c7621d7e9af44f0c55ea461304983a24cadc1d70
[oam.git] / solution / integration / smo / common / identity / o-ran-sc-realm.json
1 {
2   "id": "onap",
3   "realm": "onap",
4   "displayName": "O-RAN-SC SIM & OAM & NON-RT-RIC",
5   "displayNameHtml": "<div class=\"kc-logo-text\"><span>O-RAN-SC: SIM and OAM and Non-RT-RIC</span></div>",
6   "notBefore": 1606124502,
7   "revokeRefreshToken": false,
8   "refreshTokenMaxReuse": 0,
9   "accessTokenLifespan": 300,
10   "accessTokenLifespanForImplicitFlow": 900,
11   "ssoSessionIdleTimeout": 1800,
12   "ssoSessionMaxLifespan": 36000,
13   "ssoSessionIdleTimeoutRememberMe": 0,
14   "ssoSessionMaxLifespanRememberMe": 0,
15   "offlineSessionIdleTimeout": 2592000,
16   "offlineSessionMaxLifespanEnabled": false,
17   "offlineSessionMaxLifespan": 5184000,
18   "clientSessionIdleTimeout": 0,
19   "clientSessionMaxLifespan": 0,
20   "clientOfflineSessionIdleTimeout": 0,
21   "clientOfflineSessionMaxLifespan": 0,
22   "accessCodeLifespan": 60,
23   "accessCodeLifespanUserAction": 300,
24   "accessCodeLifespanLogin": 1800,
25   "actionTokenGeneratedByAdminLifespan": 43200,
26   "actionTokenGeneratedByUserLifespan": 300,
27   "enabled": true,
28   "sslRequired": "external",
29   "registrationAllowed": false,
30   "registrationEmailAsUsername": false,
31   "rememberMe": true,
32   "verifyEmail": false,
33   "loginWithEmailAllowed": true,
34   "duplicateEmailsAllowed": false,
35   "resetPasswordAllowed": false,
36   "editUsernameAllowed": false,
37   "bruteForceProtected": false,
38   "permanentLockout": false,
39   "maxFailureWaitSeconds": 900,
40   "minimumQuickLoginWaitSeconds": 60,
41   "waitIncrementSeconds": 60,
42   "quickLoginCheckMilliSeconds": 1000,
43   "maxDeltaTimeSeconds": 43200,
44   "failureFactor": 30,
45   "roles": {
46     "realm": [
47       {
48         "id": "66f90a7a-3766-4f69-989d-c94910e0bad6",
49         "name": "administration",
50         "description": "Read/write access to all operations.",
51         "composite": false,
52         "clientRole": false,
53         "containerId": "onap",
54         "attributes": {}
55       },
56       {
57         "id": "d2594199-99c2-4e0c-9b33-94b0a84b569a",
58         "name": "supervision",
59         "description": "In general no write access and also no read access to user-management.",
60         "composite": false,
61         "clientRole": false,
62         "containerId": "onap",
63         "attributes": {}
64       },
65       {
66         "id": "db6e98ed-5fa8-4471-9522-ba12a8732e08",
67         "name": "uma_authorization",
68         "description": "${role_uma_authorization}",
69         "composite": false,
70         "clientRole": false,
71         "containerId": "onap",
72         "attributes": {}
73       },
74       {
75         "id": "e344eb3a-8efe-4346-b5d4-93b9262cf0ec",
76         "name": "offline_access",
77         "description": "${role_offline-access}",
78         "composite": false,
79         "clientRole": false,
80         "containerId": "onap",
81         "attributes": {}
82       },
83       {
84         "id": "7c6d7309-c7c1-4a51-8a85-bd6713af5ca7",
85         "name": "provision",
86         "description": "In general read/write access, expect write access to user-management.",
87         "composite": false,
88         "clientRole": false,
89         "containerId": "onap",
90         "attributes": {}
91       }
92     ],
93     "client": {
94       "realm-management": [
95         {
96           "id": "48cf3c96-5ef0-4a91-a95f-149234d0b595",
97           "name": "manage-identity-providers",
98           "description": "${role_manage-identity-providers}",
99           "composite": false,
100           "clientRole": true,
101           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
102           "attributes": {}
103         },
104         {
105           "id": "97066b13-50b7-4556-8c33-b06279ee26b7",
106           "name": "query-realms",
107           "description": "${role_query-realms}",
108           "composite": false,
109           "clientRole": true,
110           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
111           "attributes": {}
112         },
113         {
114           "id": "120f58c7-3850-487e-9733-a9b98ac43921",
115           "name": "view-events",
116           "description": "${role_view-events}",
117           "composite": false,
118           "clientRole": true,
119           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
120           "attributes": {}
121         },
122         {
123           "id": "4ab08158-f781-448f-a394-d0022957c2d8",
124           "name": "manage-users",
125           "description": "${role_manage-users}",
126           "composite": false,
127           "clientRole": true,
128           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
129           "attributes": {}
130         },
131         {
132           "id": "a2aeee62-6cfa-4968-be7c-b861ca16d9ae",
133           "name": "impersonation",
134           "description": "${role_impersonation}",
135           "composite": false,
136           "clientRole": true,
137           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
138           "attributes": {}
139         },
140         {
141           "id": "cddc6aa1-d8d8-4a4b-a6d0-15576ca147cc",
142           "name": "manage-authorization",
143           "description": "${role_manage-authorization}",
144           "composite": false,
145           "clientRole": true,
146           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
147           "attributes": {}
148         },
149         {
150           "id": "f139916a-75d6-44e2-8fb2-818cabc9aa79",
151           "name": "query-users",
152           "description": "${role_query-users}",
153           "composite": false,
154           "clientRole": true,
155           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
156           "attributes": {}
157         },
158         {
159           "id": "51216a0a-b1cb-4bbf-966a-6d6b9a430981",
160           "name": "query-clients",
161           "description": "${role_query-clients}",
162           "composite": false,
163           "clientRole": true,
164           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
165           "attributes": {}
166         },
167         {
168           "id": "77174699-6e58-4515-a4de-fc0c5f1b84aa",
169           "name": "manage-events",
170           "description": "${role_manage-events}",
171           "composite": false,
172           "clientRole": true,
173           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
174           "attributes": {}
175         },
176         {
177           "id": "34107e13-212e-4b07-a00a-0cb422cb1b18",
178           "name": "view-authorization",
179           "description": "${role_view-authorization}",
180           "composite": false,
181           "clientRole": true,
182           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
183           "attributes": {}
184         },
185         {
186           "id": "b2460807-5207-4112-ae9d-931e1ea8e495",
187           "name": "manage-realm",
188           "description": "${role_manage-realm}",
189           "composite": false,
190           "clientRole": true,
191           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
192           "attributes": {}
193         },
194         {
195           "id": "36454cac-a7b4-49a2-9202-7e9253680709",
196           "name": "view-clients",
197           "description": "${role_view-clients}",
198           "composite": true,
199           "composites": {
200             "client": {
201               "realm-management": [
202                 "query-clients"
203               ]
204             }
205           },
206           "clientRole": true,
207           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
208           "attributes": {}
209         },
210         {
211           "id": "bd6536a5-fb15-4d9d-acd4-05af2f5f0872",
212           "name": "manage-clients",
213           "description": "${role_manage-clients}",
214           "composite": false,
215           "clientRole": true,
216           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
217           "attributes": {}
218         },
219         {
220           "id": "0413ee3e-5669-45e2-a62e-013e5fa9f95c",
221           "name": "view-identity-providers",
222           "description": "${role_view-identity-providers}",
223           "composite": false,
224           "clientRole": true,
225           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
226           "attributes": {}
227         },
228         {
229           "id": "a7f035f6-bcb3-4a3e-9aba-b9d8151ae1e2",
230           "name": "create-client",
231           "description": "${role_create-client}",
232           "composite": false,
233           "clientRole": true,
234           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
235           "attributes": {}
236         },
237         {
238           "id": "6f755449-81aa-413c-b9a2-f1a04a310216",
239           "name": "realm-admin",
240           "description": "${role_realm-admin}",
241           "composite": true,
242           "composites": {
243             "client": {
244               "realm-management": [
245                 "view-events",
246                 "manage-identity-providers",
247                 "query-realms",
248                 "manage-users",
249                 "impersonation",
250                 "manage-authorization",
251                 "query-users",
252                 "query-clients",
253                 "manage-events",
