vnfs/DAaaS/deploy/00-init/keycloak/istio-realm.json

   1 {
   2     "id": "istio",
   3     "realm": "istio",
   4     "notBefore": 0,
   5     "revokeRefreshToken": false,
   6     "refreshTokenMaxReuse": 0,
   7     "accessTokenLifespan": 300,
   8     "accessTokenLifespanForImplicitFlow": 900,
   9     "ssoSessionIdleTimeout": 1800,
  10     "ssoSessionMaxLifespan": 36000,
  11     "offlineSessionIdleTimeout": 2592000,
  12     "offlineSessionMaxLifespanEnabled": false,
  13     "offlineSessionMaxLifespan": 5184000,
  14     "accessCodeLifespan": 60,
  15     "accessCodeLifespanUserAction": 300,
  16     "accessCodeLifespanLogin": 1800,
  17     "actionTokenGeneratedByAdminLifespan": 43200,
  18     "actionTokenGeneratedByUserLifespan": 300,
  19     "enabled": true,
  20     "sslRequired": "external",
  21     "registrationAllowed": false,
  22     "registrationEmailAsUsername": false,
  23     "rememberMe": false,
  24     "verifyEmail": false,
  25     "loginWithEmailAllowed": true,
  26     "duplicateEmailsAllowed": false,
  27     "resetPasswordAllowed": false,
  28     "editUsernameAllowed": false,
  29     "bruteForceProtected": false,
  30     "permanentLockout": false,
  31     "maxFailureWaitSeconds": 900,
  32     "minimumQuickLoginWaitSeconds": 60,
  33     "waitIncrementSeconds": 60,
  34     "quickLoginCheckMilliSeconds": 1000,
  35     "maxDeltaTimeSeconds": 43200,
  36     "failureFactor": 30,
  37     "roles": {
  38         "realm": [
  39             {
  40                 "id": "220670e5-85ab-4b1d-89e3-98880064e29f",
  41                 "name": "offline_access",
  42                 "description": "${role_offline-access}",
  43                 "composite": false,
  44                 "clientRole": false,
  45                 "containerId": "istio"
  46             },
  47             {
  48                 "id": "80b567e4-46f1-482a-8f77-01d958fa3f5f",
  49                 "name": "user",
  50                 "composite": false,
  51                 "clientRole": false,
  52                 "containerId": "istio"
  53             },
  54             {
  55                 "id": "c3be31a1-2d15-4adf-ac16-bc5b962874cf",
  56                 "name": "uma_authorization",
  57                 "description": "${role_uma_authorization}",
  58                 "composite": false,
  59                 "clientRole": false,
  60                 "containerId": "istio"
  61             }
  62         ],
  63         "client": {
  64             "realm-management": [
  65                 {
  66                     "id": "8e0d765e-2026-4acc-8e60-7d19bb163d18",
  67                     "name": "view-identity-providers",
  68                     "description": "${role_view-identity-providers}",
  69                     "composite": false,
  70                     "clientRole": true,
  71                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
  72                 },
  73                 {
  74                     "id": "06151631-874c-4b4c-b6bf-7bdb17aa92f3",
  75                     "name": "realm-admin",
  76                     "description": "${role_realm-admin}",
  77                     "composite": true,
  78                     "composites": {
  79                         "client": {
  80                             "realm-management": [
  81                                 "view-identity-providers",
  82                                 "manage-authorization",
  83                                 "view-authorization",
  84                                 "view-users",
  85                                 "query-groups",
  86                                 "impersonation",
  87                                 "view-events",
  88                                 "manage-realm",
  89                                 "manage-clients",
  90                                 "view-clients",
  91                                 "create-client",
  92                                 "manage-identity-providers",
  93                                 "manage-users",
  94                                 "manage-events",
  95                                 "query-realms",
  96                                 "query-users",
  97                                 "query-clients",
  98                                 "view-realm"
  99                             ]
 100                         }
 101                     },
 102                     "clientRole": true,
 103                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 104                 },
 105                 {
 106                     "id": "a1f1f3d7-85b9-4630-a8e9-c7c329412ab4",
 107                     "name": "manage-authorization",
 108                     "description": "${role_manage-authorization}",
 109                     "composite": false,
 110                     "clientRole": true,
 111                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 112                 },
 113                 {
 114                     "id": "2742e71b-86de-4d2f-a964-0d783b3513f0",
 115                     "name": "view-authorization",
 116                     "description": "${role_view-authorization}",
 117                     "composite": false,
 118                     "clientRole": true,
 119                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 120                 },
 121                 {
 122                     "id": "04c72794-a353-4f6e-a789-f65e74f137c6",
 123                     "name": "view-users",
 124                     "description": "${role_view-users}",
 125                     "composite": true,
 126                     "composites": {
 127                         "client": {
 128                             "realm-management": [
 129                                 "query-groups",
 130                                 "query-users"
 131                             ]
 132                         }
 133                     },
 134                     "clientRole": true,
 135                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 136                 },
 137                 {
 138                     "id": "405fd875-7a6f-43e0-b4c2-17c587aa7d3a",
 139                     "name": "query-groups",
 140                     "description": "${role_query-groups}",
 141                     "composite": false,
 142                     "clientRole": true,
 143                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 144                 },
 145                 {
 146                     "id": "b8ca521d-b36e-4ab6-9002-55a88853bfa1",
 147                     "name": "impersonation",
 148                     "description": "${role_impersonation}",
 149                     "composite": false,
 150                     "clientRole": true,
 151                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 152                 },
 153                 {
 154                     "id": "b2bbaf09-2258-439e-9cc5-a31b229257f7",
 155                     "name": "view-events",
 156                     "description": "${role_view-events}",
 157                     "composite": false,
 158                     "clientRole": true,
 159                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 160                 },
 161                 {
 162                     "id": "1b64abc3-e087-4caf-8892-e47c2330545c",
 163                     "name": "manage-realm",
 164                     "description": "${role_manage-realm}",
 165                     "composite": false,
 166                     "clientRole": true,
 167                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 168                 },
 169                 {
 170                     "id": "e2322bb3-5a9b-4f6a-965a-6c6962ded1f3",
 171                     "name": "manage-clients",
 172                     "description": "${role_manage-clients}",
 173                     "composite": false,
 174                     "clientRole": true,
 175                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 176                 },
 177                 {
 178                     "id": "26ba951e-730f-4176-8f6a-dfea46d4d780",
 179                     "name": "view-clients",
 180                     "description": "${role_view-clients}",
 181                     "composite": true,
 182                     "composites": {
 183                         "client": {
 184                             "realm-management": [
 185                                 "query-clients"
 186                             ]
 187                         }
 188                     },
 189                     "clientRole": true,
 190                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 191                 },
