{ "id": "4b320718-5de4-4d5a-ba43-9a7e6e6b186c", "realm": "master",

"displayName": "Keycloak", "displayNameHtml": "

Keycloak
", "notBefore": 0, "defaultSignatureAlgorithm": "RS256",
"revokeRefreshToken": false, "refreshTokenMaxReuse": 0,
"accessTokenLifespan": 60, "accessTokenLifespanForImplicitFlow": 900,
"ssoSessionIdleTimeout": 1800, "ssoSessionMaxLifespan": 36000,
"ssoSessionIdleTimeoutRememberMe": 0,
"ssoSessionMaxLifespanRememberMe": 0, "offlineSessionIdleTimeout":
2592000, "offlineSessionMaxLifespanEnabled": false,
"offlineSessionMaxLifespan": 5184000, "clientSessionIdleTimeout": 0,
"clientSessionMaxLifespan": 0, "clientOfflineSessionIdleTimeout": 0,
"clientOfflineSessionMaxLifespan": 0, "accessCodeLifespan": 60,
"accessCodeLifespanUserAction": 300, "accessCodeLifespanLogin": 1800,
"actionTokenGeneratedByAdminLifespan": 43200,
"actionTokenGeneratedByUserLifespan": 300, "oauth2DeviceCodeLifespan":
600, "oauth2DevicePollingInterval": 5, "enabled": true, "sslRequired":
"external", "registrationAllowed": false, "registrationEmailAsUsername":
false, "rememberMe": false, "verifyEmail": false, "loginWithEmailAllowed":
true, "duplicateEmailsAllowed": false, "resetPasswordAllowed": false,
"editUsernameAllowed": false, "bruteForceProtected": false,
"permanentLockout": false, "maxTemporaryLockouts": 0,
"bruteForceStrategy": "MULTIPLE", "maxFailureWaitSeconds": 900,
"minimumQuickLoginWaitSeconds": 60, "waitIncrementSeconds": 60,
"quickLoginCheckMilliSeconds": 1000, "maxDeltaTimeSeconds": 43200,
"failureFactor": 30, "defaultRole": { "id": "68aacdc1-8e56-4b2a-b36d-
fe725165308e", "name": "default-roles-master", "description":
"${role_default-roles}", "composite": true, "clientRole": false, "containerId":
"4b320718-5de4-4d5a-ba43-9a7e6e6b186c" }, "requiredCredentials":
[ "password" ], "otpPolicyType": "totp", "otpPolicyAlgorithm": "HmacSHA1",
"otpPolicyInitialCounter": 0, "otpPolicyDigits": 6,
"otpPolicyLookAheadWindow": 1, "otpPolicyPeriod": 30,
"otpPolicyCodeReusable": false, "otpSupportedApplications":
[ "totpAppFreeOTPName", "totpAppGoogleName",
"totpAppMicrosoftAuthenticatorName" ], "localizationTexts": {},
"webAuthnPolicyRpEntityName": "keycloak",
"webAuthnPolicySignatureAlgorithms": [ "ES256", "RS256" ],
"webAuthnPolicyRpId": "",
"webAuthnPolicyAttestationConveyancePreference": "not specified",
"webAuthnPolicyAuthenticatorAttachment": "not specified",
"webAuthnPolicyRequireResidentKey": "not specified",
"webAuthnPolicyUserVerificationRequirement": "not specified",
"webAuthnPolicyCreateTimeout": 0,
"webAuthnPolicyAvoidSameAuthenticatorRegister": false,
"webAuthnPolicyAcceptableAaguids": [], "webAuthnPolicyExtraOrigins": [],
"webAuthnPolicyPasswordlessRpEntityName": "keycloak",
"webAuthnPolicyPasswordlessSignatureAlgorithms": [ "ES256", "RS256" ],
"webAuthnPolicyPasswordlessRpId": "",
"webAuthnPolicyPasswordlessAttestationConveyancePreference": "not
specified", "webAuthnPolicyPasswordlessAuthenticatorAttachment": "not
specified", "webAuthnPolicyPasswordlessRequireResidentKey": "not
specified", "webAuthnPolicyPasswordlessUserVerificationRequirement": "not
specified", "webAuthnPolicyPasswordlessCreateTimeout": 0,
"webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister": false,
"webAuthnPolicyPasswordlessAcceptableAaguids": [],
"webAuthnPolicyPasswordlessExtraOrigins": [], "scopeMappings":
[ { "clientScope": "offline_access", "roles": [ "offline_access" ] } ],
"clientScopes": [ { "id": "ce810762-b2d5-4a4f-82d3-a4cf35ac8821", "name":
"web-origins", "description": "OpenID Connect scope for add allowed web
origins to the access token", "protocol": "openid-connect", "attributes":
{ "include.in.token.scope": "false", "consent.screen.text": "",
"display.on.consent.screen": "false" }, "protocolMappers": [ { "id":
"2533408c-92be-43fe-a7b4-bd2565b9e193", "name": "allowed web origins",
"protocol": "openid-connect", "protocolMapper": "oidc-allowed-origins-
mapper", "consentRequired": false, "config": { "introspection.token.claim":
"true", "access.token.claim": "true" } } ] }, { "id": "6926dd41-5ba5-447c-
8cb2-34a689984ee7", "name": "role_list", "description": "SAML role list",
"protocol": "saml", "attributes": { "consent.screen.text":
"${samlRoleListScopeConsentText}", "display.on.consent.screen": "true" },
"protocolMappers": [ { "id": "ab53e9da-3e00-496e-aa8c-64b1bf813ebe",
"name": "role list", "protocol": "saml", "protocolMapper": "saml-role-list-
mapper", "consentRequired": false, "config": { "single": "false",
"attribute.nameformat": "Basic", "attribute.name": "Role" } } ] }, { "id":
"c364c7f4-7da7-4c0a-bc8e-bcf54459f310", "name": "address", "description":
"OpenID Connect built-in scope: address", "protocol": "openid-connect",
"attributes": { "include.in.token.scope": "true", "consent.screen.text":
"${addressScopeConsentText}", "display.on.consent.screen": "true" },
