ }, {
+ "id" : "5452cea3-66bc-49dc-a6e6-76321e4d2f73",
+ "name" : "view-profile",
+ "description" : "${role_view-profile}",
+ "scopeParamRequired" : false,
+ "composite" : false
+ } ]
+ }
+ },
+ "groups" : [ ],
+ "defaultRoles" : [ "offline_access" ],
+ "requiredCredentials" : [ "password" ],
+ "otpPolicyType" : "totp",
+ "otpPolicyAlgorithm" : "HmacSHA1",
+ "otpPolicyInitialCounter" : 0,
+ "otpPolicyDigits" : 6,
+ "otpPolicyLookAheadWindow" : 1,
+ "otpPolicyPeriod" : 30,
+ "users" : [ {
+ "id" : "de4af322-85b2-4dbe-8d53-6a2ee29e4080",
+ "username" : "admin",
+ "enabled" : true,
+ "totp" : false,
+ "emailVerified" : true,
+ "firstName" : "admin",
+ "lastName" : "admin",
+ "email" : "admin@admin",
+ "credentials" : [ {
+ "type" : "password",
+ "hashedSaltedValue" : "bFNBrC3Z2WrFjUnnDRu6pDdJ90/8BirowTmMgLey/VYyNi3jXylfGnyJ8RmNeNd9N+nUR2zxK34CpTUixagtig==",
+ "salt" : "7cn1i879ZmKx/Szrsk6nUw==",
+ "hashIterations" : 1,
+ "counter" : 0,
+ "algorithm" : "pbkdf2",
+ "digits" : 0
+ } ],
+ "requiredActions" : [ ],
+ "realmRoles" : [ "user", "admin", "offline_access" ],
+ "clientRoles" : {
+ "account" : [ "manage-account", "view-profile" ]
+ },
+ "groups" : [ ]
+ }, {
+ "id" : "b9ac3953-a9be-42f8-a28c-9911c5b9565f",
+ "createdTimestamp" : 1445868108359,
+ "username" : "nobody",
+ "enabled" : true,
+ "totp" : false,
+ "emailVerified" : true,
+ "firstName" : "nobody",
+ "lastName" : "nobody",
+ "email" : "nobody@nobody",
+ "credentials" : [ {
+ "type" : "password",
+ "hashedSaltedValue" : "ynGoGN8y9GxzpQmT03TP4ZLmDpz9ECwoBj4quKE8I3CXDO0H40Wh2segVZZAtOLpMN4KEwk/K4h74KkZocf/4g==",
+ "salt" : "ERm/bB0ew44oOJBiS9Oa8g==",
+ "hashIterations" : 1,
+ "counter" : 0,
+ "algorithm" : "pbkdf2",
+ "digits" : 0
+ } ],
+ "requiredActions" : [ ],
+ "realmRoles" : [ "offline_access" ],
+ "clientRoles" : {
+ "account" : [ "manage-account", "view-profile" ]
+ },
+ "groups" : [ ]
+ }, {
+ "id" : "54bb8773-9487-4999-8630-6ab56be7ceda",
+ "createdTimestamp" : 1445868083927,
+ "username" : "user",
+ "enabled" : true,
+ "totp" : false,
+ "emailVerified" : true,
+ "firstName" : "user",
+ "lastName" : "user",
+ "email" : "user@user",
+ "credentials" : [ {
+ "type" : "password",
+ "hashedSaltedValue" : "3OIYdvn6S6k9hHD5iG9laQvlRz921JraEP9UnD8kyih81+IN8lo6tyzYUnJ1EX6vQUY7ZyNFAMIctE7KBfk2AA==",
+ "salt" : "DIydRjhwjqBhS1jzxnuMDA==",
+ "hashIterations" : 1,
+ "counter" : 0,
+ "algorithm" : "pbkdf2",
+ "digits" : 0
+ } ],
+ "requiredActions" : [ ],
+ "realmRoles" : [ "user", "offline_access" ],
+ "clientRoles" : {
+ "account" : [ "manage-account", "view-profile" ]
+ },
+ "groups" : [ ]
+ } ],
+ "clientScopeMappings" : {
+ "realm-management" : [ {
+ "client" : "admin-cli",
+ "roles" : [ "realm-admin" ]
+ }, {
+ "client" : "security-admin-console",
+ "roles" : [ "realm-admin" ]
+ } ]
+ },
+ "clients" : [ {
+ "id" : "1f97eaf4-6435-48dd-8b77-f0a61dbd5343",
+ "clientId" : "account",
+ "name" : "${client_account}",
+ "baseUrl" : "/auth/realms/qerealm/account",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "06e44ca8-fd8e-4754-8f5d-bb0d9a6ebcc6",
+ "defaultRoles" : [ "view-profile", "manage-account" ],
+ "redirectUris" : [ "/auth/realms/qerealm/account/*" ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : false,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : false,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "76e84547-a1db-4fd5-b650-2e39de451985",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "b7da15d8-c92b-4287-b40c-71f96fea2445",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "e46b35d9-d1fd-4a78-9bab-43996517e813",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "7307a307-62ed-40c0-9cfa-1ee6cdde0052",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "5aaeeb2b-17b9-4b93-957f-d4ae4bd98d33",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "b007ff11-9bbb-43bb-87a0-a2271d2bd54d",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "Claim JSON Type" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "c3560cdc-e801-4f5f-ba93-a843c44ba0b7",
+ "clientId" : "admin-cli",
+ "name" : "${client_admin-cli}",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "90fe83b9-a49f-4dee-8d77-980b3fe181cc",
+ "redirectUris" : [ ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : false,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : true,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : true,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "402dac5c-c87f-47f5-82aa-7cd6e3acfe36",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "1f09b92b-6f2f-4da0-b8ff-9c07b363311e",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "8faaff31-0ad6-4260-b2af-811f199521ea",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "a1a3ca95-ab17-40e9-afa3-616acf8f5313",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "eab06e2e-f1aa-4f0e-99d8-d893df30ed8c",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "83f991d2-b4ea-4c14-a5d8-306f800468c1",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "b5f330f6-cdca-4581-b34e-29e45d7a19cb",
+ "clientId" : "apiman_conf",
+ "name" : "",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "f814a076-8e3a-4360-907d-6b7fc21401e4",
+ "redirectUris" : [ "/*" ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : true,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : false,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : false,
+ "frontchannelLogout" : false,
+ "protocol" : "openid-connect",
+ "attributes" : {
+ "saml.assertion.signature" : "false",
+ "saml.force.post.binding" : "false",
+ "saml.multivalued.roles" : "false",
+ "saml.signature.algorithm" : "RSA_SHA256",
+ "saml.encrypt" : "false",
+ "saml_force_name_id_format" : "false",
+ "saml.client.signature" : "false",
+ "saml.authnstatement" : "true",
+ "saml_name_id_format" : "username",
+ "saml.server.signature" : "false",
+ "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#"
+ },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : -1,
+ "protocolMappers" : [ {