 192                 {
 193                     "id": "0dc8d82c-d8db-4d5f-bc81-f9e381fb488b",
 194                     "name": "create-client",
 195                     "description": "${role_create-client}",
 196                     "composite": false,
 197                     "clientRole": true,
 198                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 199                 },
 200                 {
 201                     "id": "f58c12dc-f06b-4b92-b41d-06abcc11d9dd",
 202                     "name": "manage-identity-providers",
 203                     "description": "${role_manage-identity-providers}",
 204                     "composite": false,
 205                     "clientRole": true,
 206                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 207                 },
 208                 {
 209                     "id": "91172277-28d1-4ac2-96dd-129422aae1e1",
 210                     "name": "manage-users",
 211                     "description": "${role_manage-users}",
 212                     "composite": false,
 213                     "clientRole": true,
 214                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 215                 },
 216                 {
 217                     "id": "f2283924-0ba6-42f2-9c2e-daa1e93cab5d",
 218                     "name": "manage-events",
 219                     "description": "${role_manage-events}",
 220                     "composite": false,
 221                     "clientRole": true,
 222                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 223                 },
 224                 {
 225                     "id": "64c3f416-c7c8-4bc1-9369-4bbd9c430f82",
 226                     "name": "query-realms",
 227                     "description": "${role_query-realms}",
 228                     "composite": false,
 229                     "clientRole": true,
 230                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 231                 },
 232                 {
 233                     "id": "7546c6c3-6768-439c-8362-7875c800315f",
 234                     "name": "query-users",
 235                     "description": "${role_query-users}",
 236                     "composite": false,
 237                     "clientRole": true,
 238                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 239                 },
 240                 {
 241                     "id": "290e8014-36f8-4f78-8c9b-810a054d25c9",
 242                     "name": "query-clients",
 243                     "description": "${role_query-clients}",
 244                     "composite": false,
 245                     "clientRole": true,
 246                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 247                 },
 248                 {
 249                     "id": "c9e02693-3aa7-415f-b54f-905596a63860",
 250                     "name": "view-realm",
 251                     "description": "${role_view-realm}",
 252                     "composite": false,
 253                     "clientRole": true,
 254                     "containerId": "23359cc5-f7be-4e46-9032-22888c729056"
 255                 }
 256             ],
 257             "security-admin-console": [],
 258             "customer-tutorial": [],
 259             "admin-cli": [],
 260             "broker": [
 261                 {
 262                     "id": "c15558e5-4812-4d14-825c-9b56c0fc4b43",
 263                     "name": "read-token",
 264                     "description": "${role_read-token}",
 265                     "composite": false,
 266                     "clientRole": true,
 267                     "containerId": "b60bdd17-7469-4eca-8740-043fec9df949"
 268                 }
 269             ],
 270             "account": [
 271                 {
 272                     "id": "b0e1a0bc-7fe0-43ed-81e3-57c9bd8b2466",
 273                     "name": "manage-account-links",
 274                     "description": "${role_manage-account-links}",
 275                     "composite": false,
 276                     "clientRole": true,
 277                     "containerId": "451d5f38-0a1e-4dcf-a25b-39ef9148a027"
 278                 },
 279                 {
 280                     "id": "6290f39b-8dc8-47b9-be67-0d42af794d90",
 281                     "name": "manage-account",
 282                     "description": "${role_manage-account}",
 283                     "composite": true,
 284                     "composites": {
 285                         "client": {
 286                             "account": [
 287                                 "manage-account-links"
 288                             ]
 289                         }
 290                     },
 291                     "clientRole": true,
 292                     "containerId": "451d5f38-0a1e-4dcf-a25b-39ef9148a027"
 293                 },
 294                 {
 295                     "id": "134efa5f-fb4a-437c-8aaa-ed98204822bf",
 296                     "name": "view-profile",
 297                     "description": "${role_view-profile}",
 298                     "composite": false,
 299                     "clientRole": true,
 300                     "containerId": "451d5f38-0a1e-4dcf-a25b-39ef9148a027"
 301                 }
 302             ]
 303         }
 304     },
 305     "groups": [],
 306     "defaultRoles": [
 307         "offline_access",
 308         "uma_authorization"
 309     ],
 310     "requiredCredentials": [
 311         "password"
 312     ],
 313     "otpPolicyType": "totp",
 314     "otpPolicyAlgorithm": "HmacSHA1",
 315     "otpPolicyInitialCounter": 0,
 316     "otpPolicyDigits": 6,
 317     "otpPolicyLookAheadWindow": 1,
 318     "otpPolicyPeriod": 30,
 319     "otpSupportedApplications": [
 320         "FreeOTP",
 321         "Google Authenticator"
 322     ],
 323     "scopeMappings": [
 324         {
 325             "clientScope": "offline_access",
 326             "roles": [
 327                 "offline_access"
 328             ]
 329         }
 330     ],
 331     "clients": [
 332         {
 333             "id": "290038f3-c4b5-4dea-a6fc-4c603edd94a3",
 334             "clientId": "admin-cli",
 335             "name": "${client_admin-cli}",
 336             "surrogateAuthRequired": false,
 337             "enabled": true,
 338             "clientAuthenticatorType": "client-secret",
 339             "secret": "**********",
 340             "redirectUris": [],
 341             "webOrigins": [],
 342             "notBefore": 0,
 343             "bearerOnly": false,
 344             "consentRequired": false,
 345             "standardFlowEnabled": false,
 346             "implicitFlowEnabled": false,
 347             "directAccessGrantsEnabled": true,
 348             "serviceAccountsEnabled": false,
 349             "publicClient": true,
 350             "frontchannelLogout": false,
 351             "protocol": "openid-connect",
 352             "attributes": {},
 353             "authenticationFlowBindingOverrides": {},
 354             "fullScopeAllowed": false,
 355             "nodeReRegistrationTimeout": 0,
 356             "defaultClientScopes": [
 357                 "role_list",
 358                 "profile",
 359                 "email"
 360             ],
 361             "optionalClientScopes": [
 362                 "address",
 363                 "phone",
 364                 "offline_access"
 365             ]
 366         },
 367         {
 368             "id": "b60bdd17-7469-4eca-8740-043fec9df949",
 369             "clientId": "broker",
 370             "name": "${client_broker}",
 371             "surrogateAuthRequired": false,
 372             "enabled": true,
 373             "clientAuthenticatorType": "client-secret",
 374             "secret": "**********",
 375             "redirectUris": [],
 376             "webOrigins": [],
 377             "notBefore": 0,
 378             "bearerOnly": false,
 379             "consentRequired": false,
 380             "standardFlowEnabled": true,
 381             "implicitFlowEnabled": false,
 382             "directAccessGrantsEnabled": false,
 383             "serviceAccountsEnabled": false,
 384             "publicClient": false,
 385             "frontchannelLogout": false,
 386             "protocol": "openid-connect",
 387             "attributes": {},
 388             "authenticationFlowBindingOverrides": {},
 389             "fullScopeAllowed": false,
 390             "nodeReRegistrationTimeout": 0,
 391             "defaultClientScopes": [
 392                 "role_list",
 393                 "profile",