"protocolMappers": [ { "id": "b47ac5ab-4821-469a-a889-17d17dcc3306",
"name": "address", "protocol": "openid-connect", "protocolMapper": "oidc-
address-mapper", "consentRequired": false, "config":
{ "user.attribute.formatted": "formatted", "user.attribute.country": "country",
"introspection.token.claim": "true", "user.attribute.postal_code":
"postal_code", "userinfo.token.claim": "true", "user.attribute.street": "street",
"id.token.claim": "true", "user.attribute.region": "region",
"access.token.claim": "true", "user.attribute.locality": "locality" } } ] }, { "id":
"ee951b56-ad62-46e8-85fa-1faf72b79177", "name": "roles", "description":
"OpenID Connect scope for add user roles to the access token", "protocol":
"openid-connect", "attributes": { "include.in.token.scope": "false",
"consent.screen.text": "${rolesScopeConsentText}",
"display.on.consent.screen": "true" }, "protocolMappers": [ { "id": "48f9d5d3-
2d9b-4e03-893d-a43433004f3c", "name": "realm roles", "protocol": "openid-
connect", "protocolMapper": "oidc-usermodel-realm-role-mapper",
"consentRequired": false, "config": { "user.attribute": "foo",
"introspection.token.claim": "true", "access.token.claim": "true",
"claim.name": "realm_access.roles", "jsonType.label": "String", "multivalued":
"true" } }, { "id": "54394d68-8854-40e2-a5a1-44cde7918aaf", "name": "client
roles", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-
client-role-mapper", "consentRequired": false, "config": { "user.attribute":
"foo", "introspection.token.claim": "true", "access.token.claim": "true",
"claim.name": "resource_access.${client_id}.roles", "jsonType.label":
"String", "multivalued": "true" } }, { "id": "b3784477-8772-431d-8f05-
3bbd30a1814e", "name": "audience resolve", "protocol": "openid-connect",
"protocolMapper": "oidc-audience-resolve-mapper", "consentRequired": false,
"config": { "introspection.token.claim": "true", "access.token.claim":
"true" } } ] }, { "id": "e331e1f7-e02d-47b8-9691-c2cf4d76ba09", "name":
"offline_access", "description": "OpenID Connect built-in scope:
offline_access", "protocol": "openid-connect", "attributes":
{ "consent.screen.text": "${offlineAccessScopeConsentText}",
"display.on.consent.screen": "true" } }, { "id": "328fd324-e481-4ef0-b3dc-
29bd730866f7", "name": "saml_organization", "description": "Organization
Membership", "protocol": "saml", "attributes": { "display.on.consent.screen":
"false" }, "protocolMappers": [ { "id": "a1464386-fe1d-4263-92d3-
ab299bfc736e", "name": "organization", "protocol": "saml",
"protocolMapper": "saml-organization-membership-mapper",
"consentRequired": false, "config": {} } ] }, { "id": "622c1f06-7971-4852-
9538-a6ef44e20601", "name": "microprofile-jwt", "description":
"Microprofile - JWT built-in scope", "protocol": "openid-connect",
"attributes": { "include.in.token.scope": "true", "display.on.consent.screen":
"false" }, "protocolMappers": [ { "id": "6f90cc96-94cb-43aa-95c7-
2fdae011b0e3", "name": "upn", "protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired":
false, "config": { "introspection.token.claim": "true", "userinfo.token.claim":
"true", "user.attribute": "username", "id.token.claim": "true",
"access.token.claim": "true", "claim.name": "upn", "jsonType.label":
"String" } }, { "id": "6dac42ed-4222-4d18-bccc-357abb2f88c7", "name":
"groups", "protocol": "openid-connect", "protocolMapper": "oidc-usermodel-
realm-role-mapper", "consentRequired": false, "config":
{ "introspection.token.claim": "true", "multivalued": "true", "user.attribute":
"foo", "id.token.claim": "true", "access.token.claim": "true", "claim.name":
"groups", "jsonType.label": "String" } } ] }, { "id": "5271067f-7b9b-4b2c-
87e6-4b561c95b913", "name": "basic", "description": "OpenID Connect scope
for add all basic claims to the token", "protocol": "openid-connect",
"attributes": { "include.in.token.scope": "false", "display.on.consent.screen":
"false" }, "protocolMappers": [ { "id": "dbb9383c-9c25-457f-b1f1-
801ed9ebbd12", "name": "auth_time", "protocol": "openid-connect",
"protocolMapper": "oidc-usersessionmodel-note-mapper", "consentRequired":
false, "config": { "user.session.note": "AUTH_TIME", "id.token.claim":
"true", "introspection.token.claim": "true", "access.token.claim": "true",
"claim.name": "auth_time", "jsonType.label": "long" } }, { "id": "037aca71-
8a83-4100-a7d3-43698ebefeee", "name": "sub", "protocol": "openid-connect",
"protocolMapper": "oidc-sub-mapper", "consentRequired": false, "config":
{ "introspection.token.claim": "true", "access.token.claim": "true" } } ] },
{ "id": "b6a4ecf4-e2e3-45ed-b5d8-b839ee82c6bc", "name": "profile",
"description": "OpenID Connect built-in scope: profile", "protocol": "openid-
connect", "attributes": { "include.in.token.scope": "true",
"consent.screen.text": "${profileScopeConsentText}",
