{ "id": "provider", "realm": "provider", "displayName": "Keycloak", "displayNameHtml": "
Keycloak
", "notBefore": 0, "defaultSignatureAlgorithm": "RS256", "revokeRefreshToken": false, "refreshTokenMaxReuse": 0, "accessTokenLifespan": 300, "accessTokenLifespanForImplicitFlow": 900, "ssoSessionIdleTimeout": 1800, "ssoSessionMaxLifespan": 36000, "ssoSessionIdleTimeoutRememberMe": 0, "ssoSessionMaxLifespanRememberMe": 0, "offlineSessionIdleTimeout": 2592000, "offlineSessionMaxLifespanEnabled": false, "offlineSessionMaxLifespan": 5184000, "clientSessionIdleTimeout": 0, "clientSessionMaxLifespan": 0, "clientOfflineSessionIdleTimeout": 0, "clientOfflineSessionMaxLifespan": 0, "accessCodeLifespan": 60, "accessCodeLifespanUserAction": 300, "accessCodeLifespanLogin": 1800, "actionTokenGeneratedByAdminLifespan": 43200, "actionTokenGeneratedByUserLifespan": 300, "oauth2DeviceCodeLifespan": 600, "oauth2DevicePollingInterval": 5, "enabled": true, "sslRequired": "none", "registrationAllowed": false, "registrationEmailAsUsername": false, "rememberMe": false, "verifyEmail": false, "loginWithEmailAllowed": true, "duplicateEmailsAllowed": false, "resetPasswordAllowed": false, "editUsernameAllowed": false, "bruteForceProtected": false, "permanentLockout": false, "maxTemporaryLockouts": 0, "bruteForceStrategy": "MULTIPLE", "maxFailureWaitSeconds": 900, "minimumQuickLoginWaitSeconds": 60, "waitIncrementSeconds": 60, "quickLoginCheckMilliSeconds": 1000, "maxDeltaTimeSeconds": 43200, "failureFactor": 30, "maxSecondaryAuthFailures": 0, "users": [], "roles": { "realm": [ { "name": "admin", "description": "Administrator role for FDSC Dashboard", "composite": false, "clientRole": false }, { "id": "7a52c8eb-3e62-4dbe-8a5c-5679fb56c9cb", "name": "offline_access", "description": "${role_offline-access}", "composite": false, "clientRole": false, "containerId": "provider", "attributes": {} }, { "id": "e97ddd07-91eb-495a-b09a-7891cced11d7", "name": "default-roles-provider", "description": "${role_default-roles}", "composite": true, "composites": { "realm": [ "offline_access" ] }, "clientRole": false, "containerId": "provider", "attributes": {} }, { "id": "ee0f6b4e-45d4-4171-be0a-483ad76fa3a8", "name": "uma_authorization", "description": "${role_uma_authorization}", "composite": false, "clientRole": false, "containerId": "provider", "attributes": {} }, { "id": "6884ded5-0d83-4707-82f4-b62817e5dee2", "name": "default-roles-test-realm", "description": "${role_default-roles}", "composite": true, "composites": { "realm": [ "offline_access", "uma_authorization" ], "client": { "account": [ "manage-account", "view-profile" ] } }, "clientRole": false, "containerId": "provider", "attributes": {} }, { "id": "f626fed5-3c60-435f-8e49-06d7bd24f5f5", "name": "user", "description": "User privileges", "composite": false, "clientRole": false, "containerId": "provider", "attributes": {} }, { "id": "a812d872-64e1-473c-ad32-60fc31b2c45d", "name": "credential-offer-create", "description": "Allow credential offer creation", "composite": false, "clientRole": false, "containerId": "provider", "attributes": {} } ], "client": { "realm-management": [ { "id": "f8860c73-51c3-499d-8435-10e6d7a241de", "name": "manage-events", "description": "${role_manage-events}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "75f075af-0796-4207-bb40-b82eae477fa6", "name": "view-clients", "description": "${role_view-clients}", "composite": true, "composites": { "client": { "realm-management": [ "query-clients" ] } }, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "8f19e464-093e-457a-a043-a30237d3ca17", "name": "manage-clients", "description": "${role_manage-clients}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "db8c59bb-f9eb-40ab-8f0d-f5927cd53d92", "name": "view-authorization", "description": "${role_view-authorization}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "e8babaad-5cc7-4677-bd10-af1ac0bc864f", "name": "query-realms", "description": "${role_query-realms}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "b54c9e0f-1648-470c-8748-9e3ffc1fa937", "name": "view-users", "description": "${role_view-users}", "composite": true, "composites": { "client": { "realm-management": [ "query-groups", "query-users" ] } }, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "17b7cbeb-15db-448e-8463-4cd8f8c1b476", "name": "manage-authorization", "description": "${role_manage-authorization}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "d4a4119f-085d-4163-bf78-04d30b80d38a", "name": "manage-realm", "description": "${role_manage-realm}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "185f48bb-2af2-470d-bc88-19941b27a18f", "name": "manage-users", "description": "${role_manage-users}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "0a5c0de6-3b81-4d99-86b2-a9034c82329a", "name": "view-identity-providers", "description": "${role_view-identity-providers}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "9a027ea1-208a-4db2-8b39-f02dfa9e897b", "name": "query-groups", "description": "${role_query-groups}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "afd23080-80f2-46fe-9d41-0ade61bb087d", "name": "create-client", "description": "${role_create-client}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "", "name": "impersonation", "description": "${role_impersonation}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "862ae229-68db-48c5-8be1-9fdbf8da13be", "name": "realm-admin", "description": "${role_realm-admin}", "composite": true, "composites": { "client": { "realm-management": [ "view-clients", "manage-events", "manage-clients", "view-authorization", "query-realms", "view-users", "manage-authorization", "manage-realm", "manage-users", "view-identity-providers", "query-groups", "create-client", "impersonation", "view-realm", "manage-organizations", "query-clients", "view-organizations", "manage-identity-providers", "query-organizations", "view-events", "query-users" ] } }, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "812c2e73-f4c0-4606-983c-e2d7a9926290", "name": "view-realm", "description": "${role_view-realm}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "795d8b52-b248-4cb7-bf12-e1f48607c609", "name": "manage-organizations", "description": "${role_manage-organizations}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "3cbb1120-04f1-4f16-8e53-ffffa12c7888", "name": "query-clients", "description": "${role_query-clients}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "a994278e-4978-4aca-8f53-02402946cc8e", "name": "manage-identity-providers", "description": "${role_manage-identity-providers}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "3ba03f55-963f-4889-b811-6dd5797b0cfb", "name": "view-organizations", "description": "${role_view-organizations}", "composite": true, "composites": { "client": { "realm-management": [ "query-organizations" ] } }, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "d6352043-4222-4f8c-947a-696cf0eccafb", "name": "query-organizations", "description": "${role_query-organizations}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "52ea89f1-eed7-416a-a155-544392bac29f", "name": "query-users", "description": "${role_query-users}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} }, { "id": "c8196aef-ea47-43e6-a33b-32312bfccf64", "name": "view-events", "description": "${role_view-events}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} } ], "marketplace": [ { "id": "89d01562-f59d-4ca2-910d-6a91f3ffbadd", "name": "REPRESENTATIVE", "description": "Is allowed to register.", "composite": false, "clientRole": true, "containerId": "7643fce0-e139-42c4-8711-5ca05e762f12", "attributes": {} } ], "security-admin-console": [], "admin-cli": [ { "id": "c9efc61f-5d70-4c09-ba94-259b10d23983", "name": "impersonation", "description": "${role_impersonation}", "composite": false, "clientRole": true, "containerId": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "attributes": {} } ], "account-console": [], "broker": [ { "id": "ae7fbcdd-c78d-4e00-be3b-3e786741ac40", "name": "read-token", "description": "${role_read-token}", "composite": false, "clientRole": true, "containerId": "4e6f3b05-6d56-42d2-b000-7f115e556f78", "attributes": {} } ], "roles-dataspace": [ { "id": "7051670c-1600-4123-ac1b-8abf2a0b582e", "name": "clearence1", "description": "Clearance level 1", "composite": false, "clientRole": true, "containerId": "23b692e4-41a3-4eea-9a75-ba6996d579c7", "attributes": {} }, { "id": "dae370cc-8716-424b-a6ed-c67bc00d4228", "name": "clearence2", "description": "Clearance level 2", "composite": false, "clientRole": true, "containerId": "23b692e4-41a3-4eea-9a75-ba6996d579c7", "attributes": {} }, { "id": "e4f4aaef-f3ad-46fb-b1d1-98c40a0f7a4b", "name": "admin", "description": "Is allowed to operate clusters.", "composite": false, "clientRole": true, "containerId": "23b692e4-41a3-4eea-9a75-ba6996d579c7", "attributes": {} }, { "id": "5baba128-7cab-435e-a7d2-f7af40945fb5", "name": "clearence3", "description": "Clearance level 3", "composite": false, "clientRole": true, "containerId": "23b692e4-41a3-4eea-9a75-ba6996d579c7", "attributes": {} }, { "id": "54c930ce-56e2-43d0-bf2e-c82a6f4e6749", "name": "clearence4", "description": "Clearance level 4", "composite": false, "clientRole": true, "containerId": "23b692e4-41a3-4eea-9a75-ba6996d579c7", "attributes": {} } ], "did:web:DID_HOST": [ { "name": "LegalPersonCredential", "composite": false, "clientRole": true, "attributes": {} }, { "name": "MachineCredential", "composite": false, "clientRole": true, "attributes": {} }, { "name": "ServiceCredential", "composite": false, "clientRole": true, "attributes": {} } ], "account": [ { "id": "70c8e0bc-a508-44fd-9173-8a30cd4318cc", "name": "view-applications", "description": "${role_view-applications}", "composite": false, "clientRole": true, "containerId": "de63b129-727a-401a-8db9-24a8b1bbeeaa", "attributes": {} }, { "id": "40b0f988-3f58-4a53-a013-5335fdc717e9", "name": "delete-account", "description": "${role_delete-account}", "composite": false, "clientRole": true, "containerId": "de63b129-727a-401a-8db9-24a8b1bbeeaa", "attributes": {} }, { "id": "c751fad6-bb98-4cc7-ab98-aa89a8e8e99b", "name": "manage-account-links", "description": "${role_manage-account-links}", "composite": false, "clientRole": true, "containerId": "de63b129-727a-401a-8db9-24a8b1bbeeaa", "attributes": {} }, { "id": "78b83bab-af08-410e-b8d2-e6c7861ac9c4", "name": "view-consent", "description": "${role_view-consent}", "composite": false, "clientRole": true, "containerId": "de63b129-727a-401a-8db9-24a8b1bbeeaa", "attributes": {} }, { "id": "f56be824-f642-4647-8fc6-ff94139a8b3f", "name": "manage-account", "description": "${role_manage-account}", "composite": true, "composites": { "client": { "account": [ "manage-account-links" ] } }, "clientRole": true, "containerId": "de63b129-727a-401a-8db9-24a8b1bbeeaa", "attributes": {} }, { "id": "ed4a694c-d120-4fea-9bef-4a8ff3c81a8a", "name": "view-profile", "description": "${role_view-profile}", "composite": false, "clientRole": true, "containerId": "de63b129-727a-401a-8db9-24a8b1bbeeaa", "attributes": {} }, { "id": "a0d3e76a-1644-4cbe-b592-a57364b64a8d", "name": "manage-consent", "description": "${role_manage-consent}", "composite": true, "composites": { "client": { "account": [ "view-consent" ] } }, "clientRole": true, "containerId": "de63b129-727a-401a-8db9-24a8b1bbeeaa", "attributes": {} }, { "id": "78d2154e-3b39-4f7d-9136-b765cb544a59", "name": "view-groups", "description": "${role_view-groups}", "composite": false, "clientRole": true, "containerId": "de63b129-727a-401a-8db9-24a8b1bbeeaa", "attributes": {} } ] } }, "groups": [ { "id": "f404419f-7d41-4b72-9488-b523882548c0", "name": "admin", "path": "/admin", "subGroups": [], "attributes": {}, "realmRoles": [ "default-roles-test-realm", "user" ], "clientRoles": {} }, { "id": "22721cdb-1164-4173-9080-8384934ece4c", "name": "consumer", "path": "/consumer", "subGroups": [], "attributes": {}, "realmRoles": [ "default-roles-test-realm", "user" ], "clientRoles": {} } ], "defaultRole": { "id": "e97ddd07-91eb-495a-b09a-7891cced11d7", "name": "default-roles-provider", "description": "${role_default-roles}", "composite": true, "clientRole": false, "containerId": "provider" }, "requiredCredentials": [ "password" ], "otpPolicyType": "totp", "otpPolicyAlgorithm": "HmacSHA1", "otpPolicyInitialCounter": 0, "otpPolicyDigits": 6, "otpPolicyLookAheadWindow": 1, "otpPolicyPeriod": 30, "otpPolicyCodeReusable": false, "otpSupportedApplications": [ "totpAppFreeOTPName", "totpAppGoogleName", "totpAppMicrosoftAuthenticatorName" ], "localizationTexts": {}, "webAuthnPolicyRpEntityName": "keycloak", "webAuthnPolicySignatureAlgorithms": [ "ES256", "RS256" ], "webAuthnPolicyRpId": "", "webAuthnPolicyAttestationConveyancePreference": "not specified", "webAuthnPolicyAuthenticatorAttachment": "not specified", "webAuthnPolicyRequireResidentKey": "not specified", "webAuthnPolicyUserVerificationRequirement": "not specified", "webAuthnPolicyCreateTimeout": 0, "webAuthnPolicyAvoidSameAuthenticatorRegister": false, "webAuthnPolicyAcceptableAaguids": [], "webAuthnPolicyExtraOrigins": [], "webAuthnPolicyPasswordlessRpEntityName": "keycloak", "webAuthnPolicyPasswordlessSignatureAlgorithms": [ "ES256", "RS256" ], "webAuthnPolicyPasswordlessRpId": "", "webAuthnPolicyPasswordlessAttestationConveyancePreference": "not