254                 "view-authorization",
255                 "manage-realm",
256                 "view-clients",
257                 "manage-clients",
258                 "view-identity-providers",
259                 "create-client",
260                 "view-realm",
261                 "view-users",
262                 "query-groups"
263               ]
264             }
265           },
266           "clientRole": true,
267           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
268           "attributes": {}
269         },
270         {
271           "id": "b84067d9-c1a0-473b-9a8d-c9da11d702d0",
272           "name": "view-realm",
273           "description": "${role_view-realm}",
274           "composite": false,
275           "clientRole": true,
276           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
277           "attributes": {}
278         },
279         {
280           "id": "f93e22e0-4777-4eed-8793-54344e3912b8",
281           "name": "view-users",
282           "description": "${role_view-users}",
283           "composite": true,
284           "composites": {
285             "client": {
286               "realm-management": [
287                 "query-users",
288                 "query-groups"
289               ]
290             }
291           },
292           "clientRole": true,
293           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
294           "attributes": {}
295         },
296         {
297           "id": "0a21201d-d801-4905-bd24-15a0b6b672bd",
298           "name": "query-groups",
299           "description": "${role_query-groups}",
300           "composite": false,
301           "clientRole": true,
302           "containerId": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
303           "attributes": {}
304         }
305       ],
306       "odlux.app": [],
307       "security-admin-console": [],
308       "admin-cli": [],
309       "account-console": [],
310       "broker": [
311         {
312           "id": "0ffc5717-546e-4bc9-a5ac-402cf244b8ef",
313           "name": "read-token",
314           "description": "${role_read-token}",
315           "composite": false,
316           "clientRole": true,
317           "containerId": "03f925c3-3688-44fc-80da-57a15e48f9c6",
318           "attributes": {}
319         }
320       ],
321       "account": [
322         {
323           "id": "73a6e64c-673d-41f8-891d-35cdf18530a2",
324           "name": "view-consent",
325           "description": "${role_view-consent}",
326           "composite": false,
327           "clientRole": true,
328           "containerId": "79520b16-34b6-4427-8c0f-40ef1e514d5e",
329           "attributes": {}
330         },
331         {
332           "id": "ad1c45b0-c118-423c-932b-4d37a1e22169",
333           "name": "manage-account-links",
334           "description": "${role_manage-account-links}",
335           "composite": false,
336           "clientRole": true,
337           "containerId": "79520b16-34b6-4427-8c0f-40ef1e514d5e",
338           "attributes": {}
339         },
340         {
341           "id": "5a945b4b-5982-4340-a2b9-464edacb5280",
342           "name": "manage-consent",
343           "description": "${role_manage-consent}",
344           "composite": true,
345           "composites": {
346             "client": {
347               "account": [
348                 "view-consent"
349               ]
350             }
351           },
352           "clientRole": true,
353           "containerId": "79520b16-34b6-4427-8c0f-40ef1e514d5e",
354           "attributes": {}
355         },
356         {
357           "id": "27c9a3d3-78e9-4ca3-940c-3a3c16cac97f",
358           "name": "view-profile",
359           "description": "${role_view-profile}",
360           "composite": false,
361           "clientRole": true,
362           "containerId": "79520b16-34b6-4427-8c0f-40ef1e514d5e",
363           "attributes": {}
364         },
365         {
366           "id": "0dc10caf-b2f3-42e2-af88-c6c3d8f170ad",
367           "name": "delete-account",
368           "description": "${role_delete-account}",
369           "composite": false,
370           "clientRole": true,
371           "containerId": "79520b16-34b6-4427-8c0f-40ef1e514d5e",
372           "attributes": {}
373         },
374         {
375           "id": "b3ff60e4-53e9-4a78-9855-3e7a13608a37",
376           "name": "manage-account",
377           "description": "${role_manage-account}",
378           "composite": true,
379           "composites": {
380             "client": {
381               "account": [
382                 "manage-account-links"
383               ]
384             }
385           },
386           "clientRole": true,
387           "containerId": "79520b16-34b6-4427-8c0f-40ef1e514d5e",
388           "attributes": {}
389         },
390         {
391           "id": "9fbd7ab1-300f-4bf4-8e3f-9de42ea841f4",
392           "name": "view-applications",
393           "description": "${role_view-applications}",
394           "composite": false,
395           "clientRole": true,
396           "containerId": "79520b16-34b6-4427-8c0f-40ef1e514d5e",
397           "attributes": {}
398         }
399       ]
400     }
401   },
402   "groups": [
403     {
404       "id": "53697740-dd18-4170-bcc7-5386d68bee12",
405       "name": "NetworkAdministration",
406       "path": "/NetworkAdministration",
407       "attributes": {},
408       "realmRoles": [
409         "administration"
410       ],
411       "clientRoles": {},
412       "subGroups": []
413     },
414     {
415       "id": "7416392a-8a94-48a0-b2f4-32355df722ee",
416       "name": "NetworkOperation",
417       "path": "/NetworkOperation",
418       "attributes": {},
419       "realmRoles": [
420         "provision"
421       ],
422       "clientRoles": {},
423       "subGroups": []
424     },
425     {
426       "id": "2627fd3e-5991-4464-8d46-5accfa7f49d9",
427       "name": "NetworkPlanning",
428       "path": "/NetworkPlanning",
429       "attributes": {},
430       "realmRoles": [
431         "supervision"
432       ],
433       "clientRoles": {},
434       "subGroups": []
435     }
436   ],
437   "defaultRoles": [
438     "uma_authorization",
439     "offline_access"
440   ],
441   "requiredCredentials": [
442     "password"
443   ],
444   "otpPolicyType": "totp",
445   "otpPolicyAlgorithm": "HmacSHA1",
446   "otpPolicyInitialCounter": 0,
447   "otpPolicyDigits": 6,
448   "otpPolicyLookAheadWindow": 1,
449   "otpPolicyPeriod": 30,
450   "otpSupportedApplications": [
451     "FreeOTP",
452     "Google Authenticator"
453   ],
454   "webAuthnPolicyRpEntityName": "keycloak",
455   "webAuthnPolicySignatureAlgorithms": [
456     "ES256"
457   ],
458   "webAuthnPolicyRpId": "",
459   "webAuthnPolicyAttestationConveyancePreference": "not specified",
460   "webAuthnPolicyAuthenticatorAttachment": "not specified",
461   "webAuthnPolicyRequireResidentKey": "not specified",
462   "webAuthnPolicyUserVerificationRequirement": "not specified",
463   "webAuthnPolicyCreateTimeout": 0,
464   "webAuthnPolicyAvoidSameAuthenticatorRegister": false,
465   "webAuthnPolicyAcceptableAaguids": [],
466   "webAuthnPolicyPasswordlessRpEntityName": "keycloak",
467   "webAuthnPolicyPasswordlessSignatureAlgorithms": [
468     "ES256"
469   ],
470   "webAuthnPolicyPasswordlessRpId": "",
471   "webAuthnPolicyPasswordlessAttestationConveyancePreference": "not specified",
472   "webAuthnPolicyPasswordlessAuthenticatorAttachment": "not specified",
473   "webAuthnPolicyPasswordlessRequireResidentKey": "not specified",
474   "webAuthnPolicyPasswordlessUserVerificationRequirement": "not specified",
475   "webAuthnPolicyPasswordlessCreateTimeout": 0,
476   "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister": false,
477   "webAuthnPolicyPasswordlessAcceptableAaguids": [],
478   "scopeMappings": [
479     {
480       "clientScope": "offline_access",
481       "roles": [
482         "offline_access"
483       ]
484     }
485   ],
486   "clientScopeMappings": {
487     "account": [
488       {
489         "client": "account-console",
490         "roles": [
491           "manage-account"
492         ]
493       }
494     ]
495   },
496   "clients": [
497     {
498       "id": "79520b16-34b6-4427-8c0f-40ef1e514d5e",
499       "clientId": "account",
500       "name": "${client_account}",
501       "rootUrl": "${authBaseUrl}",
502       "baseUrl": "/realms/onap-oam-joins-non-rt-ric/account/",
503       "surrogateAuthRequired": false,
504       "enabled": true,
505       "alwaysDisplayInConsole": false,
506       "clientAuthenticatorType": "client-secret",
507       "secret": "**********",
508       "defaultRoles": [
509         "view-profile",
510         "manage-account"
511       ],
512       "redirectUris": [
513         "/realms/onap-oam-joins-non-rt-ric/account/*"
514       ],
515       "webOrigins": [],
516       "notBefore": 0,
517       "bearerOnly": false,
518       "consentRequired": false,
519       "standardFlowEnabled": true,
520       "implicitFlowEnabled": false,
521       "directAccessGrantsEnabled": false,
522       "serviceAccountsEnabled": false,
523       "publicClient": false,
524       "frontchannelLogout": false,
525       "protocol": "openid-connect",
526       "attributes": {},
527       "authenticationFlowBindingOverrides": {},
528       "fullScopeAllowed": false,
529       "nodeReRegistrationTimeout": 0,
530       "defaultClientScopes": [
531         "web-origins",
532         "role_list",
533         "roles",
534         "profile",