"display.on.consent.screen": "true" }, "protocolMappers": [ { "id": "0556c214-
d551-411f-9a66-a043983f7e00", "name": "gender", "protocol": "openid-
connect", "protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false, "config": { "introspection.token.claim": "true",
"userinfo.token.claim": "true", "user.attribute": "gender", "id.token.claim":
"true", "access.token.claim": "true", "claim.name": "gender", "jsonType.label":
"String" } }, { "id": "306c69a4-255f-48a8-a133-8575d72c3843", "name": "full
name", "protocol": "openid-connect", "protocolMapper": "oidc-full-name-
mapper", "consentRequired": false, "config": { "id.token.claim": "true",
"introspection.token.claim": "true", "access.token.claim": "true",
"userinfo.token.claim": "true" } }, { "id": "668c721e-8fa0-4c21-b315-
7cf2c83b5af0", "name": "locale", "protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired":
false, "config": { "introspection.token.claim": "true", "userinfo.token.claim":
"true", "user.attribute": "locale", "id.token.claim": "true", "access.token.claim":
"true", "claim.name": "locale", "jsonType.label": "String" } }, { "id":
"d83c8244-4ce3-4271-afc2-647d967c9d2f", "name": "picture", "protocol":
"openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false, "config": { "introspection.token.claim": "true",
"userinfo.token.claim": "true", "user.attribute": "picture", "id.token.claim":
"true", "access.token.claim": "true", "claim.name": "picture", "jsonType.label":
"String" } }, { "id": "2b4c05f2-7de5-47cf-a0f4-87dcdb939543", "name":
"family name", "protocol": "openid-connect", "protocolMapper": "oidc-
usermodel-attribute-mapper", "consentRequired": false, "config":
{ "introspection.token.claim": "true", "userinfo.token.claim": "true",
"user.attribute": "lastName", "id.token.claim": "true", "access.token.claim":
"true", "claim.name": "family_name", "jsonType.label": "String" } }, { "id":
"d9d33d3f-b7c8-4a93-835b-97ee620a7605", "name": "zoneinfo", "protocol":
"openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false, "config": { "introspection.token.claim": "true",
"userinfo.token.claim": "true", "user.attribute": "zoneinfo", "id.token.claim":
"true", "access.token.claim": "true", "claim.name": "zoneinfo",
"jsonType.label": "String" } }, { "id": "d63936c6-b75f-4c25-8def-
13040dc514bf", "name": "website", "protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired":
false, "config": { "introspection.token.claim": "true", "userinfo.token.claim":
"true", "user.attribute": "website", "id.token.claim": "true",
"access.token.claim": "true", "claim.name": "website", "jsonType.label":
"String" } }, { "id": "c7fe9778-261d-46c6-a085-2e14ee062c65", "name":
"birthdate", "protocol": "openid-connect", "protocolMapper": "oidc-
usermodel-attribute-mapper", "consentRequired": false, "config":
{ "introspection.token.claim": "true", "userinfo.token.claim": "true",
"user.attribute": "birthdate", "id.token.claim": "true", "access.token.claim":
"true", "claim.name": "birthdate", "jsonType.label": "String" } }, { "id":
"4c126e8d-8ee1-4473-9977-b6fc0785f7f6", "name": "username", "protocol":
"openid-connect", "protocolMapper": "oidc-usermodel-attribute-mapper",
"consentRequired": false, "config": { "introspection.token.claim": "true",
"userinfo.token.claim": "true", "user.attribute": "username", "id.token.claim":
"true", "access.token.claim": "true", "claim.name": "preferred_username",
"jsonType.label": "String" } }, { "id": "d0924365-d421-45c0-a910-
94fe20a81188", "name": "given name", "protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired":
false, "config": { "introspection.token.claim": "true", "userinfo.token.claim":
"true", "user.attribute": "firstName", "id.token.claim": "true",
"access.token.claim": "true", "claim.name": "given_name", "jsonType.label":
"String" } }, { "id": "111c43ec-c9e5-40f9-9a18-5c1e2f9e01fb", "name":
"nickname", "protocol": "openid-connect", "protocolMapper": "oidc-
usermodel-attribute-mapper", "consentRequired": false, "config":
{ "introspection.token.claim": "true", "userinfo.token.claim": "true",
"user.attribute": "nickname", "id.token.claim": "true", "access.token.claim":
"true", "claim.name": "nickname", "jsonType.label": "String" } }, { "id":
"2d5503c9-18dc-4ace-b246-600d4c69b385", "name": "middle name",
"protocol": "openid-connect", "protocolMapper": "oidc-usermodel-attribute-
mapper", "consentRequired": false, "config": { "introspection.token.claim":
"true", "userinfo.token.claim": "true", "user.attribute": "middleName",
"id.token.claim": "true", "access.token.claim": "true", "claim.name":
"middle_name", "jsonType.label": "String" } }, { "id": "28b9350e-d389-4821-
850c-dfd6fc7534f3", "name": "profile", "protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired":
false, "config": { "introspection.token.claim": "true", "userinfo.token.claim":
