summaryrefslogtreecommitdiffstats
path: root/aai-traversal/src/it/resources/multi-tenancy-realm.json
blob: 401187b20daa79e7079b8464d07f362d0a8cd7d0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
{
    "id": "aai-resources",
    "realm": "aai-resources",
    "notBefore": 0,
    "revokeRefreshToken": false,
    "refreshTokenMaxReuse": 0,
    "accessTokenLifespan": 300,
    "accessTokenLifespanForImplicitFlow": 900,
    "ssoSessionIdleTimeout": 1800,
    "ssoSessionMaxLifespan": 36000,
    "ssoSessionIdleTimeoutRememberMe": 0,
    "ssoSessionMaxLifespanRememberMe": 0,
    "offlineSessionIdleTimeout": 2592000,
    "offlineSessionMaxLifespanEnabled": false,
    "offlineSessionMaxLifespan": 5184000,
    "clientSessionIdleTimeout": 0,
    "clientSessionMaxLifespan": 0,
    "clientOfflineSessionIdleTimeout": 0,
    "clientOfflineSessionMaxLifespan": 0,
    "accessCodeLifespan": 60,
    "accessCodeLifespanUserAction": 300,
    "accessCodeLifespanLogin": 1800,
    "actionTokenGeneratedByAdminLifespan": 43200,
    "actionTokenGeneratedByUserLifespan": 300,
    "enabled": true,
    "sslRequired": "external",
    "registrationAllowed": false,
    "registrationEmailAsUsername": false,
    "rememberMe": false,
    "verifyEmail": false,
    "loginWithEmailAllowed": true,
    "duplicateEmailsAllowed": false,
    "resetPasswordAllowed": false,
    "editUsernameAllowed": false,
    "bruteForceProtected": false,
    "permanentLockout": false,
    "maxFailureWaitSeconds": 900,
    "minimumQuickLoginWaitSeconds": 60,
    "waitIncrementSeconds": 60,
    "quickLoginCheckMilliSeconds": 1000,
    "maxDeltaTimeSeconds": 43200,
    "failureFactor": 30,
    "users": [
        {
            "username": "admin",
            "enabled": true,
            "credentials": [
                {
                    "type": "password",
                    "value": "admin"
                }
            ],
            "clientRoles": {
                "realm-management": ["manage-users", "view-clients", "view-realm", "view-users"]
            }
        },
        {
            "id": "ran",
            "username": "ran",
            "enabled": true,
            "credentials": [
                {
                    "type": "password",
                    "value": "ran"
                }
            ],
            "realmRoles": [
                "operator"
            ]
        },
        {
            "id": "bob",
            "username": "bob",
            "enabled": true,
            "credentials": [
                {
                    "type": "password",
                    "value": "bob"
                }
            ],
            "realmRoles": [
                "operator_readOnly"
            ]
        },
        {
            "id": "ted",
            "username": "ted",
            "enabled": true,
            "credentials": [
                {
                    "type": "password",
                    "value": "ted"
                }
            ],
            "realmRoles": [
                "selector"
            ]
        }
    ],
    "roles": {
        "realm": [
            {
                "name": "operator",
                "description": "Operator privileges"
            },
            {
                "name": "operator_readOnly",
                "description": "Operator's read only privileges"
            },
            {
                "name": "selector",
                "description": "Selector privileges"
            },
            {
                "name": "selector_readOnly",
                "description": "Selector's read only privileges"
            },
            {
                "name": "admin",
                "description": "Administrator privileges"
            }
        ]
    },
    "clients": [
        {
            "clientId": "aai-resources-app",
            "enabled": true,
            "secret": "secret",
            "directAccessGrantsEnabled": true,
            "authorizationServicesEnabled": true,
            "authorizationSettings": {
                "allowRemoteResourceManagement": true,
                "policyEnforcementMode": "ENFORCING"
            }
        }
    ],
    "defaultDefaultClientScopes": [
        "roles",
        "email",
        "web-origins",
        "profile",
        "role_list"
    ],
    "clientScopes": [
        {
            "id": "0f7dfd8b-c230-4664-8d77-da85bcc4fe2a",
            "name": "roles",
            "description": "OpenID Connect scope for add user roles to the access token",
            "protocol": "openid-connect",
            "attributes": {
                "include.in.token.scope": "true",
                "display.on.consent.screen": "true",
                "consent.screen.text": "${rolesScopeConsentText}"
            },
            "protocolMappers": [
                {
                    "id": "4b9f8798-8990-4c0d-87d3-034e72655e3b",
                    "name": "realm roles",
                    "protocol": "openid-connect",
                    "protocolMapper": "oidc-usermodel-realm-role-mapper",
                    "consentRequired": false,
                    "config": {
                        "multivalued": "true",
                        "user.attribute": "foo",
                        "access.token.claim": "true",
                        "claim.name": "realm_access.roles",
                        "jsonType.label": "String"
                    }
                }
            ]
        }
    ]
}