 394                 "email"
 395             ],
 396             "optionalClientScopes": [
 397                 "address",
 398                 "phone",
 399                 "offline_access"
 400             ]
 401         },
 402         {
 403             "id": "23359cc5-f7be-4e46-9032-22888c729056",
 404             "clientId": "realm-management",
 405             "name": "${client_realm-management}",
 406             "surrogateAuthRequired": false,
 407             "enabled": true,
 408             "clientAuthenticatorType": "client-secret",
 409             "secret": "**********",
 410             "redirectUris": [],
 411             "webOrigins": [],
 412             "notBefore": 0,
 413             "bearerOnly": true,
 414             "consentRequired": false,
 415             "standardFlowEnabled": true,
 416             "implicitFlowEnabled": false,
 417             "directAccessGrantsEnabled": false,
 418             "serviceAccountsEnabled": false,
 419             "publicClient": false,
 420             "frontchannelLogout": false,
 421             "protocol": "openid-connect",
 422             "attributes": {},
 423             "authenticationFlowBindingOverrides": {},
 424             "fullScopeAllowed": false,
 425             "nodeReRegistrationTimeout": 0,
 426             "defaultClientScopes": [
 427                 "role_list",
 428                 "profile",
 429                 "email"
 430             ],
 431             "optionalClientScopes": [
 432                 "address",
 433                 "phone",
 434                 "offline_access"
 435             ]
 436         },
 437         {
 438             "id": "cb5bafdc-b739-4dde-8eb1-9094f64a784e",
 439             "clientId": "customer-tutorial",
 440             "surrogateAuthRequired": false,
 441             "enabled": true,
 442             "clientAuthenticatorType": "client-secret",
 443             "secret": "**********",
 444             "redirectUris": [],
 445             "webOrigins": [],
 446             "notBefore": 0,
 447             "bearerOnly": false,
 448             "consentRequired": false,
 449             "standardFlowEnabled": true,
 450             "implicitFlowEnabled": false,
 451             "directAccessGrantsEnabled": true,
 452             "serviceAccountsEnabled": false,
 453             "publicClient": true,
 454             "frontchannelLogout": false,
 455             "protocol": "openid-connect",
 456             "attributes": {},
 457             "authenticationFlowBindingOverrides": {},
 458             "fullScopeAllowed": true,
 459             "nodeReRegistrationTimeout": -1,
 460             "defaultClientScopes": [
 461                 "role_list",
 462                 "profile",
 463                 "email"
 464             ],
 465             "optionalClientScopes": [
 466                 "address",
 467                 "phone",
 468                 "offline_access"
 469             ]
 470         },
 471         {
 472             "id": "451d5f38-0a1e-4dcf-a25b-39ef9148a027",
 473             "clientId": "account",
 474             "name": "${client_account}",
 475             "baseUrl": "/auth/realms/istio/account",
 476             "surrogateAuthRequired": false,
 477             "enabled": true,
 478             "clientAuthenticatorType": "client-secret",
 479             "secret": "**********",
 480             "defaultRoles": [
 481                 "view-profile",
 482                 "manage-account"
 483             ],
 484             "redirectUris": [
 485                 "/auth/realms/istio/account/*"
 486             ],
 487             "webOrigins": [],
 488             "notBefore": 0,
 489             "bearerOnly": false,
 490             "consentRequired": false,
 491             "standardFlowEnabled": true,
 492             "implicitFlowEnabled": false,
 493             "directAccessGrantsEnabled": false,
 494             "serviceAccountsEnabled": false,
 495             "publicClient": false,
 496             "frontchannelLogout": false,
 497             "protocol": "openid-connect",
 498             "attributes": {},
 499             "authenticationFlowBindingOverrides": {},
 500             "fullScopeAllowed": false,
 501             "nodeReRegistrationTimeout": 0,
 502             "defaultClientScopes": [
 503                 "role_list",
 504                 "profile",
 505                 "email"
 506             ],
 507             "optionalClientScopes": [
 508                 "address",
 509                 "phone",
 510                 "offline_access"
 511             ]
 512         },
 513         {
 514             "id": "b0d3ef29-d76d-4dd4-b017-92c41410c174",
 515             "clientId": "security-admin-console",
 516             "name": "${client_security-admin-console}",
 517             "baseUrl": "/auth/admin/istio/console/index.html",
 518             "surrogateAuthRequired": false,
 519             "enabled": true,
 520             "clientAuthenticatorType": "client-secret",
 521             "secret": "**********",
 522             "redirectUris": [
 523                 "/auth/admin/istio/console/*"
 524             ],
 525             "webOrigins": [],
 526             "notBefore": 0,
 527             "bearerOnly": false,
 528             "consentRequired": false,
 529             "standardFlowEnabled": true,
 530             "implicitFlowEnabled": false,
 531             "directAccessGrantsEnabled": false,
 532             "serviceAccountsEnabled": false,
 533             "publicClient": true,
 534             "frontchannelLogout": false,
 535             "protocol": "openid-connect",
 536             "attributes": {},
 537             "authenticationFlowBindingOverrides": {},
 538             "fullScopeAllowed": false,
 539             "nodeReRegistrationTimeout": 0,
 540             "protocolMappers": [
 541                 {
 542                     "id": "75302c7e-aed4-40d3-9875-d7d3f652d470",
 543                     "name": "locale",
 544                     "protocol": "openid-connect",
 545                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 546                     "consentRequired": false,
 547                     "config": {
 548                         "userinfo.token.claim": "true",
 549                         "user.attribute": "locale",
 550                         "id.token.claim": "true",
 551                         "access.token.claim": "true",
 552                         "claim.name": "locale",
 553                         "jsonType.label": "String"
 554                     }
 555                 }
 556             ],
 557             "defaultClientScopes": [
 558                 "role_list",
 559                 "profile",
 560                 "email"
 561             ],
 562             "optionalClientScopes": [
 563                 "address",
 564                 "phone",
 565                 "offline_access"
 566             ]
 567         }
 568     ],
 569     "clientScopes": [
 570         {
 571             "id": "b221cc0e-2c78-4de7-bb2e-56e9349cb66d",
 572             "name": "address",
 573             "description": "OpenID Connect built-in scope: address",
 574             "protocol": "openid-connect",
 575             "attributes": {
 576                 "consent.screen.text": "${addressScopeConsentText}",
 577                 "display.on.consent.screen": "true"
 578             },
 579             "protocolMappers": [
 580                 {
 581                     "id": "db8987ff-c258-48c9-8c2e-4e1f2f283515",
 582                     "name": "address",
 583                     "protocol": "openid-connect",
 584                     "protocolMapper": "oidc-address-mapper",
 585                     "consentRequired": false,
 586                     "config": {
 587                         "user.attribute.formatted": "formatted",
 588                         "user.attribute.country": "country",
 589                         "user.attribute.postal_code": "postal_code",
 590                         "userinfo.token.claim": "true",
 591                         "user.attribute.street": "street",
 592                         "id.token.claim": "true",
 593                         "user.attribute.region": "region",
 594                         "access.token.claim": "true",
 595                         "user.attribute.locality": "locality"
 596                     }
 597                 }
 598             ]
 599         },
 600         {
 601             "id": "f430e3c4-48d8-4b48-824c-58fa950e3162",
 602             "name": "email",
 603             "description": "OpenID Connect built-in scope: email",
 604             "protocol": "openid-connect",