535         "email"
536       ],
537       "optionalClientScopes": [
538         "address",
539         "phone",
540         "offline_access",
541         "microprofile-jwt"
542       ]
543     },
544     {
545       "id": "9e6bfeba-bdd0-480f-b5a2-872613bc8f5c",
546       "clientId": "account-console",
547       "name": "${client_account-console}",
548       "rootUrl": "${authBaseUrl}",
549       "baseUrl": "/realms/onap-oam-joins-non-rt-ric/account/",
550       "surrogateAuthRequired": false,
551       "enabled": true,
552       "alwaysDisplayInConsole": false,
553       "clientAuthenticatorType": "client-secret",
554       "secret": "**********",
555       "redirectUris": [
556         "/realms/onap-oam-joins-non-rt-ric/account/*"
557       ],
558       "webOrigins": [],
559       "notBefore": 0,
560       "bearerOnly": false,
561       "consentRequired": false,
562       "standardFlowEnabled": true,
563       "implicitFlowEnabled": false,
564       "directAccessGrantsEnabled": false,
565       "serviceAccountsEnabled": false,
566       "publicClient": true,
567       "frontchannelLogout": false,
568       "protocol": "openid-connect",
569       "attributes": {
570         "pkce.code.challenge.method": "S256"
571       },
572       "authenticationFlowBindingOverrides": {},
573       "fullScopeAllowed": false,
574       "nodeReRegistrationTimeout": 0,
575       "protocolMappers": [
576         {
577           "id": "7c4d0074-59ac-48de-a13d-ff68f061b5aa",
578           "name": "audience resolve",
579           "protocol": "openid-connect",
580           "protocolMapper": "oidc-audience-resolve-mapper",
581           "consentRequired": false,
582           "config": {}
583         }
584       ],
585       "defaultClientScopes": [
586         "web-origins",
587         "role_list",
588         "roles",
589         "profile",
590         "email"
591       ],
592       "optionalClientScopes": [
593         "address",
594         "phone",
595         "offline_access",
596         "microprofile-jwt"
597       ]
598     },
599     {
600       "id": "42be94b8-40c9-4874-9d6e-9501d12f73a5",
601       "clientId": "admin-cli",
602       "name": "${client_admin-cli}",
603       "surrogateAuthRequired": false,
604       "enabled": true,
605       "alwaysDisplayInConsole": false,
606       "clientAuthenticatorType": "client-secret",
607       "secret": "**********",
608       "redirectUris": [],
609       "webOrigins": [],
610       "notBefore": 0,
611       "bearerOnly": false,
612       "consentRequired": false,
613       "standardFlowEnabled": false,
614       "implicitFlowEnabled": false,
615       "directAccessGrantsEnabled": true,
616       "serviceAccountsEnabled": false,
617       "publicClient": true,
618       "frontchannelLogout": false,
619       "protocol": "openid-connect",
620       "attributes": {
621         "saml.assertion.signature": "false",
622         "access.token.lifespan": "1200",
623         "saml.force.post.binding": "false",
624         "saml.multivalued.roles": "false",
625         "saml.encrypt": "false",
626         "saml.server.signature": "false",
627         "saml.server.signature.keyinfo.ext": "false",
628         "exclude.session.state.from.auth.response": "false",
629         "saml_force_name_id_format": "false",
630         "saml.client.signature": "false",
631         "tls.client.certificate.bound.access.tokens": "false",
632         "saml.authnstatement": "false",
633         "display.on.consent.screen": "false",
634         "saml.onetimeuse.condition": "false"
635       },
636       "authenticationFlowBindingOverrides": {},
637       "fullScopeAllowed": true,
638       "nodeReRegistrationTimeout": 0,
639       "defaultClientScopes": [
640         "web-origins",
641         "role_list",
642         "roles",
643         "profile",
644         "email"
645       ],
646       "optionalClientScopes": [
647         "address",
648         "phone",
649         "offline_access",
650         "microprofile-jwt"
651       ]
652     },
653     {
654       "id": "03f925c3-3688-44fc-80da-57a15e48f9c6",
655       "clientId": "broker",
656       "name": "${client_broker}",
657       "surrogateAuthRequired": false,
658       "enabled": true,
659       "alwaysDisplayInConsole": false,
660       "clientAuthenticatorType": "client-secret",
661       "secret": "**********",
662       "redirectUris": [],
663       "webOrigins": [],
664       "notBefore": 0,
665       "bearerOnly": false,
666       "consentRequired": false,
667       "standardFlowEnabled": true,
668       "implicitFlowEnabled": false,
669       "directAccessGrantsEnabled": false,
670       "serviceAccountsEnabled": false,
671       "publicClient": false,
672       "frontchannelLogout": false,
673       "protocol": "openid-connect",
674       "attributes": {},
675       "authenticationFlowBindingOverrides": {},
676       "fullScopeAllowed": false,
677       "nodeReRegistrationTimeout": 0,
678       "defaultClientScopes": [
679         "web-origins",
680         "role_list",
681         "roles",
682         "profile",
683         "email"
684       ],
685       "optionalClientScopes": [
686         "address",
687         "phone",
688         "offline_access",
689         "microprofile-jwt"
690       ]
691     },
692     {
693       "id": "dbd662ad-e959-44c9-bd18-859ca0142927",
694       "clientId": "odlux.app",
695       "surrogateAuthRequired": false,
696       "enabled": true,
697       "alwaysDisplayInConsole": false,
698       "clientAuthenticatorType": "client-secret",
699       "secret": "2a64fdca-c205-4b52-9f58-195ccc142ddb",
700       "redirectUris": [
701         "http://localhost:8081/*",
702         "https://sdnc-web:8453/*"
703       ],
704       "webOrigins": [],
705       "notBefore": 0,
706       "bearerOnly": false,
707       "consentRequired": false,
708       "standardFlowEnabled": true,
709       "implicitFlowEnabled": false,
710       "directAccessGrantsEnabled": true,
711       "serviceAccountsEnabled": false,
712       "publicClient": false,
713       "frontchannelLogout": false,
714       "protocol": "openid-connect",
715       "attributes": {
716         "saml.assertion.signature": "false",
717         "access.token.lifespan": "1800",
718         "saml.force.post.binding": "false",
719         "saml.multivalued.roles": "false",
720         "saml.encrypt": "false",
721         "backchannel.logout.revoke.offline.tokens": "false",
722         "saml.server.signature": "false",
723         "saml.server.signature.keyinfo.ext": "false",
724         "exclude.session.state.from.auth.response": "false",
725         "backchannel.logout.session.required": "false",
726         "client_credentials.use_refresh_token": "false",
727         "saml_force_name_id_format": "false",
728         "saml.client.signature": "false",
729         "tls.client.certificate.bound.access.tokens": "false",
730         "saml.authnstatement": "false",
731         "display.on.consent.screen": "false",
732         "saml.onetimeuse.condition": "false"
733       },
734       "authenticationFlowBindingOverrides": {
735         "direct_grant": "dfb7f7d8-1260-4d25-ac2c-b04b029bc63f",
736         "browser": "158733a4-43f8-4cbc-922d-5017939ad0dc"
737       },
738       "fullScopeAllowed": true,
739       "nodeReRegistrationTimeout": -1,
740       "defaultClientScopes": [
741         "web-origins",
742         "role_list",
743         "roles",
744         "profile",
745         "email"
746       ],
747       "optionalClientScopes": [
748         "address",
749         "phone",
750         "offline_access",
751         "microprofile-jwt"
752       ]
753     },
754     {
755       "id": "048a9bfc-077a-42a2-afe8-1ec13d3a43a3",
756       "clientId": "realm-management",
757       "name": "${client_realm-management}",
758       "surrogateAuthRequired": false,
759       "enabled": true,
760       "alwaysDisplayInConsole": false,
761       "clientAuthenticatorType": "client-secret",
762       "secret": "**********",
763       "redirectUris": [],
764       "webOrigins": [],
765       "notBefore": 0,
766       "bearerOnly": true,
767       "consentRequired": false,
768       "standardFlowEnabled": true,
769       "implicitFlowEnabled": false,
770       "directAccessGrantsEnabled": false,
771       "serviceAccountsEnabled": false,
772       "publicClient": false,
773       "frontchannelLogout": false,
774       "protocol": "openid-connect",
775       "attributes": {},
776       "authenticationFlowBindingOverrides": {},
777       "fullScopeAllowed": false,
778       "nodeReRegistrationTimeout": 0,
779       "defaultClientScopes": [
780         "web-origins",
781         "role_list",
782         "roles",
783         "profile",
784         "email"
785       ],
786       "optionalClientScopes": [
787         "address",
788         "phone",
789         "offline_access",
790         "microprofile-jwt"
791       ]
792     },
793     {
794       "id": "458df016-a86f-4750-979b-7f4bc20d9bed",
795       "clientId": "security-admin-console",
796       "name": "${client_security-admin-console}",
797       "rootUrl": "${authAdminUrl}",
798       "baseUrl": "/admin/onap-oam-joins-non-rt-ric/console/",
799       "surrogateAuthRequired": false,
800       "enabled": true,
801       "alwaysDisplayInConsole": false,
802       "clientAuthenticatorType": "client-secret",
803       "secret": "**********",
804       "redirectUris": [
805         "/admin/onap-oam-joins-non-rt-ric/console/*"
806       ],
807       "webOrigins": [
808         "+"
809       ],
810       "notBefore": 0,