+ "id" : "2f333ceb-de9d-4ded-b87f-90cbc04f3b63",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "830fa2b5-a3e6-4b14-ab91-f5a1e136b7da",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "63aaed19-38b6-4c10-975b-5416c133636d",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "74220c7a-2353-47db-acff-68a4f0feb80c",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "628b9f62-bf43-4ace-baf9-02a9c41cae65",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "jsonType.label" : "String"
+ }
+ }, {
+ "id" : "313fb6c2-4e31-4868-9c47-606d9e3fd7e0",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "jsonType.label" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "6c29081a-a646-4e1c-94fc-b429527e564a",
+ "clientId" : "broker",
+ "name" : "${client_broker}",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "38967b66-a777-4fb5-a1a7-fd42296b7b1f",
+ "redirectUris" : [ ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : false,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : false,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "6bb1ffec-0538-4a78-8afc-32f921a23118",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "a38f7374-4134-4104-8a24-c675e2393e3d",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "48d33d93-ade6-4a99-9628-b4f5bd182334",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "b3291055-d3e7-4e4b-824e-fd441417f12f",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "9966fc24-3c36-428b-a1a5-3dd3e053e7ce",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "3a498871-ee98-4ace-8083-7e90d17fc1ff",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "Claim JSON Type" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "f23c7ffe-131c-4629-b892-4a545b543461",
+ "clientId" : "qeclient",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "c927fc71-b882-4ae9-9939-c629ba6ae06f",
+ "redirectUris" : [ ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : false,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : true,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : true,
+ "frontchannelLogout" : false,
+ "protocol" : "openid-connect",
+ "attributes" : {
+ "saml.assertion.signature" : "false",
+ "saml.force.post.binding" : "false",
+ "saml.multivalued.roles" : "false",
+ "saml.signature.algorithm" : "RSA_SHA256",
+ "saml.encrypt" : "false",
+ "saml_force_name_id_format" : "false",
+ "saml.client.signature" : "false",
+ "saml.authnstatement" : "true",
+ "saml_name_id_format" : "username",
+ "saml.server.signature" : "false"
+ },
+ "fullScopeAllowed" : true,
+ "nodeReRegistrationTimeout" : -1,
+ "protocolMappers" : [ {
+ "id" : "855c48e2-8751-4242-a586-943b99334f58",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "1199e302-a112-450e-946c-21f1f305237a",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "9cf38815-494b-45c8-be91-329527f7da5a",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "04cb22df-bb9f-47d9-ace6-bc07d6aee31b",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "b71cde8f-c6be-4582-bb71-1363d6391c87",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "f5ebcab2-fb3e-49b8-a32e-de7ca9bb0a59",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "45510d6f-fcda-4915-8981-2d048413cd4c",
+ "clientId" : "realm-management",
+ "name" : "${client_realm-management}",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "77d877eb-7f49-474e-b739-9f16a0d96884",
+ "redirectUris" : [ ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : true,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : false,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : false,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "086db4c0-5457-4ceb-bfe2-551fcc216080",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "c2bf289c-3d2b-4dd5-871b-c5b2dd1b3f68",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "a8013a77-680a-4759-ad54-f6c25df3095b",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "3bdbb8da-fd46-4e35-9a25-46c77f02e9fd",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "8564d12a-5637-44c9-9f4e-af40efb718aa",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "de0d2bf2-2b61-4cc8-b2a5-dd0f1f4cabae",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ }, {
+ "id" : "2c49c344-18ba-4dff-92e6-ba49adb8489f",
+ "clientId" : "security-admin-console",
+ "name" : "${client_security-admin-console}",
+ "baseUrl" : "/auth/admin/qerealm/console/index.html",
+ "surrogateAuthRequired" : false,
+ "enabled" : true,
+ "clientAuthenticatorType" : "client-secret",
+ "secret" : "a3b6da19-6f23-4591-8f25-d1b4d2e127db",
+ "redirectUris" : [ "/auth/admin/qerealm/console/*" ],
+ "webOrigins" : [ ],
+ "notBefore" : 0,
+ "bearerOnly" : false,
+ "consentRequired" : false,
+ "standardFlowEnabled" : true,
+ "implicitFlowEnabled" : false,
+ "directAccessGrantsEnabled" : false,
+ "serviceAccountsEnabled" : false,
+ "publicClient" : true,
+ "frontchannelLogout" : false,
+ "attributes" : { },
+ "fullScopeAllowed" : false,
+ "nodeReRegistrationTimeout" : 0,
+ "protocolMappers" : [ {
+ "id" : "e3955010-4e9a-4e1a-993a-2ff8140d116e",
+ "name" : "username",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${username}",
+ "config" : {
+ "user.attribute" : "username",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "preferred_username",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "a3fd7ce0-ce59-4de1-858a-d2131b188d15",
+ "name" : "family name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${familyName}",
+ "config" : {
+ "user.attribute" : "lastName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "family_name",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "01c5141e-aba0-490e-8f53-08c13861317c",
+ "name" : "full name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-full-name-mapper",
+ "consentRequired" : true,
+ "consentText" : "${fullName}",
+ "config" : {
+ "id.token.claim" : "true",
+ "access.token.claim" : "true"
+ }
+ }, {
+ "id" : "b6251621-ed1e-4c7f-9a4a-4a928c85e5c7",
+ "name" : "role list",
+ "protocol" : "saml",
+ "protocolMapper" : "saml-role-list-mapper",
+ "consentRequired" : false,
+ "config" : {
+ "single" : "false",
+ "attribute.nameformat" : "Basic",
+ "attribute.name" : "Role"
+ }
+ }, {
+ "id" : "7362035b-b814-47f8-b2ea-cf1ff90b3ada",
+ "name" : "given name",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${givenName}",
+ "config" : {
+ "user.attribute" : "firstName",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "given_name",