 605             "attributes": {
 606                 "consent.screen.text": "${emailScopeConsentText}",
 607                 "display.on.consent.screen": "true"
 608             },
 609             "protocolMappers": [
 610                 {
 611                     "id": "4d1852a7-0735-4ea7-9e2b-eb62775975e9",
 612                     "name": "email",
 613                     "protocol": "openid-connect",
 614                     "protocolMapper": "oidc-usermodel-property-mapper",
 615                     "consentRequired": false,
 616                     "config": {
 617                         "userinfo.token.claim": "true",
 618                         "user.attribute": "email",
 619                         "id.token.claim": "true",
 620                         "access.token.claim": "true",
 621                         "claim.name": "email",
 622                         "jsonType.label": "String"
 623                     }
 624                 },
 625                 {
 626                     "id": "2be3ecee-f2ba-45c6-9c03-ecbcd57ef892",
 627                     "name": "email verified",
 628                     "protocol": "openid-connect",
 629                     "protocolMapper": "oidc-usermodel-property-mapper",
 630                     "consentRequired": false,
 631                     "config": {
 632                         "userinfo.token.claim": "true",
 633                         "user.attribute": "emailVerified",
 634                         "id.token.claim": "true",
 635                         "access.token.claim": "true",
 636                         "claim.name": "email_verified",
 637                         "jsonType.label": "boolean"
 638                     }
 639                 }
 640             ]
 641         },
 642         {
 643             "id": "2dc9a314-a8a2-4158-ae13-44b524a106cf",
 644             "name": "offline_access",
 645             "description": "OpenID Connect built-in scope: offline_access",
 646             "protocol": "openid-connect",
 647             "attributes": {
 648                 "consent.screen.text": "${offlineAccessScopeConsentText}",
 649                 "display.on.consent.screen": "true"
 650             }
 651         },
 652         {
 653             "id": "264fb76f-3460-48df-95ce-2484c8e5b5c9",
 654             "name": "phone",
 655             "description": "OpenID Connect built-in scope: phone",
 656             "protocol": "openid-connect",
 657             "attributes": {
 658                 "consent.screen.text": "${phoneScopeConsentText}",
 659                 "display.on.consent.screen": "true"
 660             },
 661             "protocolMappers": [
 662                 {
 663                     "id": "e5cdd2ff-09d2-4c46-b3aa-1dbe269f9c84",
 664                     "name": "phone number",
 665                     "protocol": "openid-connect",
 666                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 667                     "consentRequired": false,
 668                     "config": {
 669                         "userinfo.token.claim": "true",
 670                         "user.attribute": "phoneNumber",
 671                         "id.token.claim": "true",
 672                         "access.token.claim": "true",
 673                         "claim.name": "phone_number",
 674                         "jsonType.label": "String"
 675                     }
 676                 },
 677                 {
 678                     "id": "d4577eed-c8ef-4472-ba67-701362d87075",
 679                     "name": "phone number verified",
 680                     "protocol": "openid-connect",
 681                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 682                     "consentRequired": false,
 683                     "config": {
 684                         "userinfo.token.claim": "true",
 685                         "user.attribute": "phoneNumberVerified",
 686                         "id.token.claim": "true",
 687                         "access.token.claim": "true",
 688                         "claim.name": "phone_number_verified",
 689                         "jsonType.label": "boolean"
 690                     }
 691                 }
 692             ]
 693         },
 694         {
 695             "id": "0710ab2c-f207-40a6-9b48-357b5e613ecc",
 696             "name": "profile",
 697             "description": "OpenID Connect built-in scope: profile",
 698             "protocol": "openid-connect",
 699             "attributes": {
 700                 "consent.screen.text": "${profileScopeConsentText}",
 701                 "display.on.consent.screen": "true"
 702             },
 703             "protocolMappers": [
 704                 {
 705                     "id": "446fa5ee-ec5f-4686-8ee3-1774894dfa67",
 706                     "name": "middle name",
 707                     "protocol": "openid-connect",
 708                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 709                     "consentRequired": false,
 710                     "config": {
 711                         "userinfo.token.claim": "true",
 712                         "user.attribute": "middleName",
 713                         "id.token.claim": "true",
 714                         "access.token.claim": "true",
 715                         "claim.name": "middle_name",
 716                         "jsonType.label": "String"
 717                     }
 718                 },
 719                 {
 720                     "id": "637d89c1-d01c-4342-aef2-cf998bc6debb",
 721                     "name": "locale",
 722                     "protocol": "openid-connect",
 723                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 724                     "consentRequired": false,
 725                     "config": {
 726                         "userinfo.token.claim": "true",
 727                         "user.attribute": "locale",
 728                         "id.token.claim": "true",
 729                         "access.token.claim": "true",
 730                         "claim.name": "locale",
 731                         "jsonType.label": "String"
 732                     }
 733                 },
 734                 {
 735                     "id": "7467cf05-040a-414d-9dce-7e12017b4877",
 736                     "name": "gender",
 737                     "protocol": "openid-connect",
 738                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 739                     "consentRequired": false,
 740                     "config": {
 741                         "userinfo.token.claim": "true",
 742                         "user.attribute": "gender",
 743                         "id.token.claim": "true",
 744                         "access.token.claim": "true",
 745                         "claim.name": "gender",
 746                         "jsonType.label": "String"
 747                     }
 748                 },
 749                 {
 750                     "id": "9788ba7e-ac2c-44d2-b359-38715a20cda0",
 751                     "name": "family name",
 752                     "protocol": "openid-connect",
 753                     "protocolMapper": "oidc-usermodel-property-mapper",
 754                     "consentRequired": false,
 755                     "config": {
 756                         "userinfo.token.claim": "true",
 757                         "user.attribute": "lastName",
 758                         "id.token.claim": "true",
 759                         "access.token.claim": "true",
 760                         "claim.name": "family_name",
 761                         "jsonType.label": "String"
 762                     }
 763                 },
 764                 {
 765                     "id": "2b825105-1344-49c1-b8e9-c650e5cf1466",
 766                     "name": "username",
 767                     "protocol": "openid-connect",
 768                     "protocolMapper": "oidc-usermodel-property-mapper",
 769                     "consentRequired": false,
 770                     "config": {
 771                         "userinfo.token.claim": "true",
 772                         "user.attribute": "username",
 773                         "id.token.claim": "true",
 774                         "access.token.claim": "true",
 775                         "claim.name": "preferred_username",
 776                         "jsonType.label": "String"
 777                     }
 778                 },
 779                 {
 780                     "id": "f087ddac-3587-42d0-9f0a-156eacc2c8a3",
 781                     "name": "nickname",
 782                     "protocol": "openid-connect",