811       "bearerOnly": false,
812       "consentRequired": false,
813       "standardFlowEnabled": true,
814       "implicitFlowEnabled": false,
815       "directAccessGrantsEnabled": false,
816       "serviceAccountsEnabled": false,
817       "publicClient": true,
818       "frontchannelLogout": false,
819       "protocol": "openid-connect",
820       "attributes": {
821         "pkce.code.challenge.method": "S256"
822       },
823       "authenticationFlowBindingOverrides": {},
824       "fullScopeAllowed": false,
825       "nodeReRegistrationTimeout": 0,
826       "protocolMappers": [
827         {
828           "id": "7a2b5c79-4775-4f07-810f-f101774cd086",
829           "name": "locale",
830           "protocol": "openid-connect",
831           "protocolMapper": "oidc-usermodel-attribute-mapper",
832           "consentRequired": false,
833           "config": {
834             "userinfo.token.claim": "true",
835             "user.attribute": "locale",
836             "id.token.claim": "true",
837             "access.token.claim": "true",
838             "claim.name": "locale",
839             "jsonType.label": "String"
840           }
841         }
842       ],
843       "defaultClientScopes": [
844         "web-origins",
845         "role_list",
846         "roles",
847         "profile",
848         "email"
849       ],
850       "optionalClientScopes": [
851         "address",
852         "phone",
853         "offline_access",
854         "microprofile-jwt"
855       ]
856     }
857   ],
858   "clientScopes": [
859     {
860       "id": "6dd0bccf-179e-4d35-acd0-03aa6ef2153d",
861       "name": "address",
862       "description": "OpenID Connect built-in scope: address",
863       "protocol": "openid-connect",
864       "attributes": {
865         "include.in.token.scope": "true",
866         "display.on.consent.screen": "true",
867         "consent.screen.text": "${addressScopeConsentText}"
868       },
869       "protocolMappers": [
870         {
871           "id": "6c342dae-9652-49f9-8327-ec2c3ddcd159",
872           "name": "address",
873           "protocol": "openid-connect",
874           "protocolMapper": "oidc-address-mapper",
875           "consentRequired": false,
876           "config": {
877             "user.attribute.formatted": "formatted",
878             "user.attribute.country": "country",
879             "user.attribute.postal_code": "postal_code",
880             "userinfo.token.claim": "true",
881             "user.attribute.street": "street",
882             "id.token.claim": "true",
883             "user.attribute.region": "region",
884             "access.token.claim": "true",
885             "user.attribute.locality": "locality"
886           }
887         }
888       ]
889     },
890     {
891       "id": "452eb724-9c8c-4d5b-8e3a-c40dfab97fd6",
892       "name": "email",
893       "description": "OpenID Connect built-in scope: email",
894       "protocol": "openid-connect",
895       "attributes": {
896         "include.in.token.scope": "true",
897         "display.on.consent.screen": "true",
898         "consent.screen.text": "${emailScopeConsentText}"
899       },
900       "protocolMappers": [
901         {
902           "id": "e7e9a9b0-0aeb-4d44-bb6d-8d287050521c",
903           "name": "email verified",
904           "protocol": "openid-connect",
905           "protocolMapper": "oidc-usermodel-property-mapper",
906           "consentRequired": false,
907           "config": {
908             "userinfo.token.claim": "true",
909             "user.attribute": "emailVerified",
910             "id.token.claim": "true",
911             "access.token.claim": "true",
912             "claim.name": "email_verified",
913             "jsonType.label": "boolean"
914           }
915         },
916         {
917           "id": "b9fc29ad-dd40-42c5-939c-315f661ac889",
918           "name": "email",
919           "protocol": "openid-connect",
920           "protocolMapper": "oidc-usermodel-property-mapper",
921           "consentRequired": false,
922           "config": {
923             "userinfo.token.claim": "true",
924             "user.attribute": "email",
925             "id.token.claim": "true",
926             "access.token.claim": "true",
927             "claim.name": "email",
928             "jsonType.label": "String"
929           }
930         }
931       ]
932     },
933     {
934       "id": "49f39fbb-5b69-452a-b2b4-064f3e8f23e4",
935       "name": "microprofile-jwt",
936       "description": "Microprofile - JWT built-in scope",
937       "protocol": "openid-connect",
938       "attributes": {
939         "include.in.token.scope": "true",
940         "display.on.consent.screen": "false"
941       },
942       "protocolMappers": [
943         {
944           "id": "ed60115c-0fb1-4c4f-8134-11751957a241",
945           "name": "upn",
946           "protocol": "openid-connect",
947           "protocolMapper": "oidc-usermodel-property-mapper",
948           "consentRequired": false,
949           "config": {
950             "userinfo.token.claim": "true",
951             "user.attribute": "username",
952             "id.token.claim": "true",
953             "access.token.claim": "true",
954             "claim.name": "upn",
955             "jsonType.label": "String"
956           }
957         },
958         {
959           "id": "c88ed97f-9f0e-4d16-a1b2-1cb22e37fc46",
960           "name": "groups",
961           "protocol": "openid-connect",
962           "protocolMapper": "oidc-usermodel-realm-role-mapper",
963           "consentRequired": false,
964           "config": {
965             "multivalued": "true",
966             "userinfo.token.claim": "true",
967             "user.attribute": "foo",
968             "id.token.claim": "true",
969             "access.token.claim": "true",
970             "claim.name": "groups",
971             "jsonType.label": "String"
972           }
973         }
974       ]
975     },
976     {
977       "id": "cf78afd0-da31-4e37-8503-618bf3f1da2b",
978       "name": "offline_access",
979       "description": "OpenID Connect built-in scope: offline_access",
980       "protocol": "openid-connect",
981       "attributes": {
982         "consent.screen.text": "${offlineAccessScopeConsentText}",
983         "display.on.consent.screen": "true"
984       }
985     },
986     {
987       "id": "7b1e27d0-17c0-4358-9e15-ff3dd48afe74",
988       "name": "phone",
989       "description": "OpenID Connect built-in scope: phone",
990       "protocol": "openid-connect",
991       "attributes": {
992         "include.in.token.scope": "true",
993         "display.on.consent.screen": "true",
994         "consent.screen.text": "${phoneScopeConsentText}"
995       },
996       "protocolMappers": [
997         {
998           "id": "33ad6d44-00c7-4ef1-88aa-2d3929225806",
999           "name": "phone number verified",
1000           "protocol": "openid-connect",
1001           "protocolMapper": "oidc-usermodel-attribute-mapper",
1002           "consentRequired": false,
1003           "config": {
1004             "userinfo.token.claim": "true",
1005             "user.attribute": "phoneNumberVerified",
1006             "id.token.claim": "true",
1007             "access.token.claim": "true",
1008             "claim.name": "phone_number_verified",
1009             "jsonType.label": "boolean"
1010           }
1011         },
1012         {
1013           "id": "71d82f58-9411-4d7b-89a4-5f8e7cca6f7d",
1014           "name": "phone number",
1015           "protocol": "openid-connect",
1016           "protocolMapper": "oidc-usermodel-attribute-mapper",
1017           "consentRequired": false,
1018           "config": {
1019             "userinfo.token.claim": "true",
1020             "user.attribute": "phoneNumber",
1021             "id.token.claim": "true",
1022             "access.token.claim": "true",
1023             "claim.name": "phone_number",
1024             "jsonType.label": "String"
1025           }
1026         }
1027       ]
1028     },
1029     {
1030       "id": "a226a318-27ab-472e-b53e-a8f6bb7fac28",
1031       "name": "profile",
1032       "description": "OpenID Connect built-in scope: profile",
1033       "protocol": "openid-connect",
1034       "attributes": {
1035         "include.in.token.scope": "true",
1036         "display.on.consent.screen": "true",
1037         "consent.screen.text": "${profileScopeConsentText}"
1038       },
1039       "protocolMappers": [
1040         {
1041           "id": "5e8ecd21-c433-4b17-aacc-a01586532fd9",
1042           "name": "gender",
1043           "protocol": "openid-connect",
1044           "protocolMapper": "oidc-usermodel-attribute-mapper",
1045           "consentRequired": false,
1046           "config": {
1047             "userinfo.token.claim": "true",
1048             "user.attribute": "gender",
1049             "id.token.claim": "true",
1050             "access.token.claim": "true",
1051             "claim.name": "gender",
1052             "jsonType.label": "String"
1053           }
1054         },
1055         {
1056           "id": "cf587792-5813-4fe3-a16d-4ce4d4c92b50",
1057           "name": "updated at",
1058           "protocol": "openid-connect",
1059           "protocolMapper": "oidc-usermodel-attribute-mapper",
1060           "consentRequired": false,
1061           "config": {
1062             "userinfo.token.claim": "true",
1063             "user.attribute": "updatedAt",
1064             "id.token.claim": "true",
1065             "access.token.claim": "true",