+ "Claim JSON Type" : "String"
+ }
+ }, {
+ "id" : "1765cd70-af59-44d0-8276-b3484ca0f6f0",
+ "name" : "email",
+ "protocol" : "openid-connect",
+ "protocolMapper" : "oidc-usermodel-property-mapper",
+ "consentRequired" : true,
+ "consentText" : "${email}",
+ "config" : {
+ "user.attribute" : "email",
+ "id.token.claim" : "true",
+ "access.token.claim" : "true",
+ "claim.name" : "email",
+ "Claim JSON Type" : "String"
+ }
+ } ],
+ "useTemplateConfig" : false,
+ "useTemplateScope" : false,
+ "useTemplateMappers" : false
+ } ],
+ "clientTemplates" : [ ],
+ "browserSecurityHeaders" : {
+ "xFrameOptions" : "SAMEORIGIN",
+ "contentSecurityPolicy" : "frame-src 'self'"
+ },
+ "smtpServer" : { },
+ "eventsEnabled" : false,
+ "eventsListeners" : [ "jboss-logging" ],
+ "enabledEventTypes" : [ ],
+ "adminEventsEnabled" : false,
+ "adminEventsDetailsEnabled" : false,
+ "internationalizationEnabled" : false,
+ "supportedLocales" : [ ],
+ "authenticationFlows" : [ {
+ "id" : "fa3fb1a7-100a-4dd9-ba40-31dae0731c63",
+ "alias" : "Handle Existing Account",
+ "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider",
+ "providerId" : "basic-flow",
+ "topLevel" : false,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "idp-confirm-link",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "idp-email-verification",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "requirement" : "ALTERNATIVE",
+ "priority" : 30,
+ "flowAlias" : "Verify Existing Account by Re-authentication",
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : true
+ } ]
+ }, {
+ "id" : "74ddcecd-9253-46a0-b9cc-55758c7c83c5",
+ "alias" : "Verify Existing Account by Re-authentication",
+ "description" : "Reauthentication of existing account",
+ "providerId" : "basic-flow",
+ "topLevel" : false,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "idp-username-password-form",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "auth-otp-form",
+ "requirement" : "OPTIONAL",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "7ded1456-6572-4f7b-a193-93efdc163662",
+ "alias" : "browser",
+ "description" : "browser based authentication",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "auth-cookie",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "auth-spnego",
+ "requirement" : "DISABLED",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "requirement" : "ALTERNATIVE",
+ "priority" : 30,
+ "flowAlias" : "forms",
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : true
+ } ]
+ }, {
+ "id" : "d3518d7b-4713-4ca2-a917-3496dfa865e7",
+ "alias" : "clients",
+ "description" : "Base authentication for clients",
+ "providerId" : "client-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "client-secret",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "client-jwt",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "2720d31c-a756-44f9-a181-676ad9b16eb2",
+ "alias" : "direct grant",
+ "description" : "OpenID Connect Resource Owner Grant",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "direct-grant-validate-username",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "direct-grant-validate-password",
+ "requirement" : "REQUIRED",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "direct-grant-validate-otp",
+ "requirement" : "OPTIONAL",
+ "priority" : 30,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "825a13a6-2e26-481c-975e-dedd64eba091",
+ "alias" : "first broker login",
+ "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticatorConfig" : "review profile config",
+ "authenticator" : "idp-review-profile",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticatorConfig" : "create unique user config",
+ "authenticator" : "idp-create-user-if-unique",
+ "requirement" : "ALTERNATIVE",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "requirement" : "ALTERNATIVE",
+ "priority" : 30,
+ "flowAlias" : "Handle Existing Account",
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : true
+ } ]
+ }, {
+ "id" : "f20ac71a-432f-4a11-96a8-aed7f3f53c3b",
+ "alias" : "forms",
+ "description" : "Username, password, otp and other auth forms.",
+ "providerId" : "basic-flow",
+ "topLevel" : false,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "auth-username-password-form",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "auth-otp-form",
+ "requirement" : "OPTIONAL",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "b40dab19-fcc1-4885-bbc8-a6d29fdfb356",
+ "alias" : "registration",
+ "description" : "registration flow",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "registration-page-form",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "flowAlias" : "registration form",
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : true
+ } ]
+ }, {
+ "id" : "1f75d652-c851-46f2-b28b-ef6b0e9e9154",
+ "alias" : "registration form",
+ "description" : "registration form",
+ "providerId" : "form-flow",
+ "topLevel" : false,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "registration-user-creation",
+ "requirement" : "REQUIRED",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "registration-profile-action",
+ "requirement" : "REQUIRED",
+ "priority" : 40,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "registration-password-action",
+ "requirement" : "REQUIRED",
+ "priority" : 50,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "registration-recaptcha-action",
+ "requirement" : "DISABLED",
+ "priority" : 60,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ }, {
+ "id" : "1dea02c2-0b24-426b-a28a-438da63e1d29",
+ "alias" : "reset credentials",
+ "description" : "Reset credentials for a user if they forgot their password or something",
+ "providerId" : "basic-flow",
+ "topLevel" : true,
+ "builtIn" : true,
+ "authenticationExecutions" : [ {
+ "authenticator" : "reset-credentials-choose-user",
+ "requirement" : "REQUIRED",
+ "priority" : 10,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "reset-credential-email",
+ "requirement" : "REQUIRED",
+ "priority" : 20,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "reset-password",
+ "requirement" : "REQUIRED",
+ "priority" : 30,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ }, {
+ "authenticator" : "reset-otp",