"true", "user.attribute": "profile", "id.token.claim": "true",
"access.token.claim": "true", "claim.name": "profile", "jsonType.label":
"String" } }, { "id": "1fb96ffa-6666-4a33-906a-78698b9bd523", "name":
"updated at", "protocol": "openid-connect", "protocolMapper": "oidc-
usermodel-attribute-mapper", "consentRequired": false, "config":
{ "introspection.token.claim": "true", "userinfo.token.claim": "true",
"user.attribute": "updatedAt", "id.token.claim": "true", "access.token.claim":
"true", "claim.name": "updated_at", "jsonType.label": "long" } } ] }, { "id":
"e9de8e33-b31b-478b-b672-e9489dfb495f", "name": "email", "description":
"OpenID Connect built-in scope: email", "protocol": "openid-connect",
"attributes": { "include.in.token.scope": "true", "consent.screen.text":
"${emailScopeConsentText}", "display.on.consent.screen": "true" },
"protocolMappers": [ { "id": "1896a66b-bdcf-4e65-82e2-69a6ec5c59cc",
"name": "email", "protocol": "openid-connect", "protocolMapper": "oidc-
usermodel-attribute-mapper", "consentRequired": false, "config":
{ "introspection.token.claim": "true", "userinfo.token.claim": "true",
"user.attribute": "email", "id.token.claim": "true", "access.token.claim": "true",
"claim.name": "email", "jsonType.label": "String" } }, { "id": "94ecde42-a4ae-
444d-916a-5174ba13ce84", "name": "email verified", "protocol": "openid-
connect", "protocolMapper": "oidc-usermodel-property-mapper",
"consentRequired": false, "config": { "introspection.token.claim": "true",
"userinfo.token.claim": "true", "user.attribute": "emailVerified",
"id.token.claim": "true", "access.token.claim": "true", "claim.name":
"email_verified", "jsonType.label": "boolean" } } ] }, { "id": "7e8d8379-e27c-
4dce-ab79-c9decd5de867", "name": "acr", "description": "OpenID Connect
scope for add acr (authentication context class reference) to the token",
"protocol": "openid-connect", "attributes": { "include.in.token.scope": "false",
"display.on.consent.screen": "false" }, "protocolMappers": [ { "id": "22feca96-
3fc6-480e-9795-36fa9f104c70", "name": "acr loa level", "protocol": "openid-
connect", "protocolMapper": "oidc-acr-mapper", "consentRequired": false,
"config": { "id.token.claim": "true", "introspection.token.claim": "true",
"access.token.claim": "true" } } ] }, { "id": "f73f45bc-828b-4b45-8e77-
9806d06deb21", "name": "phone", "description": "OpenID Connect built-in
scope: phone", "protocol": "openid-connect", "attributes":
{ "include.in.token.scope": "true", "consent.screen.text":
"${phoneScopeConsentText}", "display.on.consent.screen": "true" },
"protocolMappers": [ { "id": "e91bbf47-1970-4c2f-b0c9-faf8f8dd643a",
"name": "phone number verified", "protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired":
false, "config": { "introspection.token.claim": "true", "userinfo.token.claim":
"true", "user.attribute": "phoneNumberVerified", "id.token.claim": "true",
"access.token.claim": "true", "claim.name": "phone_number_verified",
"jsonType.label": "boolean" } }, { "id": "1894610a-5bd6-4103-914e-
49c61a070a01", "name": "phone number", "protocol": "openid-connect",
"protocolMapper": "oidc-usermodel-attribute-mapper", "consentRequired":
false, "config": { "introspection.token.claim": "true", "userinfo.token.claim":
"true", "user.attribute": "phoneNumber", "id.token.claim": "true",
"access.token.claim": "true", "claim.name": "phone_number",
"jsonType.label": "String" } } ] }, { "id": "b55599d3-3c2c-45fa-b160-
d915b92fe29f", "name": "organization", "description": "Additional claims
about the organization a subject belongs to", "protocol": "openid-connect",
"attributes": { "include.in.token.scope": "true", "consent.screen.text":
"${organizationScopeConsentText}", "display.on.consent.screen": "true" },
"protocolMappers": [ { "id": "113c0a4d-0314-4d6f-b384-702688032b6c",
"name": "organization", "protocol": "openid-connect", "protocolMapper":
"oidc-organization-membership-mapper", "consentRequired": false, "config":
{ "id.token.claim": "true", "introspection.token.claim": "true",
"access.token.claim": "true", "claim.name": "organization", "jsonType.label":
"String", "multivalued": "true" } } ] } ], "defaultDefaultClientScopes":
[ "role_list", "saml_organization", "profile", "email", "roles", "web-origins",
"acr", "basic" ], "defaultOptionalClientScopes": [ "offline_access", "address",
"phone", "microprofile-jwt", "organization" ], "browserSecurityHeaders":
{ "contentSecurityPolicyReportOnly": "", "xContentTypeOptions": "nosniff",
"referrerPolicy": "no-referrer", "xRobotsTag": "none", "xFrameOptions":
"SAMEORIGIN", "contentSecurityPolicy": "frame-src 'self'; frame-ancestors
'self'; object-src 'none';", "xXSSProtection": "1; mode=block",
"strictTransportSecurity": "max-age=31536000; includeSubDomains" },
"smtpServer": {}, "eventsEnabled": false, "eventsListeners": [ "jboss-