specified", "webAuthnPolicyPasswordlessAuthenticatorAttachment": "not specified", "webAuthnPolicyPasswordlessRequireResidentKey": "Yes", "webAuthnPolicyPasswordlessUserVerificationRequirement": "required", "webAuthnPolicyPasswordlessCreateTimeout": 0, "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister": false, "webAuthnPolicyPasswordlessAcceptableAaguids": [], "webAuthnPolicyPasswordlessExtraOrigins": [], "scopeMappings": [ { "clientScope": "offline_access", "roles": [ "offline_access" ] } ], "clients": [ { "clientId": "9c481dc3-2ad0-4fe0-881d-c32ad02fe0fc", "name": "Lissi ID Wallet", "enabled": true, "publicClient": true, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "protocol": "openid-connect", "redirectUris": [ "https://lissi.id/*", "lissi://*", "https://oob.lissi.io/*", "https://wallet.lissi.io/*" ], "webOrigins": [], "attributes": { "pkce.code.challenge.method": "S256", "oid4vci.enabled": "true", "dpop.bound.access.tokens": "true" }, "defaultClientScopes": [ "profile", "email", "roles", "web-origins", "acr" ], "optionalClientScopes": [ "LegalPersonCredential", "MachineCredential", "ServiceCredential", "offline_access" ] }, { "clientId": "did:web:DID_HOST", "name": "FIWARE FDSC Dashboard", "enabled": true, "publicClient": true, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "protocol": "openid-connect", "redirectUris": [ "https://KEYCLOAK_HOST/*", "http://localhost:3000/*", "http://localhost:3000/callback/keycloak" ], "webOrigins": [ "https://KEYCLOAK_HOST", "http://localhost:3000" ], "attributes": { "pkce.code.challenge.method": "S256", "post.logout.redirect.uris": "+" }, "protocolMappers": [ { "name": "fdsc-client-roles-mapper", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-client-role-mapper", "consentRequired": false, "config": { "access.token.claim": "true", "id.token.claim": "true", "userinfo.token.claim": "true", "claim.name": "client_roles", "jsonType.label": "String", "multivalued": "true", "client.id": "did:web:DID_HOST" } } ], "defaultClientScopes": [ "profile", "email", "roles", "web-origins", "acr" ], "optionalClientScopes": [ "LegalPersonCredential", "offline_access", "ServiceCredential", "MachineCredential" ] }, { "id": "de63b129-727a-401a-8db9-24a8b1bbeeaa", "clientId": "account", "name": "${client_account}", "rootUrl": "https://KEYCLOAK_HOST", "baseUrl": "/realms/provider/account/", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "redirectUris": [ "/realms/provider/account/*" ], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": true, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "realm_client": "false", "post.logout.redirect.uris": "+" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": true, "nodeReRegistrationTimeout": 0, "defaultClientScopes": [ "profile", "email", "roles", "web-origins", "acr" ], "optionalClientScopes": [ "LegalPersonCredential", "offline_access", "ServiceCredential", "MachineCredential" ] }, { "id": "339efe08-d461-4103-b811-b5dcb3d53111", "clientId": "account-console", "name": "${client_account-console}", "rootUrl": "https://KEYCLOAK_HOST", "baseUrl": "/realms/provider/account/", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "redirectUris": [ "/realms/provider/account/*" ], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": true, "serviceAccountsEnabled": false, "publicClient": true, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "realm_client": "false", "oid4vci.enabled": "true", "post.logout.redirect.uris": "+", "pkce.code.challenge.method": "S256" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": true, "nodeReRegistrationTimeout": 0, "protocolMappers": [ { "id": "706c5202-1b03-4fad-a5b8-484287e941f8", "name": "audience resolve", "protocol": "openid-connect", "protocolMapper": "oidc-audience-resolve-mapper", "consentRequired": false, "config": {} } ], "defaultClientScopes": [ "profile", "email", "roles", "web-origins", "acr" ], "optionalClientScopes": [ "LegalPersonCredential", "offline_access", "ServiceCredential", "MachineCredential" ] }, { "id": "09992a8b-e8fc-4c22-a037-e3f5dd322c85", "clientId": "admin-cli", "name": "${client_admin-cli}", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "redirectUris": [], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": false, "implicitFlowEnabled": false, "directAccessGrantsEnabled": true, "serviceAccountsEnabled": true, "publicClient": true, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "realm_client": "false", "client.use.lightweight.access.token.enabled": "true", "post.logout.redirect.uris": "+" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": true, "nodeReRegistrationTimeout": 0, "protocolMappers": [ { "id": "cc130def-c1ba-42b5-80d0-8c38af84d18e", "name": "audience resolve", "protocol": "openid-connect", "protocolMapper": "oidc-audience-resolve-mapper", "consentRequired": false, "config": {} } ], "defaultClientScopes": [ "profile", "email", "roles", "web-origins", "acr" ], "optionalClientScopes": [ "offline_access" ] }, { "id": "4e6f3b05-6d56-42d2-b000-7f115e556f78", "clientId": "broker", "name": "${client_broker}", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "redirectUris": [], "webOrigins": [], "notBefore": 0, "bearerOnly": true, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": false, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "realm_client": "true" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": false, "nodeReRegistrationTimeout": 0, "defaultClientScopes": [], "optionalClientScopes": [] }, { "id": "7643fce0-e139-42c4-8711-5ca05e762f12", "clientId": "marketplace", "description": "Client to connect test.org", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "redirectUris": [], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": false, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "realm_client": "false", "client.secret.creation.time": "1675260539", "post.logout.redirect.uris": "+" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": true, "nodeReRegistrationTimeout": -1, "defaultClientScopes": [], "optionalClientScopes": [] }, { "id": "2543ebfa-c401-43f7-805a-e89ce31e38d3", "clientId": "realm-management", "name": "${client_realm-management}", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "redirectUris": [], "webOrigins": [], "notBefore": 0, "bearerOnly": true, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": false, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "realm_client": "true" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": false, "nodeReRegistrationTimeout": 0, "defaultClientScopes": [], "optionalClientScopes": [] }, { "id": "23b692e4-41a3-4eea-9a75-ba6996d579c7", "clientId": "roles-dataspace", "description": "Client