+ "requirement" : "OPTIONAL",
+ "priority" : 40,
+ "userSetupAllowed" : false,
+ "autheticatorFlow" : false
+ } ]
+ } ],
+ "authenticatorConfig" : [ {
+ "alias" : "create unique user config",
+ "config" : {
+ "require.password.update.after.registration" : "false"
+ }
+ }, {
+ "alias" : "review profile config",
+ "config" : {
+ "update.profile.on.first.login" : "missing"
+ }
+ } ],
+ "requiredActions" : [ {
+ "alias" : "CONFIGURE_TOTP",
+ "name" : "Configure Totp",
+ "providerId" : "CONFIGURE_TOTP",
+ "enabled" : true,
+ "defaultAction" : false,
+ "config" : { }
+ }, {
+ "alias" : "UPDATE_PASSWORD",
+ "name" : "Update Password",
+ "providerId" : "UPDATE_PASSWORD",
+ "enabled" : true,
+ "defaultAction" : false,
+ "config" : { }
+ }, {
+ "alias" : "UPDATE_PROFILE",
+ "name" : "Update Profile",
+ "providerId" : "UPDATE_PROFILE",
+ "enabled" : true,
+ "defaultAction" : false,
+ "config" : { }
+ }, {
+ "alias" : "VERIFY_EMAIL",
+ "name" : "Verify Email",
+ "providerId" : "VERIFY_EMAIL",
+ "enabled" : true,
+ "defaultAction" : false,
+ "config" : { }
+ }, {
+ "alias" : "terms_and_conditions",
+ "name" : "Terms and Conditions",
+ "providerId" : "terms_and_conditions",
+ "enabled" : false,
+ "defaultAction" : false,
+ "config" : { }
+ } ],
+ "browserFlow" : "browser",
+ "registrationFlow" : "registration",
+ "directGrantFlow" : "direct grant",
+ "resetCredentialsFlow" : "reset credentials",
+ "clientAuthenticationFlow" : "clients"
+}
+]
diff --git a/tools/docker/keycloak/realms/apiman-users-0.json b/tools/docker/keycloak/realms/apiman-users-0.json
deleted file mode 100644
index 2d039ab..0000000
--- a/tools/docker/keycloak/realms/apiman-users-0.json
+++ /dev/null
@@ -1,56 +0,0 @@
-{
- "realm" : "apiman",
- "users" : [ {
- "id" : "7e1812bb-652d-4343-8ce0-0d9ff6340b09",
- "createdTimestamp" : 1452717177895,
- "username" : "admin",
- "enabled" : true,
- "totp" : false,
- "emailVerified" : true,
- "firstName" : "Admin",
- "lastName" : "User",
- "email" : "admin@example.org",
- "credentials" : [ {
- "type" : "password",
- "hashedSaltedValue" : "VfNsGOUkrhrh4KcESDOxhNde1amTyhETqSTDmgeIfBxsniM3vcyQdEYDzuEgW5GwWCyTE4cGHstAzSpzXnJIyg==",
- "salt" : "04otAOy0+i+LEtmmX0iGhw==",
- "hashIterations" : 1,
- "counter" : 0,
- "algorithm" : "pbkdf2",
- "digits" : 0,
- "createdDate" : 1452717197000
- } ],
- "requiredActions" : [ ],
- "realmRoles" : [ "apiadmin", "offline_access", "apiuser" ],
- "clientRoles" : {
- "account" : [ "manage-account", "view-profile" ]
- },
- "groups" : [ ]
- }, {
- "id" : "47fa988a-73c3-4a12-9e5d-92b0edd3115a",
- "createdTimestamp" : 1452717220155,
- "username" : "apimanager",
- "enabled" : true,
- "totp" : false,
- "emailVerified" : true,
- "firstName" : "API",
- "lastName" : "Manager",
- "email" : "apimanager@example.org",
- "credentials" : [ {
- "type" : "password",
- "hashedSaltedValue" : "opeyac9aLYiFXeNC7E2g3wSUUg5/HilmjJNd0HP3ipGaeMK2MfGsutNfkjqSmQ+F8xXwzMDIzUn8gQtTSN3fng==",
- "salt" : "9T1xFfaLFBc1QXcdaH7Uow==",
- "hashIterations" : 1,
- "counter" : 0,
- "algorithm" : "pbkdf2",
- "digits" : 0,
- "createdDate" : 1452717231000
- } ],
- "requiredActions" : [ ],
- "realmRoles" : [ "offline_access", "apiuser", "apipublisher" ],
- "clientRoles" : {
- "account" : [ "manage-account", "view-profile" ]
- },
- "groups" : [ ]
- } ]
-}
\ No newline at end of file
diff --git a/tools/docker/keycloak/realms/qerealm-realm.json b/tools/docker/keycloak/realms/qerealm-realm.json
deleted file mode 100644
index d93cc28..0000000
--- a/tools/docker/keycloak/realms/qerealm-realm.json
+++ /dev/null
@@ -1,1232 +0,0 @@
-{
- "id" : "qerealm",
- "realm" : "qerealm",
- "notBefore" : 0,
- "revokeRefreshToken" : false,
- "accessTokenLifespan" : 30,
- "accessTokenLifespanForImplicitFlow" : 900,
- "ssoSessionIdleTimeout" : 300,
- "ssoSessionMaxLifespan" : 300,
- "offlineSessionIdleTimeout" : 864000,
- "accessCodeLifespan" : 60,
- "accessCodeLifespanUserAction" : 60,
- "accessCodeLifespanLogin" : 60,
- "enabled" : true,
- "sslRequired" : "none",
- "registrationAllowed" : false,
- "registrationEmailAsUsername" : false,
- "rememberMe" : false,
- "verifyEmail" : false,
- "resetPasswordAllowed" : false,
- "editUsernameAllowed" : false,
- "bruteForceProtected" : false,
- "maxFailureWaitSeconds" : 900,
- "minimumQuickLoginWaitSeconds" : 60,
- "waitIncrementSeconds" : 60,
- "quickLoginCheckMilliSeconds" : 1000,
- "maxDeltaTimeSeconds" : 43200,
- "failureFactor" : 30,
- "privateKey" : "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",
- "publicKey" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWGyngp7pGoEUnfw+U6IeO8e8ugeQbSN06AaO2sNTQJ2kX7lqeCnuHrCHp+txZPHEH/SplWdd5xoNKy0QaYmWzuaFssjIpgch1lv0gU8oyVMbbzoyviRhAuVnVjdaDz6x0vG+ci65do9bacdR/wenVN6Vc2YTJapTw/g6t6ylZh0mCdbcu8IV/UecQkuwn8/c2emJvY5qngIfHOgxIDqFkxsmn/YT3oY0w+QUpODUrMFy6+GnFITNv0JvV1hypqajuxzBu3mGlZYB58e1/+9OS/bFwGAlG3rluUuJ+Ry65FW6gfIe2Nd13V8JKn9zplQPuYyPXkKPybdzSFUYnn+MQIDAQAB",
- "certificate" : "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",
- "codeSecret" : "21a2ac72-a548-42bd-9c29-cb9e6b78f9e3",
- "roles" : {
- "realm" : [ {
- "id" : "9f4c5c3f-149b-4bf9-9b28-c196b6828728",
- "name" : "admin",
- "description" : "Is allowed access to anything echo-related",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "06765bde-bf16-45bd-9fe5-f16c43c27c1e",
- "name" : "user",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "52960350-b846-417a-bc92-e8f10a3f4305",
- "name" : "offline_access",
- "description" : "${role_offline-access}",
- "scopeParamRequired" : true,
- "composite" : false
- } ],
- "client" : {
- "qeclient" : [ ],
- "realm-management" : [ {
- "id" : "b41e8abc-2f79-4021-ad37-015642058b7a",
- "name" : "view-identity-providers",
- "description" : "${role_view-identity-providers}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "9cd240ca-2111-4eda-8a75-de220df783e9",
- "name" : "view-realm",
- "description" : "${role_view-realm}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "d699120d-7a18-4def-9188-f9f366ea4010",
- "name" : "manage-events",
- "description" : "${role_manage-events}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "df4b79af-2a98-4ca0-a2ae-a8bb62d33ce2",
- "name" : "impersonation",