1066             "claim.name": "updated_at",
1067             "jsonType.label": "String"
1068           }
1069         },
1070         {
1071           "id": "65b516e5-e573-46a7-a721-141647220ae2",
1072           "name": "birthdate",
1073           "protocol": "openid-connect",
1074           "protocolMapper": "oidc-usermodel-attribute-mapper",
1075           "consentRequired": false,
1076           "config": {
1077             "userinfo.token.claim": "true",
1078             "user.attribute": "birthdate",
1079             "id.token.claim": "true",
1080             "access.token.claim": "true",
1081             "claim.name": "birthdate",
1082             "jsonType.label": "String"
1083           }
1084         },
1085         {
1086           "id": "d6e02648-07f1-4e6e-940a-f0a6997af1ec",
1087           "name": "full name",
1088           "protocol": "openid-connect",
1089           "protocolMapper": "oidc-full-name-mapper",
1090           "consentRequired": false,
1091           "config": {
1092             "id.token.claim": "true",
1093             "access.token.claim": "true",
1094             "userinfo.token.claim": "true"
1095           }
1096         },
1097         {
1098           "id": "957e23f0-14fa-4959-b44d-7ee628302664",
1099           "name": "nickname",
1100           "protocol": "openid-connect",
1101           "protocolMapper": "oidc-usermodel-attribute-mapper",
1102           "consentRequired": false,
1103           "config": {
1104             "userinfo.token.claim": "true",
1105             "user.attribute": "nickname",
1106             "id.token.claim": "true",
1107             "access.token.claim": "true",
1108             "claim.name": "nickname",
1109             "jsonType.label": "String"
1110           }
1111         },
1112         {
1113           "id": "8f73eeed-e3fe-4086-8d56-ed488939bf7a",
1114           "name": "given name",
1115           "protocol": "openid-connect",
1116           "protocolMapper": "oidc-usermodel-property-mapper",
1117           "consentRequired": false,
1118           "config": {
1119             "userinfo.token.claim": "true",
1120             "user.attribute": "firstName",
1121             "id.token.claim": "true",
1122             "access.token.claim": "true",
1123             "claim.name": "given_name",
1124             "jsonType.label": "String"
1125           }
1126         },
1127         {
1128           "id": "987d88f4-0803-4bf1-96d4-ba0badf95656",
1129           "name": "username",
1130           "protocol": "openid-connect",
1131           "protocolMapper": "oidc-usermodel-property-mapper",
1132           "consentRequired": false,
1133           "config": {
1134             "userinfo.token.claim": "true",
1135             "user.attribute": "username",
1136             "id.token.claim": "true",
1137             "access.token.claim": "true",
1138             "claim.name": "preferred_username",
1139             "jsonType.label": "String"
1140           }
1141         },
1142         {
1143           "id": "de495b80-7a8c-47b6-bba5-534f59431156",
1144           "name": "middle name",
1145           "protocol": "openid-connect",
1146           "protocolMapper": "oidc-usermodel-attribute-mapper",
1147           "consentRequired": false,
1148           "config": {
1149             "userinfo.token.claim": "true",
1150             "user.attribute": "middleName",
1151             "id.token.claim": "true",
1152             "access.token.claim": "true",
1153             "claim.name": "middle_name",
1154             "jsonType.label": "String"
1155           }
1156         },
1157         {
1158           "id": "176751a4-b631-4521-a9b4-0275d55c0846",
1159           "name": "locale",
1160           "protocol": "openid-connect",
1161           "protocolMapper": "oidc-usermodel-attribute-mapper",
1162           "consentRequired": false,
1163           "config": {
1164             "userinfo.token.claim": "true",
1165             "user.attribute": "locale",
1166             "id.token.claim": "true",
1167             "access.token.claim": "true",
1168             "claim.name": "locale",
1169             "jsonType.label": "String"
1170           }
1171         },
1172         {
1173           "id": "37a41d7d-3f1b-4290-8885-2fbe197297eb",
1174           "name": "zoneinfo",
1175           "protocol": "openid-connect",
1176           "protocolMapper": "oidc-usermodel-attribute-mapper",
1177           "consentRequired": false,
1178           "config": {
1179             "userinfo.token.claim": "true",
1180             "user.attribute": "zoneinfo",
1181             "id.token.claim": "true",
1182             "access.token.claim": "true",
1183             "claim.name": "zoneinfo",
1184             "jsonType.label": "String"
1185           }
1186         },
1187         {
1188           "id": "f639ac53-4c08-416b-828f-b06e6f5f59cf",
1189           "name": "website",
1190           "protocol": "openid-connect",
1191           "protocolMapper": "oidc-usermodel-attribute-mapper",
1192           "consentRequired": false,
1193           "config": {
1194             "userinfo.token.claim": "true",
1195             "user.attribute": "website",
1196             "id.token.claim": "true",
1197             "access.token.claim": "true",
1198             "claim.name": "website",
1199             "jsonType.label": "String"
1200           }
1201         },
1202         {
1203           "id": "acac2472-8d13-4c22-929d-9c364e3af1dc",
1204           "name": "family name",
1205           "protocol": "openid-connect",
1206           "protocolMapper": "oidc-usermodel-property-mapper",
1207           "consentRequired": false,
1208           "config": {
1209             "userinfo.token.claim": "true",
1210             "user.attribute": "lastName",
1211             "id.token.claim": "true",
1212             "access.token.claim": "true",
1213             "claim.name": "family_name",
1214             "jsonType.label": "String"
1215           }
1216         },
1217         {
1218           "id": "b748d016-ce62-4cf2-bf0f-78482f90c4e0",
1219           "name": "picture",
1220           "protocol": "openid-connect",
1221           "protocolMapper": "oidc-usermodel-attribute-mapper",
1222           "consentRequired": false,
1223           "config": {
1224             "userinfo.token.claim": "true",
1225             "user.attribute": "picture",
1226             "id.token.claim": "true",
1227             "access.token.claim": "true",
1228             "claim.name": "picture",
1229             "jsonType.label": "String"
1230           }
1231         },
1232         {
1233           "id": "e8d61aee-2580-4aec-9c99-9310e0b10637",
1234           "name": "profile",
1235           "protocol": "openid-connect",
1236           "protocolMapper": "oidc-usermodel-attribute-mapper",
1237           "consentRequired": false,
1238           "config": {
1239             "userinfo.token.claim": "true",
1240             "user.attribute": "profile",
1241             "id.token.claim": "true",
1242             "access.token.claim": "true",
1243             "claim.name": "profile",
1244             "jsonType.label": "String"
1245           }
1246         }
1247       ]
1248     },
1249     {
1250       "id": "7b6ec9ac-c5b6-4096-8b48-5a27d9a4b3fd",
1251       "name": "role_list",
1252       "description": "SAML role list",
1253       "protocol": "saml",
1254       "attributes": {
1255         "consent.screen.text": "${samlRoleListScopeConsentText}",
1256         "display.on.consent.screen": "true"
1257       },
1258       "protocolMappers": [
1259         {
1260           "id": "924fba2b-b443-4160-96dd-5a8d7b5fe685",
1261           "name": "role list",
1262           "protocol": "saml",
1263           "protocolMapper": "saml-role-list-mapper",
1264           "consentRequired": false,
1265           "config": {
1266             "single": "false",
1267             "attribute.nameformat": "Basic",
1268             "attribute.name": "Role"
1269           }
1270         }
1271       ]
1272     },
1273     {
1274       "id": "6ccb6ae1-d28c-42a0-a59d-2c3d8429e96f",
1275       "name": "roles",
1276       "description": "OpenID Connect scope for add user roles to the access token",
1277       "protocol": "openid-connect",
1278       "attributes": {
1279         "include.in.token.scope": "false",
1280         "display.on.consent.screen": "true",
1281         "consent.screen.text": "${rolesScopeConsentText}"
1282       },
1283       "protocolMappers": [
1284         {
1285           "id": "1968a6ac-cf1c-4d15-a4fe-f5206f73e0b9",
1286           "name": "client roles",
1287           "protocol": "openid-connect",
1288           "protocolMapper": "oidc-usermodel-client-role-mapper",
1289           "consentRequired": false,
1290           "config": {
1291             "user.attribute": "foo",
1292             "access.token.claim": "true",
1293             "claim.name": "resource_access.${client_id}.roles",
1294             "jsonType.label": "String",
1295             "multivalued": "true"
1296           }
1297         },
1298         {
1299           "id": "800d0b8f-42f0-4990-81a6-4cc513097ba7",
1300           "name": "realm roles",
1301           "protocol": "openid-connect",
1302           "protocolMapper": "oidc-usermodel-realm-role-mapper",
1303           "consentRequired": false,
1304           "config": {
1305             "user.attribute": "foo",
1306             "access.token.claim": "true",
1307             "claim.name": "realm_access.roles",
1308             "jsonType.label": "String",
1309             "multivalued": "true"