logging" ], "enabledEventTypes": [], "adminEventsEnabled": false,
"adminEventsDetailsEnabled": false, "identityProviders": [],
"identityProviderMappers": [], "components":
{ "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy":
[ { "id": "5da48645-bfe7-467b-adf8-50a06389e96d", "name": "Allowed
Protocol Mapper Types", "providerId": "allowed-protocol-mappers",
"subType": "anonymous", "subComponents": {}, "config": { "allowed-
protocol-mapper-types": [ "oidc-usermodel-attribute-mapper", "saml-user-
property-mapper", "oidc-sha256-pairwise-sub-mapper", "saml-user-attribute-
mapper", "saml-role-list-mapper", "oidc-full-name-mapper", "oidc-usermodel-
property-mapper", "oidc-address-mapper" ] } }, { "id": "a6fc0c69-9d5f-4684-
a53f-9f3ca2975344", "name": "Max Clients Limit", "providerId": "max-
clients", "subType": "anonymous", "subComponents": {}, "config": { "max-
clients": [ "200" ] } }, { "id": "a4ea1635-26c5-4ab0-ab0d-148d7ecf49a2",
"name": "Allowed Client Scopes", "providerId": "allowed-client-templates",
"subType": "anonymous", "subComponents": {}, "config": { "allow-default-
scopes": [ "true" ] } }, { "id": "130334ec-188c-4e49-a168-54bdbae5b1cd",
"name": "Allowed Client Scopes", "providerId": "allowed-client-templates",
"subType": "authenticated", "subComponents": {}, "config": { "allow-default-
scopes": [ "true" ] } }, { "id": "0093ebff-3617-49c2-b1b3-2caef0aab1da",
"name": "Allowed Protocol Mapper Types", "providerId": "allowed-protocol-
mappers", "subType": "authenticated", "subComponents": {}, "config":
{ "allowed-protocol-mapper-types": [ "oidc-usermodel-attribute-mapper",
"oidc-sha256-pairwise-sub-mapper", "saml-user-property-mapper", "saml-
role-list-mapper", "oidc-usermodel-property-mapper", "saml-user-attribute-
mapper", "oidc-full-name-mapper", "oidc-address-mapper" ] } }, { "id":
"027071d2-8527-4d2d-b697-e13a03fc454c", "name": "Full Scope Disabled",
"providerId": "scope", "subType": "anonymous", "subComponents": {},
"config": {} }, { "id": "3d4e8aa6-8ef3-4e00-a03e-f931af2ed3f1", "name":
"Consent Required", "providerId": "consent-required", "subType":
"anonymous", "subComponents": {}, "config": {} }, { "id": "9ffe6ebf-aaa1-
4721-86dd-71f3f0101bfd", "name": "Trusted Hosts", "providerId": "trusted-
hosts", "subType": "anonymous", "subComponents": {}, "config": { "host-
sending-registration-request-must-match": [ "true" ], "client-uris-must-match":
[ "true" ] } } ], "org.keycloak.userprofile.UserProfileProvider": [ { "id":
"d2354d2f-4697-4cdc-acf2-0e65c56af90e", "providerId": "declarative-user-
profile", "subComponents": {}, "config": { "kc.user.profile.config":
[ "{\"attributes\":[{\"name\":\"username\",\"displayName\":\"${username}\",
\"validations\":{\"length\":{\"min\":3,\"max\":255},\"username-prohibited-
characters\":{},\"up-username-not-idn-homograph\":{}},\"permissions\":
{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued
\":false},{\"name\":\"email\",\"displayName\":\"${email}\",\"validations\":
{\"email\":{},\"length\":{\"max\":255}},\"permissions\":{\"view\":[\"admin\",
\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued\":false},{\"name\":
\"firstName\",\"displayName\":\"${firstName}\",\"validations\":{\"length\":
{\"max\":255},\"person-name-prohibited-characters\":{}},\"permissions\":
{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user\"]},\"multivalued
\":false},{\"name\":\"lastName\",\"displayName\":\"${lastName}\",
\"validations\":{\"length\":{\"max\":255},\"person-name-prohibited-characters
\":{}},\"permissions\":{\"view\":[\"admin\",\"user\"],\"edit\":[\"admin\",\"user
\"]},\"multivalued\":false}],\"groups\":[{\"name\":\"user-metadata\",
\"displayHeader\":\"User metadata\",\"displayDescription\":\"Attributes, which
refer to user metadata\"}]}" ] } } ], "org.keycloak.keys.KeyProvider": [ { "id":
"cc119ec0-9c7c-455c-8434-38fb1142d505", "name": "aes-generated",
"providerId": "aes-generated", "subComponents": {}, "config": { "priority":
[ "100" ] } }, { "id": "211ba3af-82b9-498c-833d-915bd77b99b0", "name":
"rsa-enc-generated", "providerId": "rsa-enc-generated", "subComponents": {},
"config": { "priority": [ "100" ], "algorithm": [ "RSA-OAEP" ] } }, { "id":
"a9cf1526-395d-4298-881b-d10688564538", "name": "hmac-generated-
hs512", "providerId": "hmac-generated", "subComponents": {}, "config":
{ "priority": [ "100" ], "algorithm": [ "HS512" ] } }, { "id": "72aec96e-385b-
4f0f-93d1-5a330c3b45a9", "name": "rsa-generated", "providerId": "rsa-
generated", "subComponents": {}, "config": { "priority": [ "100" ] } } ] },
"internationalizationEnabled": false, "supportedLocales": [],
"authenticationFlows": [ { "id": "3da65c60-f876-4ccf-bc61-47ff8b110550",
"alias": "Account verification options", "description": "Method with which to
verity the existing account", "providerId": "basic-flow", "topLevel": false,