- "description" : "${role_impersonation}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "c8ad469f-6fa9-47f5-9648-c88944fb43da",
- "name" : "view-users",
- "description" : "${role_view-users}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "bf99a374-c5be-4f81-9f24-890998bc51c9",
- "name" : "manage-clients",
- "description" : "${role_manage-clients}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "ec0f0ad0-0fbc-45cc-967b-b408a48b582d",
- "name" : "manage-realm",
- "description" : "${role_manage-realm}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "88f42a84-ad03-4bd6-bafe-0ff408232b8e",
- "name" : "view-events",
- "description" : "${role_view-events}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "ab3ca10c-9301-4285-b7ba-1d298ffb2aa7",
- "name" : "manage-users",
- "description" : "${role_manage-users}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "fdbb6b19-7f95-46a0-8db7-1fb81bd3f03f",
- "name" : "manage-identity-providers",
- "description" : "${role_manage-identity-providers}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "207f27db-70a8-4cc3-918a-b90a4d11ff8f",
- "name" : "view-clients",
- "description" : "${role_view-clients}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "6122efcc-15d5-439c-a5e8-9fe6163913ef",
- "name" : "realm-admin",
- "description" : "${role_realm-admin}",
- "scopeParamRequired" : false,
- "composite" : true,
- "composites" : {
- "client" : {
- "realm-management" : [ "view-identity-providers", "view-realm", "manage-events", "impersonation", "manage-clients", "view-users", "manage-realm", "view-events", "manage-users", "manage-identity-providers", "view-clients" ]
- }
- }
- } ],
- "security-admin-console" : [ ],
- "apiman_conf" : [ ],
- "admin-cli" : [ ],
- "broker" : [ {
- "id" : "408a0363-a07c-49fd-aabe-4e8bd8f6f63a",
- "name" : "read-token",
- "description" : "${role_read-token}",
- "scopeParamRequired" : false,
- "composite" : false
- } ],
- "account" : [ {
- "id" : "67ed553b-a528-4479-bf4b-2fabf2119bd0",
- "name" : "manage-account",
- "description" : "${role_manage-account}",
- "scopeParamRequired" : false,
- "composite" : false
- }, {
- "id" : "5452cea3-66bc-49dc-a6e6-76321e4d2f73",
- "name" : "view-profile",
- "description" : "${role_view-profile}",
- "scopeParamRequired" : false,
- "composite" : false
- } ]
- }
- },
- "groups" : [ ],
- "defaultRoles" : [ "offline_access" ],
- "requiredCredentials" : [ "password" ],
- "otpPolicyType" : "totp",
- "otpPolicyAlgorithm" : "HmacSHA1",
- "otpPolicyInitialCounter" : 0,
- "otpPolicyDigits" : 6,
- "otpPolicyLookAheadWindow" : 1,
- "otpPolicyPeriod" : 30,
- "clientScopeMappings" : {
- "realm-management" : [ {
- "client" : "security-admin-console",
- "roles" : [ "realm-admin" ]
- }, {
- "client" : "admin-cli",
- "roles" : [ "realm-admin" ]
- } ]
- },
- "clients" : [ {
- "id" : "f23c7ffe-131c-4629-b892-4a545b543461",
- "clientId" : "qeclient",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "c927fc71-b882-4ae9-9939-c629ba6ae06f",
- "redirectUris" : [ ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : false,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : true,
- "serviceAccountsEnabled" : false,
- "publicClient" : true,
- "frontchannelLogout" : false,
- "protocol" : "openid-connect",
- "attributes" : {
- "saml.assertion.signature" : "false",
- "saml.force.post.binding" : "false",
- "saml.multivalued.roles" : "false",
- "saml.signature.algorithm" : "RSA_SHA256",
- "saml.encrypt" : "false",
- "saml_force_name_id_format" : "false",
- "saml.client.signature" : "false",
- "saml.authnstatement" : "true",
- "saml_name_id_format" : "username",
- "saml.server.signature" : "false"
- },
- "fullScopeAllowed" : true,
- "nodeReRegistrationTimeout" : -1,
- "protocolMappers" : [ {
- "id" : "855c48e2-8751-4242-a586-943b99334f58",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "1199e302-a112-450e-946c-21f1f305237a",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "9cf38815-494b-45c8-be91-329527f7da5a",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "04cb22df-bb9f-47d9-ace6-bc07d6aee31b",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "b71cde8f-c6be-4582-bb71-1363d6391c87",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "f5ebcab2-fb3e-49b8-a32e-de7ca9bb0a59",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "45510d6f-fcda-4915-8981-2d048413cd4c",
- "clientId" : "realm-management",
- "name" : "${client_realm-management}",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "77d877eb-7f49-474e-b739-9f16a0d96884",
- "redirectUris" : [ ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : true,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : false,
- "serviceAccountsEnabled" : false,
- "publicClient" : false,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "086db4c0-5457-4ceb-bfe2-551fcc216080",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "c2bf289c-3d2b-4dd5-871b-c5b2dd1b3f68",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "a8013a77-680a-4759-ad54-f6c25df3095b",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "3bdbb8da-fd46-4e35-9a25-46c77f02e9fd",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "8564d12a-5637-44c9-9f4e-af40efb718aa",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "de0d2bf2-2b61-4cc8-b2a5-dd0f1f4cabae",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "2c49c344-18ba-4dff-92e6-ba49adb8489f",
- "clientId" : "security-admin-console",
- "name" : "${client_security-admin-console}",
- "baseUrl" : "/auth/admin/qerealm/console/index.html",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "a3b6da19-6f23-4591-8f25-d1b4d2e127db",
- "redirectUris" : [ "/auth/admin/qerealm/console/*" ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : false,
- "serviceAccountsEnabled" : false,
- "publicClient" : true,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "e3955010-4e9a-4e1a-993a-2ff8140d116e",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "a3fd7ce0-ce59-4de1-858a-d2131b188d15",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "01c5141e-aba0-490e-8f53-08c13861317c",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "b6251621-ed1e-4c7f-9a4a-4a928c85e5c7",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "7362035b-b814-47f8-b2ea-cf1ff90b3ada",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "1765cd70-af59-44d0-8276-b3484ca0f6f0",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "Claim JSON Type" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "b5f330f6-cdca-4581-b34e-29e45d7a19cb",