1310           }
1311         },
1312         {
1313           "id": "ccaf8f4b-1050-4aca-a54f-5832873a7cfe",
1314           "name": "audience resolve",
1315           "protocol": "openid-connect",
1316           "protocolMapper": "oidc-audience-resolve-mapper",
1317           "consentRequired": false,
1318           "config": {}
1319         }
1320       ]
1321     },
1322     {
1323       "id": "04affd50-f5ca-476a-960f-21935af0ab5d",
1324       "name": "web-origins",
1325       "description": "OpenID Connect scope for add allowed web origins to the access token",
1326       "protocol": "openid-connect",
1327       "attributes": {
1328         "include.in.token.scope": "false",
1329         "display.on.consent.screen": "false",
1330         "consent.screen.text": ""
1331       },
1332       "protocolMappers": [
1333         {
1334           "id": "f4e1fc1e-454a-46b6-a660-5066aecbb363",
1335           "name": "allowed web origins",
1336           "protocol": "openid-connect",
1337           "protocolMapper": "oidc-allowed-origins-mapper",
1338           "consentRequired": false,
1339           "config": {}
1340         }
1341       ]
1342     }
1343   ],
1344   "defaultDefaultClientScopes": [
1345     "web-origins",
1346     "email",
1347     "roles",
1348     "role_list",
1349     "profile"
1350   ],
1351   "defaultOptionalClientScopes": [
1352     "microprofile-jwt",
1353     "address",
1354     "phone",
1355     "offline_access"
1356   ],
1357   "browserSecurityHeaders": {
1358     "contentSecurityPolicyReportOnly": "",
1359     "xContentTypeOptions": "nosniff",
1360     "xRobotsTag": "none",
1361     "xFrameOptions": "SAMEORIGIN",
1362     "contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
1363     "xXSSProtection": "1; mode=block",
1364     "strictTransportSecurity": "max-age=31536000; includeSubDomains"
1365   },
1366   "smtpServer": {},
1367   "eventsEnabled": false,
1368   "eventsListeners": [
1369     "jboss-logging"
1370   ],
1371   "enabledEventTypes": [],
1372   "adminEventsEnabled": false,
1373   "adminEventsDetailsEnabled": false,
1374   "identityProviders": [],
1375   "identityProviderMappers": [],
1376   "components": {
1377     "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [
1378       {
1379         "id": "0c44905c-8894-4af1-8e5b-75370102ebc7",
1380         "name": "Max Clients Limit",
1381         "providerId": "max-clients",
1382         "subType": "anonymous",
1383         "subComponents": {},
1384         "config": {
1385           "max-clients": [
1386             "200"
1387           ]
1388         }
1389       },
1390       {
1391         "id": "b191c0f5-a3b0-4f59-bd83-070d3b6c2b28",
1392         "name": "Allowed Protocol Mapper Types",
1393         "providerId": "allowed-protocol-mappers",
1394         "subType": "anonymous",
1395         "subComponents": {},
1396         "config": {
1397           "allowed-protocol-mapper-types": [
1398             "saml-role-list-mapper",
1399             "oidc-sha256-pairwise-sub-mapper",
1400             "saml-user-attribute-mapper",
1401             "oidc-usermodel-property-mapper",
1402             "oidc-address-mapper",
1403             "oidc-full-name-mapper",
1404             "saml-user-property-mapper",
1405             "oidc-usermodel-attribute-mapper"
1406           ]
1407         }
1408       },
1409       {
1410         "id": "d152b7b9-d519-48bc-ac78-1dc3c08c4569",
1411         "name": "Trusted Hosts",
1412         "providerId": "trusted-hosts",
1413         "subType": "anonymous",
1414         "subComponents": {},
1415         "config": {
1416           "host-sending-registration-request-must-match": [
1417             "true"
1418           ],
1419           "client-uris-must-match": [
1420             "true"
1421           ]
1422         }
1423       },
1424       {
1425         "id": "724d468e-c5da-4189-b51e-0c43ee65ef90",
1426         "name": "Consent Required",
1427         "providerId": "consent-required",
1428         "subType": "anonymous",
1429         "subComponents": {},
1430         "config": {}
1431       },
1432       {
1433         "id": "409f70ab-abe9-4f3e-873f-ae3c717af73e",
1434         "name": "Allowed Client Scopes",
1435         "providerId": "allowed-client-templates",
1436         "subType": "authenticated",
1437         "subComponents": {},
1438         "config": {
1439           "allow-default-scopes": [
1440             "true"
1441           ]
1442         }
1443       },
1444       {
1445         "id": "46ebd6ed-3ad9-433f-b8e1-9a87d971f490",
1446         "name": "Full Scope Disabled",
1447         "providerId": "scope",
1448         "subType": "anonymous",
1449         "subComponents": {},
1450         "config": {}
1451       },
1452       {
1453         "id": "61c5003c-94ee-44de-8e1c-f892f5e09488",
1454         "name": "Allowed Protocol Mapper Types",
1455         "providerId": "allowed-protocol-mappers",
1456         "subType": "authenticated",
1457         "subComponents": {},
1458         "config": {
1459           "allowed-protocol-mapper-types": [
1460             "oidc-usermodel-property-mapper",
1461             "oidc-full-name-mapper",
1462             "saml-role-list-mapper",
1463             "oidc-address-mapper",
1464             "oidc-sha256-pairwise-sub-mapper",
1465             "oidc-usermodel-attribute-mapper",
1466             "saml-user-attribute-mapper",
1467             "saml-user-property-mapper"
1468           ]
1469         }
1470       },
1471       {
1472         "id": "da534621-02b7-4ccc-b14b-6a9a3648961d",
1473         "name": "Allowed Client Scopes",
1474         "providerId": "allowed-client-templates",
1475         "subType": "anonymous",
1476         "subComponents": {},
1477         "config": {
1478           "allow-default-scopes": [
1479             "true"
1480           ]
1481         }
1482       }
1483     ],
1484     "org.keycloak.keys.KeyProvider": [
1485       {
1486         "id": "9890b674-2409-4e30-95e8-0c66775d0dec",
1487         "name": "rsa-generated",
1488         "providerId": "rsa-generated",
1489         "subComponents": {},
1490         "config": {
1491           "priority": [
1492             "100"
1493           ]
1494         }
1495       },
1496       {
1497         "id": "447f9685-f16b-463c-9ee1-ed1ae487fa06",
1498         "name": "aes-generated",
1499         "providerId": "aes-generated",
1500         "subComponents": {},
1501         "config": {
1502           "priority": [
1503             "100"
1504           ]
1505         }
1506       },
1507       {
1508         "id": "198c0d7e-ee71-4b28-86ab-3cd3b0f45231",
1509         "name": "hmac-generated",
1510         "providerId": "hmac-generated",
1511         "subComponents": {},
1512         "config": {
1513           "priority": [
1514             "100"
1515           ],
1516           "algorithm": [
1517             "HS256"
1518           ]
1519         }
1520       }
1521     ]
1522   },
1523   "internationalizationEnabled": false,
1524   "supportedLocales": [],
1525   "authenticationFlows": [
1526     {
1527       "id": "0ee220ce-108a-409c-83c2-a5686323b9ee",
1528       "alias": "Account verification options",
1529       "description": "Method with which to verity the existing account",
1530       "providerId": "basic-flow",
1531       "topLevel": false,
1532       "builtIn": true,
1533       "authenticationExecutions": [
1534         {
1535           "authenticator": "idp-email-verification",
1536           "requirement": "ALTERNATIVE",
1537           "priority": 10,
1538           "userSetupAllowed": false,
1539           "autheticatorFlow": false
1540         },
1541         {
1542           "requirement": "ALTERNATIVE",
1543           "priority": 20,
1544           "flowAlias": "Verify Existing Account by Re-authentication",
1545           "userSetupAllowed": false,
1546           "autheticatorFlow": true
1547         }
1548       ]
1549     },
1550     {
1551       "id": "d21dab1e-44d5-4e02-ad5d-544ac4fb6c3c",
1552       "alias": "Authentication Options",
1553       "description": "Authentication options.",
1554       "providerId": "basic-flow",
1555       "topLevel": false,
1556       "builtIn": true,
1557       "authenticationExecutions": [
1558         {
1559           "authenticator": "basic-auth",
1560           "requirement": "REQUIRED",
1561           "priority": 10,
1562           "userSetupAllowed": false,
1563           "autheticatorFlow": false
1564         },
1565         {
1566           "authenticator": "basic-auth-otp",
1567           "requirement": "DISABLED",
1568           "priority": 20,
1569           "userSetupAllowed": false,
1570           "autheticatorFlow": false
1571         },
1572         {
1573           "authenticator": "auth-spnego",
1574           "requirement": "DISABLED",
1575           "priority": 30,
1576           "userSetupAllowed": false,
1577           "autheticatorFlow": false
1578         }
1579       ]
1580     },
1581     {
1582       "id": "ec170205-9818-4cd2-9aff-d57c3c47a0a8",
1583       "alias": "Browser - Conditional OTP",
1584       "description": "Flow to determine if the OTP is required for the authentication",
1585       "providerId": "basic-flow",
1586       "topLevel": false,
1587       "builtIn": true,
1588       "authenticationExecutions": [
1589         {
1590           "authenticator": "conditional-user-configured",
1591           "requirement": "REQUIRED",
1592           "priority": 10,
1593           "userSetupAllowed": false,
1594           "autheticatorFlow": false
1595         },