 783                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 784                     "consentRequired": false,
 785                     "config": {
 786                         "userinfo.token.claim": "true",
 787                         "user.attribute": "nickname",
 788                         "id.token.claim": "true",
 789                         "access.token.claim": "true",
 790                         "claim.name": "nickname",
 791                         "jsonType.label": "String"
 792                     }
 793                 },
 794                 {
 795                     "id": "e1523265-8464-4894-85c3-e2e33318132e",
 796                     "name": "website",
 797                     "protocol": "openid-connect",
 798                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 799                     "consentRequired": false,
 800                     "config": {
 801                         "userinfo.token.claim": "true",
 802                         "user.attribute": "website",
 803                         "id.token.claim": "true",
 804                         "access.token.claim": "true",
 805                         "claim.name": "website",
 806                         "jsonType.label": "String"
 807                     }
 808                 },
 809                 {
 810                     "id": "abd30893-032c-4ff4-91ff-e0f487b52c7d",
 811                     "name": "full name",
 812                     "protocol": "openid-connect",
 813                     "protocolMapper": "oidc-full-name-mapper",
 814                     "consentRequired": false,
 815                     "config": {
 816                         "id.token.claim": "true",
 817                         "access.token.claim": "true",
 818                         "userinfo.token.claim": "true"
 819                     }
 820                 },
 821                 {
 822                     "id": "1df211c9-7681-4f26-94b4-ff1f13070299",
 823                     "name": "given name",
 824                     "protocol": "openid-connect",
 825                     "protocolMapper": "oidc-usermodel-property-mapper",
 826                     "consentRequired": false,
 827                     "config": {
 828                         "userinfo.token.claim": "true",
 829                         "user.attribute": "firstName",
 830                         "id.token.claim": "true",
 831                         "access.token.claim": "true",
 832                         "claim.name": "given_name",
 833                         "jsonType.label": "String"
 834                     }
 835                 },
 836                 {
 837                     "id": "e3916ca8-f442-4dce-8632-a44ca0d12f78",
 838                     "name": "picture",
 839                     "protocol": "openid-connect",
 840                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 841                     "consentRequired": false,
 842                     "config": {
 843                         "userinfo.token.claim": "true",
 844                         "user.attribute": "picture",
 845                         "id.token.claim": "true",
 846                         "access.token.claim": "true",
 847                         "claim.name": "picture",
 848                         "jsonType.label": "String"
 849                     }
 850                 },
 851                 {
 852                     "id": "8f7057ba-effb-4d2a-9343-5b6dceeb1df0",
 853                     "name": "updated at",
 854                     "protocol": "openid-connect",
 855                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 856                     "consentRequired": false,
 857                     "config": {
 858                         "userinfo.token.claim": "true",
 859                         "user.attribute": "updatedAt",
 860                         "id.token.claim": "true",
 861                         "access.token.claim": "true",
 862                         "claim.name": "updated_at",
 863                         "jsonType.label": "String"
 864                     }
 865                 },
 866                 {
 867                     "id": "ada6d8cf-2a80-488d-bff0-6713c88b7733",
 868                     "name": "profile",
 869                     "protocol": "openid-connect",
 870                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 871                     "consentRequired": false,
 872                     "config": {
 873                         "userinfo.token.claim": "true",
 874                         "user.attribute": "profile",
 875                         "id.token.claim": "true",
 876                         "access.token.claim": "true",
 877                         "claim.name": "profile",
 878                         "jsonType.label": "String"
 879                     }
 880                 },
 881                 {
 882                     "id": "167fb08e-6804-4452-b054-d494ce6e1aec",
 883                     "name": "zoneinfo",
 884                     "protocol": "openid-connect",
 885                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 886                     "consentRequired": false,
 887                     "config": {
 888                         "userinfo.token.claim": "true",
 889                         "user.attribute": "zoneinfo",
 890                         "id.token.claim": "true",
 891                         "access.token.claim": "true",
 892                         "claim.name": "zoneinfo",
 893                         "jsonType.label": "String"
 894                     }
 895                 },
 896                 {
 897                     "id": "e121d0f2-9af8-440a-a2ac-6ab7bed1959e",
 898                     "name": "birthdate",
 899                     "protocol": "openid-connect",
 900                     "protocolMapper": "oidc-usermodel-attribute-mapper",
 901                     "consentRequired": false,
 902                     "config": {
 903                         "userinfo.token.claim": "true",
 904                         "user.attribute": "birthdate",
 905                         "id.token.claim": "true",
 906                         "access.token.claim": "true",
 907                         "claim.name": "birthdate",
 908                         "jsonType.label": "String"
 909                     }
 910                 }
 911             ]
 912         },
 913         {
 914             "id": "67565c69-b19a-46d1-a4d2-e168cf8f1ff2",
 915             "name": "role_list",
 916             "description": "SAML role list",
 917             "protocol": "saml",
 918             "attributes": {
 919                 "consent.screen.text": "${samlRoleListScopeConsentText}",
 920                 "display.on.consent.screen": "true"
 921             },
 922             "protocolMappers": [
 923                 {
 924                     "id": "7b8b9b4f-2dc5-4991-88ba-363789ef4273",
 925                     "name": "role list",
 926                     "protocol": "saml",
 927                     "protocolMapper": "saml-role-list-mapper",
 928                     "consentRequired": false,
 929                     "config": {
 930                         "single": "false",
 931                         "attribute.nameformat": "Basic",
 932                         "attribute.name": "Role"
 933                     }
 934                 }
 935             ]
 936         }
 937     ],
 938     "defaultDefaultClientScopes": [
 939         "profile",
 940         "role_list",
 941         "email"
 942     ],
 943     "defaultOptionalClientScopes": [
 944         "phone",
 945         "offline_access",
 946         "address"
 947     ],
 948     "browserSecurityHeaders": {
 949         "contentSecurityPolicyReportOnly": "",
 950         "xContentTypeOptions": "nosniff",
 951         "xRobotsTag": "none",
 952         "xFrameOptions": "SAMEORIGIN",
 953         "xXSSProtection": "1; mode=block",
 954         "contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
 955         "strictTransportSecurity": "max-age=31536000; includeSubDomains"
 956     },
 957     "smtpServer": {},
 958     "eventsEnabled": false,
 959     "eventsListeners": [
 960         "jboss-logging"
 961     ],
 962     "enabledEventTypes": [],
 963     "adminEventsEnabled": false,
 964     "adminEventsDetailsEnabled": false,
 965     "components": {
 966         "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [
 967             {
 968                 "id": "a9df5509-a3e6-4298-b0dd-89283e43c98d",
 969                 "name": "Allowed Protocol Mapper Types",
 970                 "providerId": "allowed-protocol-mappers",