to connect test.org", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "redirectUris": [], "webOrigins": [], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": false, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "realm_client": "false", "client.secret.creation.time": "1675260539", "post.logout.redirect.uris": "+" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": true, "nodeReRegistrationTimeout": -1, "defaultClientScopes": [], "optionalClientScopes": [] }, { "id": "a37025c2-5796-489c-95d6-22fba78943b1", "clientId": "security-admin-console", "name": "${client_security-admin-console}", "rootUrl": "https://KEYCLOAK_HOST/admin", "baseUrl": "/admin/provider/console/", "surrogateAuthRequired": false, "enabled": true, "alwaysDisplayInConsole": false, "clientAuthenticatorType": "client-secret", "redirectUris": [ "/admin/provider/console/*" ], "webOrigins": [ "+" ], "notBefore": 0, "bearerOnly": false, "consentRequired": false, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "publicClient": true, "frontchannelLogout": false, "protocol": "openid-connect", "attributes": { "realm_client": "false", "client.use.lightweight.access.token.enabled": "true", "post.logout.redirect.uris": "+", "pkce.code.challenge.method": "S256" }, "authenticationFlowBindingOverrides": {}, "fullScopeAllowed": true, "nodeReRegistrationTimeout": 0, "protocolMappers": [ { "id": "50066d31-e810-4e6a-a5a6-36fac53b68ba", "name": "locale", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired": false, "config": { "introspection.token.claim": "true", "userinfo.token.claim": "true", "user.attribute": "locale", "id.token.claim": "true", "access.token.claim": "true", "claim.name": "locale", "jsonType.label": "String" } } ], "defaultClientScopes": [ "profile", "email", "roles", "web-origins", "acr" ], "optionalClientScopes": [] }, { "clientId": "atesta-id-wallet", "name": "Atesta ID Wallet", "enabled": true, "protocol": "openid-connect", "publicClient": true, "standardFlowEnabled": true, "implicitFlowEnabled": false, "directAccessGrantsEnabled": false, "serviceAccountsEnabled": false, "consentRequired": false, "frontchannelLogout": false, "redirectUris": [ "http://127.0.0.1/callback" ], "webOrigins": [], "attributes": { "pkce.code.challenge.method": "S256", "oid4vci.enabled": "true" }, "defaultClientScopes": [ "profile", "email", "roles", "web-origins", "acr" ], "optionalClientScopes": [ "LegalPersonCredential", "MachineCredential", "ServiceCredential" ] } ], "clientScopes": [ { "name": "openid", "description": "OpenID Connect built-in scope", "protocol": "openid-connect", "attributes": { "include.in.token.scope": "false", "display.on.consent.screen": "false" } }, { "name": "profile", "description": "OpenID Connect built-in scope: profile", "protocol": "openid-connect", "attributes": { "include.in.token.scope": "true", "display.on.consent.screen": "true", "consent.screen.text": "${profileScopeConsentText}" }, "protocolMappers": [ { "name": "username", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "user.attribute": "username", "claim.name": "preferred_username", "jsonType.label": "String", "id.token.claim": "true", "access.token.claim": "true", "userinfo.token.claim": "true", "introspection.token.claim": "true" } }, { "name": "full name", "protocol": "openid-connect", "protocolMapper": "oidc-full-name-mapper", "consentRequired": false, "config": { "id.token.claim": "true", "access.token.claim": "true", "userinfo.token.claim": "true", "introspection.token.claim": "true" } }, { "name": "family name", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "user.attribute": "lastName", "claim.name": "family_name", "jsonType.label": "String", "id.token.claim": "true", "access.token.claim": "true", "userinfo.token.claim": "true", "introspection.token.claim": "true" } }, { "name": "given name", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "user.attribute": "firstName", "claim.name": "given_name", "jsonType.label": "String", "id.token.claim": "true", "access.token.claim": "true", "userinfo.token.claim": "true", "introspection.token.claim": "true" } } ] }, { "name": "email", "description": "OpenID Connect built-in scope: email", "protocol": "openid-connect", "attributes": { "include.in.token.scope": "true", "display.on.consent.screen": "true", "consent.screen.text": "${emailScopeConsentText}" }, "protocolMappers": [ { "name": "email", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "user.attribute": "email", "claim.name": "email", "jsonType.label": "String", "id.token.claim": "true", "access.token.claim": "true", "userinfo.token.claim": "true", "introspection.token.claim": "true" } }, { "name": "email verified", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-property-mapper", "consentRequired": false, "config": { "user.attribute": "emailVerified", "claim.name": "email_verified", "jsonType.label": "boolean", "id.token.claim": "true", "access.token.claim": "true", "userinfo.token.claim": "true", "introspection.token.claim": "true" } } ] }, { "name": "roles", "description": "OpenID Connect scope for add user roles to the access token", "protocol": "openid-connect", "attributes": { "include.in.token.scope": "false", "display.on.consent.screen": "true", "consent.screen.text": "${rolesScopeConsentText}" }, "protocolMappers": [ { "name": "realm roles", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-realm-role-mapper", "consentRequired": false, "config": { "claim.name": "realm_access.roles", "jsonType.label": "String", "multivalued": "true", "id.token.claim": "true", "access.token.claim": "true", "introspection.token.claim": "true" } }, { "name": "client roles", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-client-role-mapper", "consentRequired": false, "config": { "claim.name": "resource_access.