1596         {
1597           "authenticator": "auth-otp-form",
1598           "requirement": "REQUIRED",
1599           "priority": 20,
1600           "userSetupAllowed": false,
1601           "autheticatorFlow": false
1602         }
1603       ]
1604     },
1605     {
1606       "id": "7867cf39-84c1-4061-8d7a-000ffd974a06",
1607       "alias": "Direct Grant - Conditional OTP",
1608       "description": "Flow to determine if the OTP is required for the authentication",
1609       "providerId": "basic-flow",
1610       "topLevel": false,
1611       "builtIn": true,
1612       "authenticationExecutions": [
1613         {
1614           "authenticator": "conditional-user-configured",
1615           "requirement": "REQUIRED",
1616           "priority": 10,
1617           "userSetupAllowed": false,
1618           "autheticatorFlow": false
1619         },
1620         {
1621           "authenticator": "direct-grant-validate-otp",
1622           "requirement": "REQUIRED",
1623           "priority": 20,
1624           "userSetupAllowed": false,
1625           "autheticatorFlow": false
1626         }
1627       ]
1628     },
1629     {
1630       "id": "eb496420-e54b-41e4-abdb-c5179dc345af",
1631       "alias": "First broker login - Conditional OTP",
1632       "description": "Flow to determine if the OTP is required for the authentication",
1633       "providerId": "basic-flow",
1634       "topLevel": false,
1635       "builtIn": true,
1636       "authenticationExecutions": [
1637         {
1638           "authenticator": "conditional-user-configured",
1639           "requirement": "REQUIRED",
1640           "priority": 10,
1641           "userSetupAllowed": false,
1642           "autheticatorFlow": false
1643         },
1644         {
1645           "authenticator": "auth-otp-form",
1646           "requirement": "REQUIRED",
1647           "priority": 20,
1648           "userSetupAllowed": false,
1649           "autheticatorFlow": false
1650         }
1651       ]
1652     },
1653     {
1654       "id": "bbf7a7ae-352b-44f4-83ab-1b3adcc0470c",
1655       "alias": "Handle Existing Account",
1656       "description": "Handle what to do if there is existing account with same email/username like authenticated identity provider",
1657       "providerId": "basic-flow",
1658       "topLevel": false,
1659       "builtIn": true,
1660       "authenticationExecutions": [
1661         {
1662           "authenticator": "idp-confirm-link",
1663           "requirement": "REQUIRED",
1664           "priority": 10,
1665           "userSetupAllowed": false,
1666           "autheticatorFlow": false
1667         },
1668         {
1669           "requirement": "REQUIRED",
1670           "priority": 20,
1671           "flowAlias": "Account verification options",
1672           "userSetupAllowed": false,
1673           "autheticatorFlow": true
1674         }
1675       ]
1676     },
1677     {
1678       "id": "74ec31d4-b70d-45db-817d-998ca47dca3f",
1679       "alias": "Reset - Conditional OTP",
1680       "description": "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.",
1681       "providerId": "basic-flow",
1682       "topLevel": false,
1683       "builtIn": true,
1684       "authenticationExecutions": [
1685         {
1686           "authenticator": "conditional-user-configured",
1687           "requirement": "REQUIRED",
1688           "priority": 10,
1689           "userSetupAllowed": false,
1690           "autheticatorFlow": false
1691         },
1692         {
1693           "authenticator": "reset-otp",
1694           "requirement": "REQUIRED",
1695           "priority": 20,
1696           "userSetupAllowed": false,
1697           "autheticatorFlow": false
1698         }
1699       ]
1700     },
1701     {
1702       "id": "f0f868e5-da82-4ab3-8a39-4b02417ec001",
1703       "alias": "User creation or linking",
1704       "description": "Flow for the existing/non-existing user alternatives",
1705       "providerId": "basic-flow",
1706       "topLevel": false,
1707       "builtIn": true,
1708       "authenticationExecutions": [
1709         {
1710           "authenticatorConfig": "create unique user config",
1711           "authenticator": "idp-create-user-if-unique",
1712           "requirement": "ALTERNATIVE",
1713           "priority": 10,
1714           "userSetupAllowed": false,
1715           "autheticatorFlow": false
1716         },
1717         {
1718           "requirement": "ALTERNATIVE",
1719           "priority": 20,
1720           "flowAlias": "Handle Existing Account",
1721           "userSetupAllowed": false,
1722           "autheticatorFlow": true
1723         }
1724       ]
1725     },
1726     {
1727       "id": "78059620-abd8-4e1c-97a5-dd25bf456a29",
1728       "alias": "Verify Existing Account by Re-authentication",
1729       "description": "Reauthentication of existing account",
1730       "providerId": "basic-flow",
1731       "topLevel": false,
1732       "builtIn": true,
1733       "authenticationExecutions": [
1734         {
1735           "authenticator": "idp-username-password-form",
1736           "requirement": "REQUIRED",
1737           "priority": 10,
1738           "userSetupAllowed": false,
1739           "autheticatorFlow": false
1740         },
1741         {
1742           "requirement": "CONDITIONAL",
1743           "priority": 20,
1744           "flowAlias": "First broker login - Conditional OTP",
1745           "userSetupAllowed": false,
1746           "autheticatorFlow": true
1747         }
1748       ]
1749     },
1750     {
1751       "id": "158733a4-43f8-4cbc-922d-5017939ad0dc",
1752       "alias": "browser",
1753       "description": "browser based authentication",
1754       "providerId": "basic-flow",
1755       "topLevel": true,
1756       "builtIn": true,
1757       "authenticationExecutions": [
1758         {
1759           "authenticator": "auth-cookie",
1760           "requirement": "ALTERNATIVE",
1761           "priority": 10,
1762           "userSetupAllowed": false,
1763           "autheticatorFlow": false
1764         },
1765         {
1766           "authenticator": "auth-spnego",
1767           "requirement": "DISABLED",
1768           "priority": 20,
1769           "userSetupAllowed": false,
1770           "autheticatorFlow": false
1771         },
1772         {
1773           "authenticator": "identity-provider-redirector",
1774           "requirement": "ALTERNATIVE",
1775           "priority": 25,
1776           "userSetupAllowed": false,
1777           "autheticatorFlow": false
1778         },
1779         {
1780           "requirement": "ALTERNATIVE",
1781           "priority": 30,
1782           "flowAlias": "forms",
1783           "userSetupAllowed": false,
1784           "autheticatorFlow": true
1785         }
1786       ]
1787     },
1788     {
1789       "id": "9027d460-c6c3-49d9-869d-108acba1609c",
1790       "alias": "clients",
1791       "description": "Base authentication for clients",
1792       "providerId": "client-flow",
1793       "topLevel": true,
1794       "builtIn": true,
1795       "authenticationExecutions": [
1796         {
1797           "authenticator": "client-secret",
1798           "requirement": "ALTERNATIVE",
1799           "priority": 10,
1800           "userSetupAllowed": false,
1801           "autheticatorFlow": false
1802         },
1803         {
1804           "authenticator": "client-jwt",
1805           "requirement": "ALTERNATIVE",
1806           "priority": 20,
1807           "userSetupAllowed": false,
1808           "autheticatorFlow": false
1809         },
1810         {
1811           "authenticator": "client-secret-jwt",
1812           "requirement": "ALTERNATIVE",
1813           "priority": 30,
1814           "userSetupAllowed": false,
1815           "autheticatorFlow": false
1816         },
1817         {
1818           "authenticator": "client-x509",
1819           "requirement": "ALTERNATIVE",
1820           "priority": 40,
1821           "userSetupAllowed": false,
1822           "autheticatorFlow": false
1823         }
1824       ]
1825     },
1826     {
1827       "id": "dfb7f7d8-1260-4d25-ac2c-b04b029bc63f",
1828       "alias": "direct grant",
1829       "description": "OpenID Connect Resource Owner Grant",
1830       "providerId": "basic-flow",
1831       "topLevel": true,
1832       "builtIn": true,
1833       "authenticationExecutions": [
1834         {
1835           "authenticator": "direct-grant-validate-username",
1836           "requirement": "REQUIRED",
1837           "priority": 10,
1838           "userSetupAllowed": false,
1839           "autheticatorFlow": false
1840         },
1841         {
1842           "authenticator": "direct-grant-validate-password",
1843           "requirement": "REQUIRED",
1844           "priority": 20,
1845           "userSetupAllowed": false,
1846           "autheticatorFlow": false
1847         },
1848         {
1849           "requirement": "CONDITIONAL",
1850           "priority": 30,
1851           "flowAlias": "Direct Grant - Conditional OTP",
1852           "userSetupAllowed": false,
1853           "autheticatorFlow": true
1854         }
1855       ]
1856     },
1857     {
1858       "id": "58f57ccc-d878-4670-bffa-be9f4754df62",
1859       "alias": "docker auth",
1860       "description": "Used by Docker clients to authenticate against the IDP",
1861       "providerId": "basic-flow",
1862       "topLevel": true,
1863       "builtIn": true,
1864       "authenticationExecutions": [
1865         {
1866           "authenticator": "docker-http-basic-authenticator",