"builtIn": true, "authenticationExecutions": [ { "authenticator": "idp-email-
verification", "authenticatorFlow": false, "requirement": "ALTERNATIVE",
"priority": 10, "autheticatorFlow": false, "userSetupAllowed": false },
{ "authenticatorFlow": true, "requirement": "ALTERNATIVE", "priority": 20,
"autheticatorFlow": true, "flowAlias": "Verify Existing Account by Re-
authentication", "userSetupAllowed": false } ] }, { "id": "d3668318-ef6e-
4776-a725-e28b2b5f6768", "alias": "Browser - Conditional OTP",
"description": "Flow to determine if the OTP is required for the
authentication", "providerId": "basic-flow", "topLevel": false, "builtIn": true,
"authenticationExecutions": [ { "authenticator": "conditional-user-configured",
"authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10,
"autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator":
"auth-otp-form", "authenticatorFlow": false, "requirement": "REQUIRED",
"priority": 20, "autheticatorFlow": false, "userSetupAllowed": false } ] },
{ "id": "3b716724-e0d3-4a2b-84e6-deafac4b3022", "alias": "Direct Grant -
Conditional OTP", "description": "Flow to determine if the OTP is required for
the authentication", "providerId": "basic-flow", "topLevel": false, "builtIn":
true, "authenticationExecutions": [ { "authenticator": "conditional-user-
configured", "authenticatorFlow": false, "requirement": "REQUIRED",
"priority": 10, "autheticatorFlow": false, "userSetupAllowed": false },
{ "authenticator": "direct-grant-validate-otp", "authenticatorFlow": false,
"requirement": "REQUIRED", "priority": 20, "autheticatorFlow": false,
"userSetupAllowed": false } ] }, { "id": "26bffbc7-14e7-47dc-8bb9-
4a8fbbfa9605", "alias": "First broker login - Conditional OTP", "description":
"Flow to determine if the OTP is required for the authentication",
"providerId": "basic-flow", "topLevel": false, "builtIn": true,
"authenticationExecutions": [ { "authenticator": "conditional-user-configured",
"authenticatorFlow": false, "requirement": "REQUIRED", "priority": 10,
"autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator":
"auth-otp-form", "authenticatorFlow": false, "requirement": "REQUIRED",
"priority": 20, "autheticatorFlow": false, "userSetupAllowed": false } ] },
{ "id": "08ccbad9-6e42-4fb0-a2d9-e251665c510a", "alias": "Handle Existing
Account", "description": "Handle what to do if there is existing account with
same email/username like authenticated identity provider", "providerId":
"basic-flow", "topLevel": false, "builtIn": true, "authenticationExecutions":
[ { "authenticator": "idp-confirm-link", "authenticatorFlow": false,
"requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false,
"userSetupAllowed": false }, { "authenticatorFlow": true, "requirement":
"REQUIRED", "priority": 20, "autheticatorFlow": true, "flowAlias": "Account
verification options", "userSetupAllowed": false } ] }, { "id": "b080026d-
cc55-4365-9ae7-7f2a0d0ae849", "alias": "Reset - Conditional OTP",
"description": "Flow to determine if the OTP should be reset or not. Set to
REQUIRED to force.", "providerId": "basic-flow", "topLevel": false,
"builtIn": true, "authenticationExecutions": [ { "authenticator": "conditional-
user-configured", "authenticatorFlow": false, "requirement": "REQUIRED",
"priority": 10, "autheticatorFlow": false, "userSetupAllowed": false },
{ "authenticator": "reset-otp", "authenticatorFlow": false, "requirement":
"REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed":
false } ] }, { "id": "da8a4996-7fe4-4a23-baa7-2c722032e286", "alias": "User
creation or linking", "description": "Flow for the existing/non-existing user
alternatives", "providerId": "basic-flow", "topLevel": false, "builtIn": true,
"authenticationExecutions": [ { "authenticatorConfig": "create unique user
config", "authenticator": "idp-create-user-if-unique", "authenticatorFlow":
false, "requirement": "ALTERNATIVE", "priority": 10, "autheticatorFlow":
false, "userSetupAllowed": false }, { "authenticatorFlow": true, "requirement":
"ALTERNATIVE", "priority": 20, "autheticatorFlow": true, "flowAlias":
"Handle Existing Account", "userSetupAllowed": false } ] }, { "id":
"6684f585-a1e3-40f4-8ab1-e96ff5e2d6e4", "alias": "Verify Existing Account
by Re-authentication", "description": "Reauthentication of existing account",
"providerId": "basic-flow", "topLevel": false, "builtIn": true,
"authenticationExecutions": [ { "authenticator": "idp-username-password-
form", "authenticatorFlow": false, "requirement": "REQUIRED", "priority":
10, "autheticatorFlow": false, "userSetupAllowed": false },
{ "authenticatorFlow": true, "requirement": "CONDITIONAL", "priority": 20,
"autheticatorFlow": true, "flowAlias": "First broker login - Conditional OTP",
"userSetupAllowed": false } ] }, { "id": "1e6f28a7-d172-407e-8dce-