- "clientId" : "apiman_conf",
- "name" : "",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "f814a076-8e3a-4360-907d-6b7fc21401e4",
- "redirectUris" : [ "/*" ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : true,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : false,
- "serviceAccountsEnabled" : false,
- "publicClient" : false,
- "frontchannelLogout" : false,
- "protocol" : "openid-connect",
- "attributes" : {
- "saml.assertion.signature" : "false",
- "saml.force.post.binding" : "false",
- "saml.multivalued.roles" : "false",
- "saml.signature.algorithm" : "RSA_SHA256",
- "saml.encrypt" : "false",
- "saml_force_name_id_format" : "false",
- "saml.client.signature" : "false",
- "saml.authnstatement" : "true",
- "saml_name_id_format" : "username",
- "saml.server.signature" : "false",
- "saml_signature_canonicalization_method" : "http://www.w3.org/2001/10/xml-exc-c14n#"
- },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : -1,
- "protocolMappers" : [ {
- "id" : "2f333ceb-de9d-4ded-b87f-90cbc04f3b63",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "830fa2b5-a3e6-4b14-ab91-f5a1e136b7da",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "63aaed19-38b6-4c10-975b-5416c133636d",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "74220c7a-2353-47db-acff-68a4f0feb80c",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "628b9f62-bf43-4ace-baf9-02a9c41cae65",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "313fb6c2-4e31-4868-9c47-606d9e3fd7e0",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "c3560cdc-e801-4f5f-ba93-a843c44ba0b7",
- "clientId" : "admin-cli",
- "name" : "${client_admin-cli}",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "90fe83b9-a49f-4dee-8d77-980b3fe181cc",
- "redirectUris" : [ ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : false,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : true,
- "serviceAccountsEnabled" : false,
- "publicClient" : true,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "402dac5c-c87f-47f5-82aa-7cd6e3acfe36",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "1f09b92b-6f2f-4da0-b8ff-9c07b363311e",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "8faaff31-0ad6-4260-b2af-811f199521ea",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "a1a3ca95-ab17-40e9-afa3-616acf8f5313",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "jsonType.label" : "String"
- }
- }, {
- "id" : "eab06e2e-f1aa-4f0e-99d8-d893df30ed8c",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "83f991d2-b4ea-4c14-a5d8-306f800468c1",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "jsonType.label" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "6c29081a-a646-4e1c-94fc-b429527e564a",
- "clientId" : "broker",
- "name" : "${client_broker}",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "38967b66-a777-4fb5-a1a7-fd42296b7b1f",
- "redirectUris" : [ ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : false,
- "serviceAccountsEnabled" : false,
- "publicClient" : false,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "6bb1ffec-0538-4a78-8afc-32f921a23118",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "a38f7374-4134-4104-8a24-c675e2393e3d",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "48d33d93-ade6-4a99-9628-b4f5bd182334",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "b3291055-d3e7-4e4b-824e-fd441417f12f",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "9966fc24-3c36-428b-a1a5-3dd3e053e7ce",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "3a498871-ee98-4ace-8083-7e90d17fc1ff",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "Claim JSON Type" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- }, {
- "id" : "1f97eaf4-6435-48dd-8b77-f0a61dbd5343",
- "clientId" : "account",
- "name" : "${client_account}",
- "baseUrl" : "/auth/realms/qerealm/account",
- "surrogateAuthRequired" : false,
- "enabled" : true,
- "clientAuthenticatorType" : "client-secret",
- "secret" : "06e44ca8-fd8e-4754-8f5d-bb0d9a6ebcc6",
- "defaultRoles" : [ "view-profile", "manage-account" ],
- "redirectUris" : [ "/auth/realms/qerealm/account/*" ],
- "webOrigins" : [ ],
- "notBefore" : 0,
- "bearerOnly" : false,
- "consentRequired" : false,
- "standardFlowEnabled" : true,
- "implicitFlowEnabled" : false,
- "directAccessGrantsEnabled" : false,
- "serviceAccountsEnabled" : false,
- "publicClient" : false,
- "frontchannelLogout" : false,
- "attributes" : { },
- "fullScopeAllowed" : false,
- "nodeReRegistrationTimeout" : 0,
- "protocolMappers" : [ {
- "id" : "76e84547-a1db-4fd5-b650-2e39de451985",
- "name" : "given name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${givenName}",
- "config" : {
- "user.attribute" : "firstName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "given_name",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "b7da15d8-c92b-4287-b40c-71f96fea2445",
- "name" : "full name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-full-name-mapper",
- "consentRequired" : true,
- "consentText" : "${fullName}",
- "config" : {
- "id.token.claim" : "true",
- "access.token.claim" : "true"
- }
- }, {
- "id" : "e46b35d9-d1fd-4a78-9bab-43996517e813",
- "name" : "role list",
- "protocol" : "saml",
- "protocolMapper" : "saml-role-list-mapper",
- "consentRequired" : false,
- "config" : {
- "single" : "false",
- "attribute.nameformat" : "Basic",
- "attribute.name" : "Role"
- }
- }, {
- "id" : "7307a307-62ed-40c0-9cfa-1ee6cdde0052",
- "name" : "email",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${email}",
- "config" : {
- "user.attribute" : "email",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "email",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "5aaeeb2b-17b9-4b93-957f-d4ae4bd98d33",
- "name" : "username",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${username}",
- "config" : {
- "user.attribute" : "username",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "preferred_username",