${client_id}.roles", "jsonType.label": "String", "multivalued": "true", "id.token.claim": "true", "access.token.claim": "true", "introspection.token.claim": "true" } }, { "name": "audience resolve", "protocol": "openid-connect", "protocolMapper": "oidc-audience-resolve-mapper", "consentRequired": false, "config": { "introspection.token.claim": "true", "access.token.claim": "true" } } ] }, { "name": "web-origins", "description": "OpenID Connect scope for add allowed web origins to the access token", "protocol": "openid-connect", "attributes": { "include.in.token.scope": "false", "display.on.consent.screen": "false" }, "protocolMappers": [ { "name": "allowed web origins", "protocol": "openid-connect", "protocolMapper": "oidc-allowed-origins-mapper", "consentRequired": false, "config": { "introspection.token.claim": "true", "access.token.claim": "true" } } ] }, { "name": "acr", "description": "OpenID Connect scope for add acr (authentication context class reference) to the token", "protocol": "openid-connect", "attributes": { "include.in.token.scope": "false", "display.on.consent.screen": "false" }, "protocolMappers": [ { "name": "acr loa level", "protocol": "openid-connect", "protocolMapper": "oidc-acr-mapper", "consentRequired": false, "config": { "id.token.claim": "true", "access.token.claim": "true", "introspection.token.claim": "true" } } ] }, { "id": "8754d4ae-1239-4bb3-a01c-9cbde9f9bd30", "name": "offline_access", "description": "OpenID Connect built-in scope: offline_access", "protocol": "openid-connect", "attributes": { "consent.screen.text": "${offlineAccessScopeConsentText}", "display.on.consent.screen": "true" } }, { "id": "96352eee-9f2e-46ac-a32a-1715446ea032", "name": "LegalPersonCredential", "description": "OIDC4VC Scope, that adds all properties required for a user.", "protocol": "oid4vc", "attributes": { "vc.verifiable_credential_type": "LegalPersonCredential", "vc.issuer_did": "did:web:DID_HOST", "vc.format": "dc+sd-jwt", "vc.credential_signing_alg": "ES256", "vc.binding_required": "true", "vc.cryptographic_binding_methods_supported": "jwk", "vc.binding_required_proof_types": "jwt", "vc.credential_build_config.token_jws_type": "dc+sd-jwt", "vc.credential_build_config.proof_types_supported": "{\"jwt\":{\"proof_signing_alg_values_supported\":[\"ES256\"]}}", "vc.credential_build_config.sd_jwt.visible_claims": "iss,iat,nbf,exp,cnf,vct,status,roles,email", "vc.credential_build_config.decoys": "3", "vc.credential_build_config.signing_algorithm": "ES256", "vc.sd_jwt.number_of_decoys": "3" }, "protocolMappers": [ { "name": "vct-mapper-lpc", "protocol": "oid4vc", "protocolMapper": "oid4vc-static-claim-mapper", "consentRequired": false, "config": { "claim.name": "vct", "staticValue": "LegalPersonCredential" } }, { "id": "0a550e78-9fda-46c1-817f-6790aa5a1398", "name": "firstName-mapper-usd", "protocol": "oid4vc", "protocolMapper": "oid4vc-user-attribute-mapper", "consentRequired": false, "config": { "claim.name": "firstName", "userAttribute": "firstName" } }, { "id": "68f4b60e-9486-4c02-9819-fe524a884305", "name": "lastName-mapper-usd", "protocol": "oid4vc", "protocolMapper": "oid4vc-user-attribute-mapper", "consentRequired": false, "config": { "claim.name": "lastName", "userAttribute": "lastName" } }, { "id": "6c8e98e5-12a2-4086-bdb5-f6d541041fd1", "name": "email-mapper-usd", "protocol": "oid4vc", "protocolMapper": "oid4vc-user-attribute-mapper", "consentRequired": false, "config": { "claim.name": "email", "userAttribute": "email" } }, { "id": "0af35769-8dff-4e22-a5d2-1321b7003b3a", "name": "role-mapper-usd", "protocol": "oid4vc", "protocolMapper": "oid4vc-target-role-mapper", "consentRequired": false, "config": { "claim.name": "roles", "clientId": "marketplace" } }, { "id": "a7bf0a72-b536-4b8e-bd72-1a3799e9923e", "name": "context-mapper-usd", "protocol": "oid4vc", "protocolMapper": "oid4vc-context-mapper", "consentRequired": false, "config": { "context": "https://www.w3.org/2018/credentials/v1" } } ] }, { "id": "6a1bb394-48ee-4750-b1f0-dfe17cb3d215", "name": "MachineCredential", "description": "OIDC4VC Scope, that adds all properties required for a user.", "protocol": "oid4vc", "attributes": { "vc.verifiable_credential_type": "MachineCredential", "vc.issuer_did": "did:web:DID_HOST", "vc.format": "dc+sd-jwt", "vc.credential_signing_alg": "ES256", "vc.binding_required": "true", "vc.cryptographic_binding_methods_supported": "jwk", "vc.binding_required_proof_types": "jwt", "vc.credential_build_config.token_jws_type": "dc+sd-jwt", "vc.credential_build_config.proof_types_supported": "{\"jwt\":{\"proof_signing_alg_values_supported\":[\"ES256\"]}}", "vc.credential_build_config.sd_jwt.visible_claims": "iss,iat,nbf,exp,cnf,vct,status,roles,email", "vc.credential_build_config.decoys": "3", "vc.credential_build_config.signing_algorithm": "ES256" }, "protocolMappers": [ { "name": "vct-mapper-mc", "protocol": "oid4vc", "protocolMapper": "oid4vc-static-claim-mapper", "consentRequired": false, "config": { "claim.name": "vct", "staticValue": "MachineCredential" } }, { "id": "1bb76fbf-f715-4369-bc56-218c40fd3897", "name": "email-mapper-msd", "protocol": "oid4vc", "protocolMapper": "oid4vc-user-attribute-mapper", "consentRequired": false, "config": { "claim.name": "email", "userAttribute": "email" } }, { "id": "f8aaf3f7-6835-479f-b392-dabb399e0990", "name": "role-mapper-msd", "protocol": "oid4vc", "protocolMapper": "oid4vc-target-role-mapper", "consentRequired": false, "config": { "claim.name": "roles", "clientId": "roles-dataspace" } }, { "id": "05baeaff-b6b0-4507-a9fa-1b11d0482b04", "name": "firstName-mapper-msd", "protocol": "oid4vc", "protocolMapper": "oid4vc-user-attribute-mapper", "consentRequired": false, "config": { "claim.name": "firstName", "userAttribute": "firstName" } }, { "id": "f7452327-afda-437f-8ce3-72e60275369c", "name": "context-mapper-msd", "protocol": "oid4vc", "protocolMapper": "oid4vc-context-mapper", "consentRequired": false, "config": { "context": "https://www.w3.org/2018/credentials/v1" } }, { "id": "b314c838-0a47-4c56-be71-477dbb0b5054", "name": "lastName-mapper-msd", "protocol": "oid4vc", "protocolMapper": "oid4vc-user-attribute-mapper", "consentRequired": false, "config": { "claim.name": "lastName", "userAttribute": "lastName" } } ] }, { "id": "2e095417-e116-4126-b81f-f8d9424036de", "name": "ServiceCredential", "description": "OIDC4VC Scope, that adds all properties required for a user.", "protocol": "oid4vc", "attributes": { "vc.verifiable_credential_type": "ServiceCredential", "vc.issuer_did": "did:web:DID_HOST", "vc.format": "dc+sd-jwt", "vc.credential_signing_alg": "ES256", "vc.binding_required": "true", "vc.cryptographic_binding_methods_supported": "jwk", "vc.binding_required_proof_types": "jwt", "vc.credential_build_config.token_jws_type": "dc+sd-jwt", "vc.credential_build_config.proof_types_supported": "{\"jwt\":{\"proof_signing_alg_values_supported\":[\"ES256\"]}}", "vc.credential_build_config.sd_jwt.visible_claims": "iss,iat,nbf,exp,cnf,vct,status,roles,email", "vc.credential_build_config.decoys": "3", "vc.credential_build_config.signing_algorithm": "ES256" }, "protocolMappers": [ { "name": "vct-mapper-sc", "protocol": "oid4vc", "protocolMapper": "oid4vc-static-claim-mapper", "consentRequired": false, "config": { "claim.name": "vct", "staticValue": "ServiceCredential" } }, { "id": "0ad121f5-005b-4bb3-9716-00130dfc65d8", "name": "role-mapper-ssd", "protocol": "oid4vc", "protocolMapper": "oid4vc-target-role-mapper", "consentRequired": false, "config": { "claim.name": "roles", "clientId": "roles-dataspace" } }, { "id": "4c26385a-7504-4ddb-92a4-613d3ee928c4", "name": "context-mapper-ssd", "protocol": "oid4vc", "protocolMapper": "oid4vc-context-mapper", "consentRequired": false, "config": { "context": "https://www.w3.org/2018/credentials/v1" } }, { "id": "5111fa4b-77cb-40bd-b736-72acd4fdb013", "name": "firstName-mapper-ssd", "protocol": "oid4vc", "protocolMapper": "oid4vc-user-attribute-mapper", "consentRequired": false, "config": { "claim.name": "firstName", "userAttribute": "firstName" } }, { "id": "2fc0fc29-e8f7-4c84-b924-aaf78b27d855", "name": "email-mapper-ssd", "protocol": "oid4vc", "protocolMapper": "oid4vc-user-attribute-mapper", "consentRequired": false, "config": { "claim.name": "email", "userAttribute": "email" } }, { "id": "381dc890-0d6c-4980-bc29-153424606f45", "name": "lastName-mapper-ssd", "protocol": "oid4vc", "protocolMapper": "oid4vc-user-attribute-mapper", "consentRequired": false, "config": { "claim.name": "lastName", "userAttribute": "lastName" } } ] } ], "defaultDefaultClientScopes": [ "profile", "email", "roles", "web-origins", "acr" ], "defaultOptionalClientScopes": [ "offline_access" ], "browserSecurityHeaders": { "contentSecurityPolicyReportOnly": "", "xContentTypeOptions": "nosniff", "referrerPolicy": "no-referrer", "xRobotsTag": "none", "xFrameOptions": "SAMEORIGIN", "contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';", "strictTransportSecurity": "max-age=31536000; includeSubDomains" }, "smtpServer": {}, "eventsEnabled": false, "eventsListeners": [ "jboss-logging" ], "enabledEventTypes": [], "adminEventsEnabled": false, "adminEventsDetailsEnabled": false, "identityProviders": [], "identityProviderMappers": [], "components": { "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [ { "id": "7eb17ab5-8f1a-4a2f-8cb0-50dacd1b3207", "name": "Full Scope Disabled", "providerId": "scope", "subType": "anonymous", "subComponents": {}, "config": {} }, { "id": "ef28af20-8c3f-4f45-80d8-3afb30af3de3", "name": "Allowed Protocol Mapper Types", "providerId": "allowed-protocol-mappers", "subType": "authenticated", "subComponents": {}, "config": { "allowed-protocol-mapper-types": [ "saml-user-attribute-mapper", "oidc-full-name-mapper", "saml-user-property-mapper", "oidc-sha256-pairwise-sub-mapper", "oidc-usermodel-property-mapper", "saml-role-list-mapper", "oidc-address-mapper", "oidc-usermodel-attribute-mapper" ] } }, { "id": "714df1f6-60e4-4256-80b5-3797faf7eeb1", "name": "Allowed Registration Web Origins", "providerId": "registration-web-origins", "subType": "authenticated", "subComponents": {}, "config": {} }, { "id": "5af4434b-7f39-4f6b-895c-9c2bc6d77e98", "name": "Allowed Protocol Mapper Types", "providerId": "allowed-protocol-mappers", "subType": "anonymous", "subComponents": {}, "config": { "allowed-protocol-mapper-types": [ "oidc-usermodel-property-mapper", "oidc-sha256-pairwise-sub-mapper", "oidc-address-mapper", "saml-user-attribute-mapper", "oidc-full-name-mapper", "oidc-usermodel-attribute-mapper", "saml-user-property-mapper", "saml-role-list-mapper" ] } }, { "id": "b948505d-70b2-44c7-bfdb-396f973f4b4c", "name": "Consent Required", "providerId": "consent-required", "subType": "anonymous", "subComponents": {}, "config": {} }, { "id": "56f638e6-fe40-4553-80b4-4518b04b4bcd", "name": "Max Clients Limit", "providerId": "max-clients", "subType": "anonymous", "subComponents": {}, "config": { "max-clients": [ "200" ] } }, { "id": "5d8dd8f8-8028-428a-89dd-24a2d79aa054", "name": "Allowed Client Scopes", "providerId": "allowed-client-templates", "subType": "anonymous", "subComponents": {}, "config": { "allow-default-scopes": [ "true" ] } }, { "id": "e7e113ef-05a0-43bf-a165-b749556e705e", "name": "Trusted Hosts", "providerId": "trusted-hosts", "subType": "anonymous", "subComponents": {}, "config": { "host-sending-registration-request-must-match": [ "true" ], "client-uris-must-match": [ "true" ] } }, { "id": "e2bfbf35-922a-4034-b410-566104cde9b9", "name": "Allowed Client Scopes", "providerId": "allowed-client-templates", "subType": "authenticated", "subComponents": {}, "config": { "allow-default-scopes": [ "true" ] } }, { "id": "58d93068-eade-4c20-96db-d44be002b49b", "name": "Allowed Registration Web Origins", "providerId": "registration-web-origins", "subType": "anonymous", "subComponents": {}, "config": {} } ], "org.keycloak.keys.KeyProvider": [ { "name": "rsa-enc-key", "providerId": "rsa-enc-generated", "subComponents": {}, "config": { "priority": [ "0" ], "enabled": [ "true" ], "active": [ "true" ], "algorithm": [ "RSA-OAEP" ], "keySize": [ "2048" ] } }, { "name": "aes-enc-key", "providerId": "aes-generated", "subComponents": {}, "config": { "priority": [ "0" ], "enabled": [ "true" ], "active": [ "true" ] } }, { "id": "aa14650e-51fa-41a7-bdc3-8f9d685bfcf9", "name": "fallback-AES", "providerId": "aes-generated", "subComponents": {}, "config": { "priority": [ "-100" ] } }, { "id": "a4589e8f-7f82-4345-b2ea-ccc9d4366600", "name": "test-key", "providerId": "java-keystore", "subComponents": {}, "config": { "keystorePassword": [ "${STORE_PASS}" ], "keyAlias": [ "didPrivateKey" ], "kid": [ "did:web:DID_HOST" ], "keyPassword": [ "${STORE_PASS}" ], "active": [ "true" ], "keystore": [ "/did-material/cert.pfx" ], "priority": [ "0" ], "enabled": [ "true" ], "algorithm": [ "ES256" ] } }, { "id": "01f31344-946e-4d21-a035-9b59528cb1ce", "name": "fallback-HS512", "providerId": "hmac-generated", "subComponents": {}, "config": { "priority": [ "-100" ], "algorithm": [ "HS512" ] } }, { "id": "133af3d3-cc1b-4fe9-93ac-0a116b25e685", "name": "fallback-RS256", "providerId": "rsa-generated", "subComponents": {}, "config": { "priority": [ "-100" ], "algorithm": [ "RS256" ] } } ] }, "internationalizationEnabled": false, "authenticationFlows": [ { "id": "a41432c1-57b4-4e5a-a397-e71634c5596a", "alias": "Account verification options", "description": "Method with which to verify the existing account", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "idp-email-verification", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "ALTERNATIVE", "priority": 20, "autheticatorFlow": true, "flowAlias": "Verify Existing Account by Re-authentication", "userSetupAllowed": false } ] }, { "id": "bb8d0460-801e-46c4-94cd-848c86aaffd7", "alias": "Browser - Conditional 2FA", "description": "Flow to determine if any 2FA is required for the authentication", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorConfig": "browser-conditional-credential", "authenticator": "conditional-credential", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "auth-otp-form", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 30, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "webauthn-authenticator", "authenticatorFlow": false, "requirement": "DISABLED", "priority": 40, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "auth-recovery-authn-code-form", "authenticatorFlow": false, "requirement": "DISABLED", "priority": 50, "autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "f7030d37-7958-4aa7-9e19-6fdf6fab25f8", "alias": "Browser - Conditional Organization", "description": "Flow to determine if the organization identity-first login is to be used", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "organization", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "418bf82b-d7a0-4e09-b343-b57c0ea032c6", "alias": "Direct Grant - Conditional OTP", "description": "Flow to determine if the OTP is required for the authentication", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "direct-grant-validate-otp", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "fdaa05ee-c218-47aa-a023-e730f2b093dd", "alias": "First Broker Login - Conditional Organization", "description": "Flow to determine if the authenticator that adds organization members is to be used", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "idp-add-organization-member", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "ba0f85b0-0f02-42a3-b9ea-32ca603df620", "alias": "First broker login - Conditional 2FA", "description": "Flow to determine if any 2FA is required for the authentication", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorConfig": "first-broker-login-conditional-credential", "authenticator": "conditional-credential", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "auth-otp-form", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 30, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "webauthn-authenticator", "authenticatorFlow": false, "requirement": "DISABLED", "priority": 40, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "auth-recovery-authn-code-form", "authenticatorFlow": false, "requirement": "DISABLED", "priority": 50, "autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "9bc4f48a-5a83-468c-8035-05887ad16c73", "alias": "Handle Existing Account", "description": "Handle what to do if there is existing account with same email/username like authenticated identity provider", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "idp-confirm-link", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": true, "flowAlias": "Account verification options", "userSetupAllowed": false } ] }, { "id": "6a0c336f-dd3f-4285-8ae1-7b28a0252f9b", "alias": "Organization", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticatorFlow": true, "requirement": "CONDITIONAL", "priority": 10, "autheticatorFlow": true, "flowAlias": "Browser - Conditional Organization", "userSetupAllowed": false } ] }, { "id": "0bea984d-e169-4de1-85ce-50b75fef03bb", "alias": "Reset - Conditional OTP", "description": "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-user-configured", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "reset-otp", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "74ac8604-e348-4c16-9e27-bfd79178b694", "alias": "User creation or linking", "description": "Flow for the existing/non-existing user alternatives", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticatorConfig": "create unique user config", "authenticator": "idp-create-user-if-unique", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "ALTERNATIVE", "priority": 20, "autheticatorFlow": true, "flowAlias": "Handle Existing Account", "userSetupAllowed": false } ] }, { "id": "98c9de20-fa6c-42f2-87bb-f30308bed062", "alias": "Verify Existing Account by Re-authentication", "description": "Reauthentication of existing account", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "idp-username-password-form", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "CONDITIONAL", "priority": 20, "autheticatorFlow": true, "flowAlias": "First broker login - Conditional 2FA", "userSetupAllowed": false } ] }, { "id": "60a03c15-1f2c-42bd-9f0b-eecfe0182590", "alias": "browser", "description": "Browser based authentication", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "auth-cookie", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "auth-spnego", "authenticatorFlow": false, "requirement": "DISABLED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "identity-provider-redirector", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 25, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "ALTERNATIVE", "priority": 26, "autheticatorFlow": true, "flowAlias": "Organization", "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "ALTERNATIVE", "priority": 30, "autheticatorFlow": true, "flowAlias": "forms", "userSetupAllowed": false } ] }, { "id": "1350f014-46ad-4abc-9b9c-8c83e83c0940", "alias": "clients", "description": "Base authentication for clients", "providerId": "client-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "client-secret", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "client-jwt", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "client-secret-jwt", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 30, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "client-x509", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 40, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "federated-jwt", "authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 50, "autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "f46f36b4-46bd-4713-9265-d022f95a04e3", "alias": "direct grant", "description": "OpenID Connect Resource Owner Grant", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "direct-grant-validate-username", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "direct-grant-validate-password", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "CONDITIONAL", "priority": 30, "autheticatorFlow": true, "flowAlias": "Direct Grant - Conditional OTP", "userSetupAllowed": false } ] }, { "id": "26f20d3c-ccdc-4020-ba59-e00e2b55efd5", "alias": "docker auth", "description": "Used by Docker clients to authenticate against the IDP", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "docker-http-basic-authenticator", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "c902ba2d-f56c-4135-ba60-e0aabeb46137", "alias": "first broker login", "description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticatorConfig": "review profile config", "authenticator": "idp-review-profile", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": true, "flowAlias": "User creation or linking", "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "CONDITIONAL", "priority": 60, "autheticatorFlow": true, "flowAlias": "First Broker Login - Conditional