f6c2eb1ae108", "alias": "browser", "description": "Browser based
authentication", "providerId": "basic-flow", "topLevel": true, "builtIn": true,
"authenticationExecutions": [ { "authenticator": "auth-cookie",
"authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 10,
"autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator":
"auth-spnego", "authenticatorFlow": false, "requirement": "DISABLED",
"priority": 20, "autheticatorFlow": false, "userSetupAllowed": false },
{ "authenticator": "identity-provider-redirector", "authenticatorFlow": false,
"requirement": "ALTERNATIVE", "priority": 25, "autheticatorFlow": false,
"userSetupAllowed": false }, { "authenticatorFlow": true, "requirement":
"ALTERNATIVE", "priority": 30, "autheticatorFlow": true, "flowAlias":
"forms", "userSetupAllowed": false } ] }, { "id": "fdbc381b-fefb-4e42-b55d-
d2a6e1cb91c3", "alias": "clients", "description": "Base authentication for
clients", "providerId": "client-flow", "topLevel": true, "builtIn": true,
"authenticationExecutions": [ { "authenticator": "client-secret",
"authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 10,
"autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator":
"client-jwt", "authenticatorFlow": false, "requirement": "ALTERNATIVE",
"priority": 20, "autheticatorFlow": false, "userSetupAllowed": false },
{ "authenticator": "client-secret-jwt", "authenticatorFlow": false,
"requirement": "ALTERNATIVE", "priority": 30, "autheticatorFlow": false,
"userSetupAllowed": false }, { "authenticator": "client-x509",
"authenticatorFlow": false, "requirement": "ALTERNATIVE", "priority": 40,
"autheticatorFlow": false, "userSetupAllowed": false } ] }, { "id": "0c973680-
c559-46d4-a931-38d9b21d2b47", "alias": "direct grant", "description":
"OpenID Connect Resource Owner Grant", "providerId": "basic-flow",
"topLevel": true, "builtIn": true, "authenticationExecutions":
[ { "authenticator": "direct-grant-validate-username", "authenticatorFlow":
false, "requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false,
"userSetupAllowed": false }, { "authenticator": "direct-grant-validate-
password", "authenticatorFlow": false, "requirement": "REQUIRED",
"priority": 20, "autheticatorFlow": false, "userSetupAllowed": false },
{ "authenticatorFlow": true, "requirement": "CONDITIONAL", "priority": 30,
"autheticatorFlow": true, "flowAlias": "Direct Grant - Conditional OTP",
"userSetupAllowed": false } ] }, { "id": "dd8050fb-2993-4717-9a46-
cab64be37447", "alias": "docker auth", "description": "Used by Docker clients
to authenticate against the IDP", "providerId": "basic-flow", "topLevel": true,
"builtIn": true, "authenticationExecutions": [ { "authenticator": "docker-http-
basic-authenticator", "authenticatorFlow": false, "requirement":
"REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed":
false } ] }, { "id": "37a33b98-2f81-4d16-9992-b7d16c7543ec", "alias": "first
broker login", "description": "Actions taken after first broker login with
identity provider account, which is not yet linked to any Keycloak account",
"providerId": "basic-flow", "topLevel": true, "builtIn": true,
"authenticationExecutions": [ { "authenticatorConfig": "review profile config",
"authenticator": "idp-review-profile", "authenticatorFlow": false,
"requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false,
"userSetupAllowed": false }, { "authenticatorFlow": true, "requirement":
"REQUIRED", "priority": 20, "autheticatorFlow": true, "flowAlias": "User
creation or linking", "userSetupAllowed": false } ] }, { "id": "9487754c-e8ff-
4965-9e0c-286817c62c63", "alias": "forms", "description": "Username,
password, otp and other auth forms.", "providerId": "basic-flow", "topLevel":
false, "builtIn": true, "authenticationExecutions": [ { "authenticator": "auth-
username-password-form", "authenticatorFlow": false, "requirement":
"REQUIRED", "priority": 10, "autheticatorFlow": false, "userSetupAllowed":
false }, { "authenticatorFlow": true, "requirement": "CONDITIONAL",
"priority": 20, "autheticatorFlow": true, "flowAlias": "Browser - Conditional
OTP", "userSetupAllowed": false } ] }, { "id": "967d33f2-ce2a-4b03-8492-
234bef10c5f5", "alias": "registration", "description": "Registration flow",
"providerId": "basic-flow", "topLevel": true, "builtIn": true,
"authenticationExecutions": [ { "authenticator": "registration-page-form",
"authenticatorFlow": true, "requirement": "REQUIRED", "priority": 10,
"autheticatorFlow": true, "flowAlias": "registration form",
"userSetupAllowed": false } ] }, { "id": "0050dc20-4740-4507-8fec-
3ce88dfa0193", "alias": "registration form", "description": "Registration
form", "providerId": "form-flow", "topLevel": false, "builtIn": true,
"authenticationExecutions": [ { "authenticator": "registration-user-creation",
"authenticatorFlow": false, "requirement": "REQUIRED", "priority": 20,
"autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator":
"registration-password-action", "authenticatorFlow": false, "requirement":
"REQUIRED", "priority": 50, "autheticatorFlow": false, "userSetupAllowed":
false }, { "authenticator": "registration-recaptcha-action", "authenticatorFlow":
false, "requirement": "DISABLED", "priority": 60, "autheticatorFlow": false,
"userSetupAllowed": false }, { "authenticator": "registration-terms-and-
conditions", "authenticatorFlow": false, "requirement": "DISABLED",
"priority": 70, "autheticatorFlow": false, "userSetupAllowed": false } ] },
{ "id": "96633323-52fd-4f8f-9d5b-abb224a2888f", "alias": "reset credentials",
"description": "Reset credentials for a user if they forgot their password or
something", "providerId": "basic-flow", "topLevel": true, "builtIn": true,
"authenticationExecutions": [ { "authenticator": "reset-credentials-choose-
user", "authenticatorFlow": false, "requirement": "REQUIRED", "priority":
10, "autheticatorFlow": false, "userSetupAllowed": false }, { "authenticator":
"reset-credential-email", "authenticatorFlow": false, "requirement":
"REQUIRED", "priority": 20, "autheticatorFlow": false, "userSetupAllowed":
false }, { "authenticator": "reset-password", "authenticatorFlow": false,
"requirement": "REQUIRED", "priority": 30, "autheticatorFlow": false,
"userSetupAllowed": false }, { "authenticatorFlow": true, "requirement":
"CONDITIONAL", "priority": 40, "autheticatorFlow": true, "flowAlias":
"Reset - Conditional OTP", "userSetupAllowed": false } ] }, { "id":
"6a23296a-63c3-43f6-b668-d87cd1b7a0f5", "alias": "saml ecp", "description":
"SAML ECP Profile Authentication Flow", "providerId": "basic-flow",
"topLevel": true, "builtIn": true, "authenticationExecutions":
[ { "authenticator": "http-basic-authenticator", "authenticatorFlow": false,
"requirement": "REQUIRED", "priority": 10, "autheticatorFlow": false,
"userSetupAllowed": false } ] } ], "authenticatorConfig": [ { "id": "072e60fe-
13a4-4e9a-a882-e8571876aa5e", "alias": "create unique user config", "config":
{ "require.password.update.after.registration": "false" } }, { "id": "a1134385-
db33-4921-b5d7-753690ea8f4a", "alias": "review profile config", "config":
{ "update.profile.on.first.login": "missing" } } ], "requiredActions": [ { "alias":
"CONFIGURE_TOTP", "name": "Configure OTP", "providerId":
"CONFIGURE_TOTP", "enabled": true, "defaultAction": false, "priority": 10,
"config": {} }, { "alias": "TERMS_AND_CONDITIONS", "name": "Terms
and Conditions", "providerId": "TERMS_AND_CONDITIONS", "enabled":
false, "defaultAction": false, "priority": 20, "config": {} }, { "alias":
"UPDATE_PASSWORD", "name": "Update Password", "providerId":
"UPDATE_PASSWORD", "enabled": true, "defaultAction": false, "priority":
30, "config": {} }, { "alias": "UPDATE_PROFILE", "name": "Update Profile",
"providerId": "UPDATE_PROFILE", "enabled": true, "defaultAction": false,
"priority": 40, "config": {} }, { "alias": "VERIFY_EMAIL", "name": "Verify
Email", "providerId": "VERIFY_EMAIL", "enabled": true, "defaultAction":
false, "priority": 50, "config": {} }, { "alias": "delete_account", "name":
"Delete Account", "providerId": "delete_account", "enabled": false,
"defaultAction": false, "priority": 60, "config": {} }, { "alias": "webauthn-
register", "name": "Webauthn Register", "providerId": "webauthn-register",
"enabled": true, "defaultAction": false, "priority": 70, "config": {} }, { "alias":
"webauthn-register-passwordless", "name": "Webauthn Register
Passwordless", "providerId": "webauthn-register-passwordless", "enabled":
true, "defaultAction": false, "priority": 80, "config": {} }, { "alias":
"VERIFY_PROFILE", "name": "Verify Profile", "providerId":
"VERIFY_PROFILE", "enabled": true, "defaultAction": false, "priority": 90,
"config": {} }, { "alias": "delete_credential", "name": "Delete Credential",
"providerId": "delete_credential", "enabled": true, "defaultAction": false,
"priority": 100, "config": {} }, { "alias": "update_user_locale", "name":
"Update User Locale", "providerId": "update_user_locale", "enabled": true,
"defaultAction": false, "priority": 1000, "config": {} } ], "browserFlow":
"browser", "registrationFlow": "registration", "directGrantFlow": "direct
grant", "resetCredentialsFlow": "reset credentials",
"clientAuthenticationFlow": "clients", "dockerAuthenticationFlow": "docker
auth", "firstBrokerLoginFlow": "first broker login", "attributes":
{ "cibaBackchannelTokenDeliveryMode": "poll", "cibaExpiresIn": "120",
"cibaAuthRequestedUserHint": "login_hint", "parRequestUriLifespan": "60",
"cibaInterval": "5", "realmReusableOtpCode": "false" }, "keycloakVersion":
"26.0.5", "userManagedAccessAllowed": false, "organizationsEnabled": false,
"clientProfiles": { "profiles": [] }, "clientPolicies": { "policies": [] } }