- "Claim JSON Type" : "String"
- }
- }, {
- "id" : "b007ff11-9bbb-43bb-87a0-a2271d2bd54d",
- "name" : "family name",
- "protocol" : "openid-connect",
- "protocolMapper" : "oidc-usermodel-property-mapper",
- "consentRequired" : true,
- "consentText" : "${familyName}",
- "config" : {
- "user.attribute" : "lastName",
- "id.token.claim" : "true",
- "access.token.claim" : "true",
- "claim.name" : "family_name",
- "Claim JSON Type" : "String"
- }
- } ],
- "useTemplateConfig" : false,
- "useTemplateScope" : false,
- "useTemplateMappers" : false
- } ],
- "clientTemplates" : [ ],
- "browserSecurityHeaders" : {
- "contentSecurityPolicy" : "frame-src 'self'",
- "xFrameOptions" : "SAMEORIGIN"
- },
- "smtpServer" : { },
- "eventsEnabled" : false,
- "eventsListeners" : [ "jboss-logging" ],
- "enabledEventTypes" : [ ],
- "adminEventsEnabled" : false,
- "adminEventsDetailsEnabled" : false,
- "internationalizationEnabled" : false,
- "supportedLocales" : [ ],
- "authenticationFlows" : [ {
- "alias" : "Handle Existing Account",
- "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider",
- "providerId" : "basic-flow",
- "topLevel" : false,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "idp-confirm-link",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 10
- }, {
- "authenticator" : "idp-email-verification",
- "autheticatorFlow" : false,
- "requirement" : "ALTERNATIVE",
- "userSetupAllowed" : false,
- "priority" : 20
- }, {
- "flowAlias" : "Verify Existing Account by Re-authentication",
- "autheticatorFlow" : true,
- "requirement" : "ALTERNATIVE",
- "userSetupAllowed" : false,
- "priority" : 30
- } ]
- }, {
- "alias" : "Verify Existing Account by Re-authentication",
- "description" : "Reauthentication of existing account",
- "providerId" : "basic-flow",
- "topLevel" : false,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "idp-username-password-form",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 10
- }, {
- "authenticator" : "auth-otp-form",
- "autheticatorFlow" : false,
- "requirement" : "OPTIONAL",
- "userSetupAllowed" : false,
- "priority" : 20
- } ]
- }, {
- "alias" : "browser",
- "description" : "browser based authentication",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "auth-cookie",
- "autheticatorFlow" : false,
- "requirement" : "ALTERNATIVE",
- "userSetupAllowed" : false,
- "priority" : 10
- }, {
- "authenticator" : "auth-spnego",
- "autheticatorFlow" : false,
- "requirement" : "DISABLED",
- "userSetupAllowed" : false,
- "priority" : 20
- }, {
- "flowAlias" : "forms",
- "autheticatorFlow" : true,
- "requirement" : "ALTERNATIVE",
- "userSetupAllowed" : false,
- "priority" : 30
- } ]
- }, {
- "alias" : "clients",
- "description" : "Base authentication for clients",
- "providerId" : "client-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "client-secret",
- "autheticatorFlow" : false,
- "requirement" : "ALTERNATIVE",
- "userSetupAllowed" : false,
- "priority" : 10
- }, {
- "authenticator" : "client-jwt",
- "autheticatorFlow" : false,
- "requirement" : "ALTERNATIVE",
- "userSetupAllowed" : false,
- "priority" : 20
- } ]
- }, {
- "alias" : "direct grant",
- "description" : "OpenID Connect Resource Owner Grant",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "direct-grant-validate-username",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 10
- }, {
- "authenticator" : "direct-grant-validate-password",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 20
- }, {
- "authenticator" : "direct-grant-validate-otp",
- "autheticatorFlow" : false,
- "requirement" : "OPTIONAL",
- "userSetupAllowed" : false,
- "priority" : 30
- } ]
- }, {
- "alias" : "first broker login",
- "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticatorConfig" : "review profile config",
- "authenticator" : "idp-review-profile",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 10
- }, {
- "authenticatorConfig" : "create unique user config",
- "authenticator" : "idp-create-user-if-unique",
- "autheticatorFlow" : false,
- "requirement" : "ALTERNATIVE",
- "userSetupAllowed" : false,
- "priority" : 20
- }, {
- "flowAlias" : "Handle Existing Account",
- "autheticatorFlow" : true,
- "requirement" : "ALTERNATIVE",
- "userSetupAllowed" : false,
- "priority" : 30
- } ]
- }, {
- "alias" : "forms",
- "description" : "Username, password, otp and other auth forms.",
- "providerId" : "basic-flow",
- "topLevel" : false,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "auth-username-password-form",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 10
- }, {
- "authenticator" : "auth-otp-form",
- "autheticatorFlow" : false,
- "requirement" : "OPTIONAL",
- "userSetupAllowed" : false,
- "priority" : 20
- } ]
- }, {
- "alias" : "registration",
- "description" : "registration flow",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "registration-page-form",
- "flowAlias" : "registration form",
- "autheticatorFlow" : true,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 10
- } ]
- }, {
- "alias" : "registration form",
- "description" : "registration form",
- "providerId" : "form-flow",
- "topLevel" : false,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "registration-user-creation",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 20
- }, {
- "authenticator" : "registration-profile-action",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 40
- }, {
- "authenticator" : "registration-password-action",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 50
- }, {
- "authenticator" : "registration-recaptcha-action",
- "autheticatorFlow" : false,
- "requirement" : "DISABLED",
- "userSetupAllowed" : false,
- "priority" : 60
- } ]
- }, {
- "alias" : "reset credentials",
- "description" : "Reset credentials for a user if they forgot their password or something",
- "providerId" : "basic-flow",
- "topLevel" : true,
- "builtIn" : true,
- "authenticationExecutions" : [ {
- "authenticator" : "reset-credentials-choose-user",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 10
- }, {
- "authenticator" : "reset-credential-email",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 20
- }, {
- "authenticator" : "reset-password",
- "autheticatorFlow" : false,