 971                 "subType": "authenticated",
 972                 "subComponents": {},
 973                 "config": {
 974                     "allowed-protocol-mapper-types": [
 975                         "oidc-usermodel-property-mapper",
 976                         "oidc-sha256-pairwise-sub-mapper",
 977                         "saml-role-list-mapper",
 978                         "oidc-usermodel-attribute-mapper",
 979                         "saml-user-property-mapper",
 980                         "oidc-full-name-mapper",
 981                         "oidc-address-mapper",
 982                         "saml-user-attribute-mapper"
 983                     ]
 984                 }
 985             },
 986             {
 987                 "id": "716cb8ab-1e27-4119-b78f-5356858dcb41",
 988                 "name": "Allowed Client Scopes",
 989                 "providerId": "allowed-client-templates",
 990                 "subType": "authenticated",
 991                 "subComponents": {},
 992                 "config": {
 993                     "allow-default-scopes": [
 994                         "true"
 995                     ]
 996                 }
 997             },
 998             {
 999                 "id": "ff4f5c61-6d74-49c4-add0-0cb5b403adbb",
1000                 "name": "Trusted Hosts",
1001                 "providerId": "trusted-hosts",
1002                 "subType": "anonymous",
1003                 "subComponents": {},
1004                 "config": {
1005                     "host-sending-registration-request-must-match": [
1006                         "true"
1007                     ],
1008                     "client-uris-must-match": [
1009                         "true"
1010                     ]
1011                 }
1012             },
1013             {
1014                 "id": "0eea0e90-fed9-4ad7-af33-7ee14f45417f",
1015                 "name": "Allowed Client Scopes",
1016                 "providerId": "allowed-client-templates",
1017                 "subType": "anonymous",
1018                 "subComponents": {},
1019                 "config": {
1020                     "allow-default-scopes": [
1021                         "true"
1022                     ]
1023                 }
1024             },
1025             {
1026                 "id": "f5f9be1b-4248-462e-987a-c49080dc89d5",
1027                 "name": "Max Clients Limit",
1028                 "providerId": "max-clients",
1029                 "subType": "anonymous",
1030                 "subComponents": {},
1031                 "config": {
1032                     "max-clients": [
1033                         "200"
1034                     ]
1035                 }
1036             },
1037             {
1038                 "id": "87b3d39d-27b5-45e9-8793-ca1e90633d5e",
1039                 "name": "Allowed Protocol Mapper Types",
1040                 "providerId": "allowed-protocol-mappers",
1041                 "subType": "anonymous",
1042                 "subComponents": {},
1043                 "config": {
1044                     "allowed-protocol-mapper-types": [
1045                         "saml-user-attribute-mapper",
1046                         "oidc-sha256-pairwise-sub-mapper",
1047                         "saml-user-property-mapper",
1048                         "saml-role-list-mapper",
1049                         "oidc-usermodel-attribute-mapper",
1050                         "oidc-full-name-mapper",
1051                         "oidc-usermodel-property-mapper",
1052                         "oidc-address-mapper"
1053                     ]
1054                 }
1055             },
1056             {
1057                 "id": "cf0206b9-af54-4b1d-842d-35709b9b2416",
1058                 "name": "Consent Required",
1059                 "providerId": "consent-required",
1060                 "subType": "anonymous",
1061                 "subComponents": {},
1062                 "config": {}
1063             },
1064             {
1065                 "id": "bf450bd0-16d3-48b1-8120-01ffeae36009",
1066                 "name": "Full Scope Disabled",
1067                 "providerId": "scope",
1068                 "subType": "anonymous",
1069                 "subComponents": {},
1070                 "config": {}
1071             }
1072         ],
1073         "org.keycloak.keys.KeyProvider": [
1074             {
1075                 "id": "abeebe85-48d0-4c48-906e-e01b21f414e6",
1076                 "name": "rsa-generated",
1077                 "providerId": "rsa-generated",
1078                 "subComponents": {},
1079                 "config": {
1080                     "priority": [
1081                         "100"
1082                     ]
1083                 }
1084             },
1085             {
1086                 "id": "8edb83d9-2775-4f31-a04e-b2b044df9d4a",
1087                 "name": "hmac-generated",
1088                 "providerId": "hmac-generated",
1089                 "subComponents": {},
1090                 "config": {
1091                     "priority": [
1092                         "100"
1093                     ],
1094                     "algorithm": [
1095                         "HS256"
1096                     ]
1097                 }
1098             },
1099             {
1100                 "id": "6c011a27-dae1-43f7-8928-a99c7d83fcca",
1101                 "name": "aes-generated",
1102                 "providerId": "aes-generated",
1103                 "subComponents": {},
1104                 "config": {
1105                     "priority": [
1106                         "100"
1107                     ]
1108                 }
1109             }
1110         ]
1111     },
1112     "internationalizationEnabled": false,
1113     "supportedLocales": [],
1114     "authenticationFlows": [
1115         {
1116             "id": "5fbafc16-55b5-41ad-9777-0295a824950c",
1117             "alias": "Handle Existing Account",
1118             "description": "Handle what to do if there is existing account with same email/username like authenticated identity provider",
1119             "providerId": "basic-flow",
1120             "topLevel": false,
1121             "builtIn": true,
1122             "authenticationExecutions": [
1123                 {
1124                     "authenticator": "idp-confirm-link",
1125                     "requirement": "REQUIRED",
1126                     "priority": 10,
1127                     "userSetupAllowed": false,
1128                     "autheticatorFlow": false
1129                 },
1130                 {
1131                     "authenticator": "idp-email-verification",
1132                     "requirement": "ALTERNATIVE",
1133                     "priority": 20,
1134                     "userSetupAllowed": false,
1135                     "autheticatorFlow": false
1136                 },
1137                 {
1138                     "requirement": "ALTERNATIVE",
1139                     "priority": 30,
1140                     "flowAlias": "Verify Existing Account by Re-authentication",
1141                     "userSetupAllowed": false,
1142                     "autheticatorFlow": true
1143                 }
1144             ]
1145         },
1146         {
1147             "id": "12b28e4f-478f-4abe-b24d-b0a7a3b69deb",
1148             "alias": "Verify Existing Account by Re-authentication",
1149             "description": "Reauthentication of existing account",
1150             "providerId": "basic-flow",
1151             "topLevel": false,
1152             "builtIn": true,
1153             "authenticationExecutions": [
1154                 {
1155                     "authenticator": "idp-username-password-form",
1156                     "requirement": "REQUIRED",
1157                     "priority": 10,
1158                     "userSetupAllowed": false,
1159                     "autheticatorFlow": false
1160                 },
1161                 {
1162                     "authenticator": "auth-otp-form",
1163                     "requirement": "OPTIONAL",
1164                     "priority": 20,
1165                     "userSetupAllowed": false,
1166                     "autheticatorFlow": false
1167                 }
1168             ]
1169         },
1170         {
1171             "id": "e97de13b-04ce-4f35-9ac6-0ab7f987ea33",
1172             "alias": "browser",
1173             "description": "browser based authentication",
1174             "providerId": "basic-flow",
1175             "topLevel": true,
1176             "builtIn": true,
1177             "authenticationExecutions": [
1178                 {