1867           "requirement": "REQUIRED",
1868           "priority": 10,
1869           "userSetupAllowed": false,
1870           "autheticatorFlow": false
1871         }
1872       ]
1873     },
1874     {
1875       "id": "c5d1f9d8-1d25-4654-adf8-0a83f0c98303",
1876       "alias": "first broker login",
1877       "description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
1878       "providerId": "basic-flow",
1879       "topLevel": true,
1880       "builtIn": true,
1881       "authenticationExecutions": [
1882         {
1883           "authenticatorConfig": "review profile config",
1884           "authenticator": "idp-review-profile",
1885           "requirement": "REQUIRED",
1886           "priority": 10,
1887           "userSetupAllowed": false,
1888           "autheticatorFlow": false
1889         },
1890         {
1891           "requirement": "REQUIRED",
1892           "priority": 20,
1893           "flowAlias": "User creation or linking",
1894           "userSetupAllowed": false,
1895           "autheticatorFlow": true
1896         }
1897       ]
1898     },
1899     {
1900       "id": "84eccfe4-1192-4a02-a5ed-f4ff7a5a1442",
1901       "alias": "forms",
1902       "description": "Username, password, otp and other auth forms.",
1903       "providerId": "basic-flow",
1904       "topLevel": false,
1905       "builtIn": true,
1906       "authenticationExecutions": [
1907         {
1908           "authenticator": "auth-username-password-form",
1909           "requirement": "REQUIRED",
1910           "priority": 10,
1911           "userSetupAllowed": false,
1912           "autheticatorFlow": false
1913         },
1914         {
1915           "requirement": "CONDITIONAL",
1916           "priority": 20,
1917           "flowAlias": "Browser - Conditional OTP",
1918           "userSetupAllowed": false,
1919           "autheticatorFlow": true
1920         }
1921       ]
1922     },
1923     {
1924       "id": "a2f8ce9d-0206-4ea5-b09a-e660e551c2c0",
1925       "alias": "http challenge",
1926       "description": "An authentication flow based on challenge-response HTTP Authentication Schemes",
1927       "providerId": "basic-flow",
1928       "topLevel": true,
1929       "builtIn": true,
1930       "authenticationExecutions": [
1931         {
1932           "authenticator": "no-cookie-redirect",
1933           "requirement": "REQUIRED",
1934           "priority": 10,
1935           "userSetupAllowed": false,
1936           "autheticatorFlow": false
1937         },
1938         {
1939           "requirement": "REQUIRED",
1940           "priority": 20,
1941           "flowAlias": "Authentication Options",
1942           "userSetupAllowed": false,
1943           "autheticatorFlow": true
1944         }
1945       ]
1946     },
1947     {
1948       "id": "112ed8a8-631c-455e-9dbc-34935b74b237",
1949       "alias": "registration",
1950       "description": "registration flow",
1951       "providerId": "basic-flow",
1952       "topLevel": true,
1953       "builtIn": true,
1954       "authenticationExecutions": [
1955         {
1956           "authenticator": "registration-page-form",
1957           "requirement": "REQUIRED",
1958           "priority": 10,
1959           "flowAlias": "registration form",
1960           "userSetupAllowed": false,
1961           "autheticatorFlow": true
1962         }
1963       ]
1964     },
1965     {
1966       "id": "f15cdba2-4e59-4c06-9819-604f9eb811d0",
1967       "alias": "registration form",
1968       "description": "registration form",
1969       "providerId": "form-flow",
1970       "topLevel": false,
1971       "builtIn": true,
1972       "authenticationExecutions": [
1973         {
1974           "authenticator": "registration-user-creation",
1975           "requirement": "REQUIRED",
1976           "priority": 20,
1977           "userSetupAllowed": false,
1978           "autheticatorFlow": false
1979         },
1980         {
1981           "authenticator": "registration-profile-action",
1982           "requirement": "REQUIRED",
1983           "priority": 40,
1984           "userSetupAllowed": false,
1985           "autheticatorFlow": false
1986         },
1987         {
1988           "authenticator": "registration-password-action",
1989           "requirement": "REQUIRED",
1990           "priority": 50,
1991           "userSetupAllowed": false,
1992           "autheticatorFlow": false
1993         },
1994         {
1995           "authenticator": "registration-recaptcha-action",
1996           "requirement": "DISABLED",
1997           "priority": 60,
1998           "userSetupAllowed": false,
1999           "autheticatorFlow": false
2000         }
2001       ]
2002     },
2003     {
2004       "id": "182c33c2-1b63-4a77-bbde-54af459f94b6",
2005       "alias": "reset credentials",
2006       "description": "Reset credentials for a user if they forgot their password or something",
2007       "providerId": "basic-flow",
2008       "topLevel": true,
2009       "builtIn": true,
2010       "authenticationExecutions": [
2011         {
2012           "authenticator": "reset-credentials-choose-user",
2013           "requirement": "REQUIRED",
2014           "priority": 10,
2015           "userSetupAllowed": false,
2016           "autheticatorFlow": false
2017         },
2018         {
2019           "authenticator": "reset-credential-email",
2020           "requirement": "REQUIRED",
2021           "priority": 20,
2022           "userSetupAllowed": false,
2023           "autheticatorFlow": false
2024         },
2025         {
2026           "authenticator": "reset-password",
2027           "requirement": "REQUIRED",
2028           "priority": 30,
2029           "userSetupAllowed": false,
2030           "autheticatorFlow": false
2031         },
2032         {
2033           "requirement": "CONDITIONAL",
2034           "priority": 40,
2035           "flowAlias": "Reset - Conditional OTP",
2036           "userSetupAllowed": false,
2037           "autheticatorFlow": true
2038         }
2039       ]
2040     },
2041     {
2042       "id": "bd4486c6-1f69-45fd-b0c7-cbeeaf9e4f21",
2043       "alias": "saml ecp",
2044       "description": "SAML ECP Profile Authentication Flow",
2045       "providerId": "basic-flow",
2046       "topLevel": true,
2047       "builtIn": true,
2048       "authenticationExecutions": [
2049         {
2050           "authenticator": "http-basic-authenticator",
2051           "requirement": "REQUIRED",
2052           "priority": 10,
2053           "userSetupAllowed": false,
2054           "autheticatorFlow": false
2055         }
2056       ]
2057     }
2058   ],
2059   "authenticatorConfig": [
2060     {
2061       "id": "476c8235-6510-4a4f-ae77-dc711b1792ac",
2062       "alias": "create unique user config",
2063       "config": {
2064         "require.password.update.after.registration": "false"
2065       }
2066     },
2067     {
2068       "id": "6e78f8d6-1611-441a-b0da-df6570583564",
2069       "alias": "review profile config",
2070       "config": {
2071         "update.profile.on.first.login": "missing"
2072       }
2073     }
2074   ],
2075   "requiredActions": [
2076     {
2077       "alias": "CONFIGURE_TOTP",
2078       "name": "Configure OTP",
2079       "providerId": "CONFIGURE_TOTP",
2080       "enabled": true,
2081       "defaultAction": false,
2082       "priority": 10,
2083       "config": {}
2084     },
2085     {
2086       "alias": "terms_and_conditions",
2087       "name": "Terms and Conditions",
2088       "providerId": "terms_and_conditions",
2089       "enabled": false,
2090       "defaultAction": false,
2091       "priority": 20,
2092       "config": {}
2093     },
2094     {
2095       "alias": "UPDATE_PASSWORD",
2096       "name": "Update Password",
2097       "providerId": "UPDATE_PASSWORD",
2098       "enabled": true,
2099       "defaultAction": false,
2100       "priority": 30,
2101       "config": {}
2102     },
2103     {
2104       "alias": "UPDATE_PROFILE",
2105       "name": "Update Profile",
2106       "providerId": "UPDATE_PROFILE",
2107       "enabled": true,
2108       "defaultAction": false,
2109       "priority": 40,
2110       "config": {}
2111     },
2112     {
2113       "alias": "VERIFY_EMAIL",
2114       "name": "Verify Email",
2115       "providerId": "VERIFY_EMAIL",
2116       "enabled": true,
2117       "defaultAction": false,
2118       "priority": 50,
2119       "config": {}
2120     },
2121     {
2122       "alias": "delete_account",
2123       "name": "Delete Account",
2124       "providerId": "delete_account",
2125       "enabled": false,
2126       "defaultAction": false,
2127       "priority": 60,
2128       "config": {}
2129     },
2130     {
2131       "alias": "update_user_locale",
2132       "name": "Update User Locale",
2133       "providerId": "update_user_locale",
2134       "enabled": true,
2135       "defaultAction": false,
2136       "priority": 1000,
2137       "config": {}
2138     }
2139   ],
2140   "browserFlow": "browser",
2141   "registrationFlow": "registration",
2142   "directGrantFlow": "direct grant",
2143   "resetCredentialsFlow": "reset credentials",
2144   "clientAuthenticationFlow": "clients",
2145   "dockerAuthenticationFlow": "docker auth",
2146   "attributes": {
2147     "clientOfflineSessionMaxLifespan": "0",
2148     "clientSessionIdleTimeout": "0",
2149     "clientSessionMaxLifespan": "0",
2150     "clientOfflineSessionIdleTimeout": "0"
2151   },
2152   "keycloakVersion": "12.0.4",
2153   "userManagedAccessAllowed": false
2154 }