Organization", "userSetupAllowed": false } ] }, { "id": "d653945e-a0c7-4857-8321-be6749eaf43e", "alias": "forms", "description": "Username, password, otp and other auth forms.", "providerId": "basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "auth-username-password-form", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "CONDITIONAL", "priority": 20, "autheticatorFlow": true, "flowAlias": "Browser - Conditional 2FA", "userSetupAllowed": false } ] }, { "id": "3cdc900b-7e17-42ce-80b6-6027f9a02fd7", "alias": "registration", "description": "Registration flow", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "registration-page-form", "authenticatorFlow": true, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": true, "flowAlias": "registration form", "userSetupAllowed": false } ] }, { "id": "8c606298-0bce-4211-8e63-fb0a32bd3fad", "alias": "registration form", "description": "Registration form", "providerId": "form-flow", "topLevel": false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "registration-user-creation", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "registration-password-action", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 50, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "registration-recaptcha-action", "authenticatorFlow": false, "requirement": "DISABLED", "priority": 60, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "registration-terms-and-conditions", "authenticatorFlow": false, "requirement": "DISABLED", "priority": 70, "autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "419e984d-0216-4050-9228-2bfcc3746e3a", "alias": "reset credentials", "description": "Reset credentials for a user if they forgot their password or something", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "reset-credentials-choose-user", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "reset-credential-email", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator": "reset-password", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 30, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement": "CONDITIONAL", "priority": 40, "autheticatorFlow": true, "flowAlias": "Reset - Conditional OTP", "userSetupAllowed": false } ] }, { "id": "f494a87d-91b0-4fb3-8033-4c59b05e53ff", "alias": "saml ecp", "description": "SAML ECP Profile Authentication Flow", "providerId": "basic-flow", "topLevel": true, "builtIn": true, "authenticationExecutions": [ { "authenticator": "http-basic-authenticator", "authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed": false } ] } ], "authenticatorConfig": [ { "id": "34570805-033a-44be-aa17-1ae36432763e", "alias": "browser-conditional-credential", "config": { "credentials": "webauthn-passwordless" } }, { "id": "36e4bfd8-5cfb-4794-a8c2-8e15bf9f1f06", "alias": "create unique user config", "config": { "require.password.update.after.registration": "false" } }, { "id": "d7f547cc-90e7-4ac7-b9df-e8cfe409b453", "alias": "first-broker-login-conditional-credential", "config": { "credentials": "webauthn-passwordless" } }, { "id": "cdd72426-21c6-4924-954f-33fc4630d904", "alias": "review profile config", "config": { "update.profile.on.first.login": "missing" } } ], "requiredActions": [ { "alias": "TERMS_AND_CONDITIONS", "name": "Terms and Conditions", "providerId": "TERMS_AND_CONDITIONS", "enabled": false, "defaultAction": false, "priority": 20, "config": {} }, { "alias": "UPDATE_PROFILE", "name": "Update Profile", "providerId": "UPDATE_PROFILE", "enabled": true, "defaultAction": false, "priority": 40, "config": {} }, { "alias": "VERIFY_EMAIL", "name": "Verify Email", "providerId": "VERIFY_EMAIL", "enabled": true, "defaultAction": false, "priority": 50, "config": {} }, { "alias": "CONFIGURE_TOTP", "name": "Configure OTP", "providerId": "CONFIGURE_TOTP", "enabled": true, "defaultAction": false, "priority": 54, "config": {} }, { "alias": "UPDATE_PASSWORD", "name": "Update Password", "providerId": "UPDATE_PASSWORD", "enabled": true, "defaultAction": false, "priority": 57, "config": {} }, { "alias": "delete_account", "name": "Delete Account", "providerId": "delete_account", "enabled": false, "defaultAction": false, "priority": 60, "config": {} }, { "alias": "UPDATE_EMAIL", "name": "Update Email", "providerId": "UPDATE_EMAIL", "enabled": false, "defaultAction": false, "priority": 70, "config": {} }, { "alias": "webauthn-register", "name": "Webauthn Register", "providerId": "webauthn-register", "enabled": true, "defaultAction": false, "priority": 80, "config": {} }, { "alias": "webauthn-register-passwordless", "name": "Webauthn Register Passwordless", "providerId": "webauthn-register-passwordless", "enabled": true, "defaultAction": false, "priority": 90, "config": {} }, { "alias": "VERIFY_PROFILE", "name": "Verify Profile", "providerId": "VERIFY_PROFILE", "enabled": true, "defaultAction": false, "priority": 100, "config": {} }, { "alias": "delete_credential", "name": "Delete Credential", "providerId": "delete_credential", "enabled": true, "defaultAction": false, "priority": 110, "config": {} }, { "alias": "idp_link", "name": "Linking Identity Provider", "providerId": "idp_link", "enabled": true, "defaultAction": false, "priority": 120, "config": {} }, { "alias": "CONFIGURE_RECOVERY_AUTHN_CODES", "name": "Recovery Authentication Codes", "providerId": "CONFIGURE_RECOVERY_AUTHN_CODES", "enabled": true, "defaultAction": false, "priority": 130, "config": {} }, { "alias": "verifiable_credential_offer", "name": "Verifiable Credential Offer", "providerId": "verifiable_credential_offer", "enabled": true, "defaultAction": false, "priority": 130, "config": {} }, { "alias": "update_user_locale", "name": "Update User Locale", "providerId": "update_user_locale", "enabled": true, "defaultAction": false, "priority": 1000, "config": {} } ], "browserFlow": "browser", "registrationFlow": "registration", "directGrantFlow": "direct grant", "resetCredentialsFlow": "reset credentials", "clientAuthenticationFlow": "clients", "dockerAuthenticationFlow": "docker auth", "firstBrokerLoginFlow": "first broker login", "attributes": { "cibaBackchannelTokenDeliveryMode": "poll", "cibaExpiresIn": "120", "cibaAuthRequestedUserHint": "login_hint", "oauth2DeviceCodeLifespan": "600", "oauth2DevicePollingInterval": "5", "parRequestUriLifespan": "60", "issuerDid": "did:web:DID_HOST", "frontendUrl": "https://KEYCLOAK_HOST", "cibaInterval": "5", "realmReusableOtpCode": "false" }, "keycloakVersion": "26.6.2", "userManagedAccessAllowed": false, "organizationsEnabled": false, "verifiableCredentialsEnabled": true, "adminPermissionsEnabled": false, "scimApiEnabled": false, "clientProfiles": { "profiles": [] }, "clientPolicies": { "policies": [] } }