1179                     "authenticator": "auth-cookie",
1180                     "requirement": "ALTERNATIVE",
1181                     "priority": 10,
1182                     "userSetupAllowed": false,
1183                     "autheticatorFlow": false
1184                 },
1185                 {
1186                     "authenticator": "auth-spnego",
1187                     "requirement": "DISABLED",
1188                     "priority": 20,
1189                     "userSetupAllowed": false,
1190                     "autheticatorFlow": false
1191                 },
1192                 {
1193                     "authenticator": "identity-provider-redirector",
1194                     "requirement": "ALTERNATIVE",
1195                     "priority": 25,
1196                     "userSetupAllowed": false,
1197                     "autheticatorFlow": false
1198                 },
1199                 {
1200                     "requirement": "ALTERNATIVE",
1201                     "priority": 30,
1202                     "flowAlias": "forms",
1203                     "userSetupAllowed": false,
1204                     "autheticatorFlow": true
1205                 }
1206             ]
1207         },
1208         {
1209             "id": "e6bb84d1-dd99-42bb-8d4e-76b76bb744ff",
1210             "alias": "clients",
1211             "description": "Base authentication for clients",
1212             "providerId": "client-flow",
1213             "topLevel": true,
1214             "builtIn": true,
1215             "authenticationExecutions": [
1216                 {
1217                     "authenticator": "client-secret",
1218                     "requirement": "ALTERNATIVE",
1219                     "priority": 10,
1220                     "userSetupAllowed": false,
1221                     "autheticatorFlow": false
1222                 },
1223                 {
1224                     "authenticator": "client-jwt",
1225                     "requirement": "ALTERNATIVE",
1226                     "priority": 20,
1227                     "userSetupAllowed": false,
1228                     "autheticatorFlow": false
1229                 },
1230                 {
1231                     "authenticator": "client-secret-jwt",
1232                     "requirement": "ALTERNATIVE",
1233                     "priority": 30,
1234                     "userSetupAllowed": false,
1235                     "autheticatorFlow": false
1236                 },
1237                 {
1238                     "authenticator": "client-x509",
1239                     "requirement": "ALTERNATIVE",
1240                     "priority": 40,
1241                     "userSetupAllowed": false,
1242                     "autheticatorFlow": false
1243                 }
1244             ]
1245         },
1246         {
1247             "id": "f4adf75a-f348-46f1-90aa-ba5ba332a9a8",
1248             "alias": "direct grant",
1249             "description": "OpenID Connect Resource Owner Grant",
1250             "providerId": "basic-flow",
1251             "topLevel": true,
1252             "builtIn": true,
1253             "authenticationExecutions": [
1254                 {
1255                     "authenticator": "direct-grant-validate-username",
1256                     "requirement": "REQUIRED",
1257                     "priority": 10,
1258                     "userSetupAllowed": false,
1259                     "autheticatorFlow": false
1260                 },
1261                 {
1262                     "authenticator": "direct-grant-validate-password",
1263                     "requirement": "REQUIRED",
1264                     "priority": 20,
1265                     "userSetupAllowed": false,
1266                     "autheticatorFlow": false
1267                 },
1268                 {
1269                     "authenticator": "direct-grant-validate-otp",
1270                     "requirement": "OPTIONAL",
1271                     "priority": 30,
1272                     "userSetupAllowed": false,
1273                     "autheticatorFlow": false
1274                 }
1275             ]
1276         },
1277         {
1278             "id": "117a5b7c-ed16-4a1a-a0a7-8fd1ff5429be",
1279             "alias": "docker auth",
1280             "description": "Used by Docker clients to authenticate against the IDP",
1281             "providerId": "basic-flow",
1282             "topLevel": true,
1283             "builtIn": true,
1284             "authenticationExecutions": [
1285                 {
1286                     "authenticator": "docker-http-basic-authenticator",
1287                     "requirement": "REQUIRED",
1288                     "priority": 10,
1289                     "userSetupAllowed": false,
1290                     "autheticatorFlow": false
1291                 }
1292             ]
1293         },
1294         {
1295             "id": "40991ed8-f811-4144-811c-3ef6934e33bb",
1296             "alias": "first broker login",
1297             "description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
1298             "providerId": "basic-flow",
1299             "topLevel": true,
1300             "builtIn": true,
1301             "authenticationExecutions": [
1302                 {
1303                     "authenticatorConfig": "review profile config",
1304                     "authenticator": "idp-review-profile",
1305                     "requirement": "REQUIRED",
1306                     "priority": 10,
1307                     "userSetupAllowed": false,
1308                     "autheticatorFlow": false
1309                 },
1310                 {
1311                     "authenticatorConfig": "create unique user config",
1312                     "authenticator": "idp-create-user-if-unique",
1313                     "requirement": "ALTERNATIVE",
1314                     "priority": 20,
1315                     "userSetupAllowed": false,
1316                     "autheticatorFlow": false
1317                 },
1318                 {
1319                     "requirement": "ALTERNATIVE",
1320                     "priority": 30,
1321                     "flowAlias": "Handle Existing Account",
1322                     "userSetupAllowed": false,
1323                     "autheticatorFlow": true
1324                 }
1325             ]
1326         },
1327         {
1328             "id": "63ea9d89-9e59-48e0-a672-be7485df2a6e",
1329             "alias": "forms",
1330             "description": "Username, password, otp and other auth forms.",
1331             "providerId": "basic-flow",
1332             "topLevel": false,
1333             "builtIn": true,
1334             "authenticationExecutions": [
1335                 {
1336                     "authenticator": "auth-username-password-form",
1337                     "requirement": "REQUIRED",
1338                     "priority": 10,
1339                     "userSetupAllowed": false,
1340                     "autheticatorFlow": false
1341                 },
1342                 {
1343                     "authenticator": "auth-otp-form",
1344                     "requirement": "OPTIONAL",
1345                     "priority": 20,
1346                     "userSetupAllowed": false,
1347                     "autheticatorFlow": false
1348                 }
1349             ]
1350         },
1351         {
1352             "id": "4d9a5e12-eba2-4fdd-9089-d2ec5cf38b51",
1353             "alias": "http challenge",
1354             "description": "An authentication flow based on challenge-response HTTP Authentication Schemes",
1355             "providerId": "basic-flow",
1356             "topLevel": true,
1357             "builtIn": true,
1358             "authenticationExecutions": [
1359                 {
1360                     "authenticator": "no-cookie-redirect",
1361                     "requirement": "REQUIRED",
1362                     "priority": 10,
1363                     "userSetupAllowed": false,
1364                     "autheticatorFlow": false
1365                 },
1366                 {
1367                     "authenticator": "basic-auth",
1368                     "requirement": "REQUIRED",
1369                     "priority": 20,
1370                     "userSetupAllowed": false,
1371                     "autheticatorFlow": false
1372                 },
1373                 {
1374                     "authenticator": "basic-auth-otp",
1375                     "requirement": "DISABLED",
1376                     "priority": 30,
1377                     "userSetupAllowed": false,
1378                     "autheticatorFlow": false
1379                 },
1380                 {