- "requirement" : "REQUIRED",
- "userSetupAllowed" : false,
- "priority" : 30
- }, {
- "authenticator" : "reset-otp",
- "autheticatorFlow" : false,
- "requirement" : "OPTIONAL",
- "userSetupAllowed" : false,
- "priority" : 40
- } ]
- } ],
- "authenticatorConfig" : [ {
- "alias" : "create unique user config",
- "config" : {
- "require.password.update.after.registration" : "false"
- }
- }, {
- "alias" : "review profile config",
- "config" : {
- "update.profile.on.first.login" : "missing"
- }
- } ],
- "requiredActions" : [ {
- "alias" : "CONFIGURE_TOTP",
- "name" : "Configure Totp",
- "providerId" : "CONFIGURE_TOTP",
- "enabled" : true,
- "defaultAction" : false,
- "config" : { }
- }, {
- "alias" : "UPDATE_PASSWORD",
- "name" : "Update Password",
- "providerId" : "UPDATE_PASSWORD",
- "enabled" : true,
- "defaultAction" : false,
- "config" : { }
- }, {
- "alias" : "UPDATE_PROFILE",
- "name" : "Update Profile",
- "providerId" : "UPDATE_PROFILE",
- "enabled" : true,
- "defaultAction" : false,
- "config" : { }
- }, {
- "alias" : "VERIFY_EMAIL",
- "name" : "Verify Email",
- "providerId" : "VERIFY_EMAIL",
- "enabled" : true,
- "defaultAction" : false,
- "config" : { }
- }, {
- "alias" : "terms_and_conditions",
- "name" : "Terms and Conditions",
- "providerId" : "terms_and_conditions",
- "enabled" : false,
- "defaultAction" : false,
- "config" : { }
- } ],
- "browserFlow" : "browser",
- "registrationFlow" : "registration",
- "directGrantFlow" : "direct grant",
- "resetCredentialsFlow" : "reset credentials",
- "clientAuthenticationFlow" : "clients"
-}
\ No newline at end of file
diff --git a/tools/docker/keycloak/realms/qerealm-users-0.json b/tools/docker/keycloak/realms/qerealm-users-0.json
deleted file mode 100644
index f9786b6..0000000
--- a/tools/docker/keycloak/realms/qerealm-users-0.json
+++ /dev/null
@@ -1,78 +0,0 @@
-{
- "realm" : "qerealm",
- "users" : [ {
- "id" : "de4af322-85b2-4dbe-8d53-6a2ee29e4080",
- "username" : "admin",
- "enabled" : true,
- "totp" : false,
- "emailVerified" : true,
- "firstName" : "admin",
- "lastName" : "admin",
- "email" : "admin@admin",
- "credentials" : [ {
- "type" : "password",
- "hashedSaltedValue" : "bFNBrC3Z2WrFjUnnDRu6pDdJ90/8BirowTmMgLey/VYyNi3jXylfGnyJ8RmNeNd9N+nUR2zxK34CpTUixagtig==",
- "salt" : "7cn1i879ZmKx/Szrsk6nUw==",
- "hashIterations" : 1,
- "counter" : 0,
- "algorithm" : "pbkdf2",
- "digits" : 0
- } ],
- "requiredActions" : [ ],
- "realmRoles" : [ "admin", "user", "offline_access" ],
- "clientRoles" : {
- "account" : [ "manage-account", "view-profile" ]
- },
- "groups" : [ ]
- }, {
- "id" : "b9ac3953-a9be-42f8-a28c-9911c5b9565f",
- "createdTimestamp" : 1445868108359,
- "username" : "nobody",
- "enabled" : true,
- "totp" : false,
- "emailVerified" : true,
- "firstName" : "nobody",
- "lastName" : "nobody",
- "email" : "nobody@nobody",
- "credentials" : [ {
- "type" : "password",
- "hashedSaltedValue" : "ynGoGN8y9GxzpQmT03TP4ZLmDpz9ECwoBj4quKE8I3CXDO0H40Wh2segVZZAtOLpMN4KEwk/K4h74KkZocf/4g==",
- "salt" : "ERm/bB0ew44oOJBiS9Oa8g==",
- "hashIterations" : 1,
- "counter" : 0,
- "algorithm" : "pbkdf2",
- "digits" : 0
- } ],
- "requiredActions" : [ ],
- "realmRoles" : [ "offline_access" ],
- "clientRoles" : {
- "account" : [ "manage-account", "view-profile" ]
- },
- "groups" : [ ]
- }, {
- "id" : "54bb8773-9487-4999-8630-6ab56be7ceda",
- "createdTimestamp" : 1445868083927,
- "username" : "user",
- "enabled" : true,
- "totp" : false,
- "emailVerified" : true,
- "firstName" : "user",
- "lastName" : "user",
- "email" : "user@user",
- "credentials" : [ {
- "type" : "password",
- "hashedSaltedValue" : "3OIYdvn6S6k9hHD5iG9laQvlRz921JraEP9UnD8kyih81+IN8lo6tyzYUnJ1EX6vQUY7ZyNFAMIctE7KBfk2AA==",
- "salt" : "DIydRjhwjqBhS1jzxnuMDA==",
- "hashIterations" : 1,
- "counter" : 0,
- "algorithm" : "pbkdf2",
- "digits" : 0
- } ],
- "requiredActions" : [ ],
- "realmRoles" : [ "user", "offline_access" ],
- "clientRoles" : {
- "account" : [ "manage-account", "view-profile" ]
- },
- "groups" : [ ]
- } ]
-}
\ No newline at end of file
diff --git a/tools/docker/keycloak/realms/version.json b/tools/docker/keycloak/realms/version.json
deleted file mode 100644
index 628bb36..0000000
--- a/tools/docker/keycloak/realms/version.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
- "version" : "1.9.0.Final",
- "build-time" : "2016-02-23 19:08"
-}
\ No newline at end of file
diff --git a/tools/docker/keycloak/scripts/docker-entrypoint.sh b/tools/docker/keycloak/scripts/docker-entrypoint.sh
index d7cb370..351b299 100644
--- a/tools/docker/keycloak/scripts/docker-entrypoint.sh
+++ b/tools/docker/keycloak/scripts/docker-entrypoint.sh
@@ -8,6 +8,15 @@ function wait_for_server() {
echo ">>>>> SERVER STARTED <<<<<"
}
+# builds string representation of array of redirect uris and prints it in variable format
+function build_array() {
+ host=$1
+ port=$2
+ ssl_port=$3
+ url=$4
+ var_name=$5
+ echo "export ${var_name}=\"[\\\"http://${host}:${port}/${url}\\\", \\\"https://${host}:${ssl_port}/${url}\\\"]\""
+}
# make sure we get fresh logfile logfile
rm ${JBOSS_HOME}/standalone/log/server.log 2> /dev/null
@@ -16,11 +25,19 @@ rm ${JBOSS_HOME}/standalone/log/server.log 2> /dev/null
if [ ! -f $CONFIGURED_FILE ]
then
- ${JBOSS_HOME}/bin/add-user.sh -r master -u ${KC_USER_NAME} -p ${KC_USER_PASSWORD}
+ # Create variables containing arrays for realm file
+ eval `build_array $MANAGER_HOST $MANAGER_PORT $MANAGER_HTTPS_PORT "apiman/*" "APIMAN_URLS"`
+ eval `build_array $MANAGER_HOST $MANAGER_PORT $MANAGER_HTTPS_PORT "apimanui/*" "APIMANUI_URLS"`
+ eval `build_array $GATEWAY_HOST $GATEWAY_PORT $GATEWAY_HTTPS_PORT "apiman-gateway-api/*" "APIMAN_GATEWAY_URLS"`
+
+ # create realm file substituting variables in template file
+ envsubst '$APIMAN_URLS:$APIMANUI_URLS:$APIMAN_GATEWAY_URLS' < ${REALM_FILE_TMPL} > ${REALM_FILE}
+
+ ${JBOSS_HOME}/bin/add-user-keycloak.sh -r master -u ${KC_USER_NAME} -p ${KC_USER_PASSWORD}
${JBOSS_HOME}/bin/standalone.sh -b 0.0.0.0 \
-Dkeycloak.migration.action=import \
- -Dkeycloak.migration.provider=dir \
- -Dkeycloak.migration.dir=${REALM_DIR} &
+ -Dkeycloak.migration.provider=singleFile \
+ -Dkeycloak.migration.file=${REALM_FILE} &
WILDFLY_PID=$!
touch ${CONFIGURED_FILE}