1381                     "authenticator": "auth-spnego",
1382                     "requirement": "DISABLED",
1383                     "priority": 40,
1384                     "userSetupAllowed": false,
1385                     "autheticatorFlow": false
1386                 }
1387             ]
1388         },
1389         {
1390             "id": "f7bccba1-7e29-4471-8ffc-010a8f40cce3",
1391             "alias": "registration",
1392             "description": "registration flow",
1393             "providerId": "basic-flow",
1394             "topLevel": true,
1395             "builtIn": true,
1396             "authenticationExecutions": [
1397                 {
1398                     "authenticator": "registration-page-form",
1399                     "requirement": "REQUIRED",
1400                     "priority": 10,
1401                     "flowAlias": "registration form",
1402                     "userSetupAllowed": false,
1403                     "autheticatorFlow": true
1404                 }
1405             ]
1406         },
1407         {
1408             "id": "482106b4-12ad-4a0b-aa61-2c2586662cb4",
1409             "alias": "registration form",
1410             "description": "registration form",
1411             "providerId": "form-flow",
1412             "topLevel": false,
1413             "builtIn": true,
1414             "authenticationExecutions": [
1415                 {
1416                     "authenticator": "registration-user-creation",
1417                     "requirement": "REQUIRED",
1418                     "priority": 20,
1419                     "userSetupAllowed": false,
1420                     "autheticatorFlow": false
1421                 },
1422                 {
1423                     "authenticator": "registration-profile-action",
1424                     "requirement": "REQUIRED",
1425                     "priority": 40,
1426                     "userSetupAllowed": false,
1427                     "autheticatorFlow": false
1428                 },
1429                 {
1430                     "authenticator": "registration-password-action",
1431                     "requirement": "REQUIRED",
1432                     "priority": 50,
1433                     "userSetupAllowed": false,
1434                     "autheticatorFlow": false
1435                 },
1436                 {
1437                     "authenticator": "registration-recaptcha-action",
1438                     "requirement": "DISABLED",
1439                     "priority": 60,
1440                     "userSetupAllowed": false,
1441                     "autheticatorFlow": false
1442                 }
1443             ]
1444         },
1445         {
1446             "id": "54f5e4d1-fc88-4d74-bbc8-5356c0049534",
1447             "alias": "reset credentials",
1448             "description": "Reset credentials for a user if they forgot their password or something",
1449             "providerId": "basic-flow",
1450             "topLevel": true,
1451             "builtIn": true,
1452             "authenticationExecutions": [
1453                 {
1454                     "authenticator": "reset-credentials-choose-user",
1455                     "requirement": "REQUIRED",
1456                     "priority": 10,
1457                     "userSetupAllowed": false,
1458                     "autheticatorFlow": false
1459                 },
1460                 {
1461                     "authenticator": "reset-credential-email",
1462                     "requirement": "REQUIRED",
1463                     "priority": 20,
1464                     "userSetupAllowed": false,
1465                     "autheticatorFlow": false
1466                 },
1467                 {
1468                     "authenticator": "reset-password",
1469                     "requirement": "REQUIRED",
1470                     "priority": 30,
1471                     "userSetupAllowed": false,
1472                     "autheticatorFlow": false
1473                 },
1474                 {
1475                     "authenticator": "reset-otp",
1476                     "requirement": "OPTIONAL",
1477                     "priority": 40,
1478                     "userSetupAllowed": false,
1479                     "autheticatorFlow": false
1480                 }
1481             ]
1482         },
1483         {
1484             "id": "2c719ec1-2377-4314-83de-e3269d1a03a9",
1485             "alias": "saml ecp",
1486             "description": "SAML ECP Profile Authentication Flow",
1487             "providerId": "basic-flow",
1488             "topLevel": true,
1489             "builtIn": true,
1490             "authenticationExecutions": [
1491                 {
1492                     "authenticator": "http-basic-authenticator",
1493                     "requirement": "REQUIRED",
1494                     "priority": 10,
1495                     "userSetupAllowed": false,
1496                     "autheticatorFlow": false
1497                 }
1498             ]
1499         }
1500     ],
1501     "authenticatorConfig": [
1502         {
1503             "id": "18dec793-b93a-425d-88f1-f0f8adef894b",
1504             "alias": "create unique user config",
1505             "config": {
1506                 "require.password.update.after.registration": "false"
1507             }
1508         },
1509         {
1510             "id": "5d968a5d-c719-41f4-9e54-4d59c165dc41",
1511             "alias": "review profile config",
1512             "config": {
1513                 "update.profile.on.first.login": "missing"
1514             }
1515         }
1516     ],
1517     "requiredActions": [
1518         {
1519             "alias": "CONFIGURE_TOTP",
1520             "name": "Configure OTP",
1521             "providerId": "CONFIGURE_TOTP",
1522             "enabled": true,
1523             "defaultAction": false,
1524             "priority": 10,
1525             "config": {}
1526         },
1527         {
1528             "alias": "terms_and_conditions",
1529             "name": "Terms and Conditions",
1530             "providerId": "terms_and_conditions",
1531             "enabled": false,
1532             "defaultAction": false,
1533             "priority": 20,
1534             "config": {}
1535         },
1536         {
1537             "alias": "UPDATE_PASSWORD",
1538             "name": "Update Password",
1539             "providerId": "UPDATE_PASSWORD",
1540             "enabled": true,
1541             "defaultAction": false,
1542             "priority": 30,
1543             "config": {}
1544         },
1545         {
1546             "alias": "UPDATE_PROFILE",
1547             "name": "Update Profile",
1548             "providerId": "UPDATE_PROFILE",
1549             "enabled": true,
1550             "defaultAction": false,
1551             "priority": 40,
1552             "config": {}
1553         },
1554         {
1555             "alias": "VERIFY_EMAIL",
1556             "name": "Verify Email",
1557             "providerId": "VERIFY_EMAIL",
1558             "enabled": true,
1559             "defaultAction": false,
1560             "priority": 50,
1561             "config": {}
1562         }
1563     ],
1564     "browserFlow": "browser",
1565     "registrationFlow": "registration",
1566     "directGrantFlow": "direct grant",
1567     "resetCredentialsFlow": "reset credentials",
1568     "clientAuthenticationFlow": "clients",
1569     "dockerAuthenticationFlow": "docker auth",
1570     "attributes": {
1571         "_browser_header.xXSSProtection": "1; mode=block",
1572         "_browser_header.xFrameOptions": "SAMEORIGIN",
1573         "_browser_header.strictTransportSecurity": "max-age=31536000; includeSubDomains",
1574         "permanentLockout": "false",
1575         "quickLoginCheckMilliSeconds": "1000",
1576         "_browser_header.xRobotsTag": "none",
1577         "maxFailureWaitSeconds": "900",
1578         "minimumQuickLoginWaitSeconds": "60",
1579         "failureFactor": "30",
1580         "actionTokenGeneratedByUserLifespan": "300",
1581         "maxDeltaTimeSeconds": "43200",
1582         "_browser_header.xContentTypeOptions": "nosniff",
1583         "offlineSessionMaxLifespan": "5184000",
1584         "actionTokenGeneratedByAdminLifespan": "43200",
1585         "_browser_header.contentSecurityPolicyReportOnly": "",
1586         "bruteForceProtected": "false",
1587         "_browser_header.contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
1588         "waitIncrementSeconds": "60",
1589         "offlineSessionMaxLifespanEnabled": "false"
1590     },
1591     "keycloakVersion": "4.5.0.Final",
1592     "userManagedAccessAllowed": false
1593 }