ClientFhirServerRealm.json

{
  "id" : "ClientFhirServer",
  "realm" : "ClientFhirServer",
  "notBefore" : 0,
  "defaultSignatureAlgorithm" : "RS256",
  "revokeRefreshToken" : false,
  "refreshTokenMaxReuse" : 0,
  "accessTokenLifespan" : 1800,
  "accessTokenLifespanForImplicitFlow" : 900,
  "ssoSessionIdleTimeout" : 1800,
  "ssoSessionMaxLifespan" : 36000,
  "ssoSessionIdleTimeoutRememberMe" : 0,
  "ssoSessionMaxLifespanRememberMe" : 0,
  "offlineSessionIdleTimeout" : 2592000,
  "offlineSessionMaxLifespanEnabled" : false,
  "offlineSessionMaxLifespan" : 5184000,
  "clientSessionIdleTimeout" : 0,
  "clientSessionMaxLifespan" : 0,
  "clientOfflineSessionIdleTimeout" : 0,
  "clientOfflineSessionMaxLifespan" : 0,
  "accessCodeLifespan" : 60,
  "accessCodeLifespanUserAction" : 300,
  "accessCodeLifespanLogin" : 1800,
  "actionTokenGeneratedByAdminLifespan" : 43200,
  "actionTokenGeneratedByUserLifespan" : 300,
  "oauth2DeviceCodeLifespan" : 600,
  "oauth2DevicePollingInterval" : 5,
  "enabled" : true,
  "sslRequired" : "external",
  "registrationAllowed" : false,
  "registrationEmailAsUsername" : false,
  "rememberMe" : false,
  "verifyEmail" : false,
  "loginWithEmailAllowed" : true,
  "duplicateEmailsAllowed" : false,
  "resetPasswordAllowed" : false,
  "editUsernameAllowed" : false,
  "bruteForceProtected" : false,
  "permanentLockout" : false,
  "maxFailureWaitSeconds" : 900,
  "minimumQuickLoginWaitSeconds" : 60,
  "waitIncrementSeconds" : 60,
  "quickLoginCheckMilliSeconds" : 1000,
  "maxDeltaTimeSeconds" : 43200,
  "failureFactor" : 30,
  "roles" : {
    "realm" : [ {
      "id" : "b7c89805-cb05-4098-8468-3d90c1a86a3f",
      "name" : "default-roles-clientfhirserver",
      "description" : "${role_default-roles}",
      "composite" : true,
      "composites" : {
        "realm" : [ "offline_access", "uma_authorization" ],
        "client" : {
          "account" : [ "view-profile", "manage-account" ]
        }
      },
      "clientRole" : false,
      "containerId" : "ClientFhirServer",
      "attributes" : { }
    }, {
      "id" : "a5ec1af8-4b22-41a8-8fa0-e7e716704880",
      "name" : "offline_access",
      "description" : "${role_offline-access}",
      "composite" : false,
      "clientRole" : false,
      "containerId" : "ClientFhirServer",
      "attributes" : { }
    }, {
      "id" : "e66040fb-9849-4e1f-b313-931ed26bb3a5",
      "name" : "user",
      "composite" : false,
      "clientRole" : false,
      "containerId" : "ClientFhirServer",
      "attributes" : { }
    }, {
      "id" : "35750808-5426-4c5e-952e-b3ac10e9da0f",
      "name" : "BackOffice",
      "description" : "Back office staff",
      "composite" : false,
      "clientRole" : false,
      "containerId" : "ClientFhirServer",
      "attributes" : { }
    }, {
      "id" : "99ffd0c9-0a22-4f7c-a4c6-51f553cd1ccb",
      "name" : "default-roles-master",
      "composite" : false,
      "clientRole" : false,
      "containerId" : "ClientFhirServer",
      "attributes" : { }
    }, {
      "id" : "e39fefd8-b2cf-42f3-9b81-011432bc3955",
      "name" : "uma_authorization",
      "description" : "${role_uma_authorization}",
      "composite" : false,
      "clientRole" : false,
      "containerId" : "ClientFhirServer",
      "attributes" : { }
    } ],
    "client" : {
      "app-token" : [ {
        "id" : "ff70807a-1321-40de-8a45-9cea3ca3bba5",
        "name" : "user",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "11c7d028-8a86-4ea0-8f51-9ac00954ecbd",
        "attributes" : { }
      } ],
      "realm-management" : [ {
        "id" : "a6c06c12-89c6-4a3f-b7e1-12e5136e65fe",
        "name" : "impersonation",
        "description" : "${role_impersonation}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "4721993e-35d0-497e-b1b2-af090e150fb4",
        "name" : "view-clients",
        "description" : "${role_view-clients}",
        "composite" : true,
        "composites" : {
          "client" : {
            "realm-management" : [ "query-clients" ]
          }
        },
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "d9112624-3f02-451c-a9df-a34dc97ef8dc",
        "name" : "view-events",
        "description" : "${role_view-events}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "932261ad-ec10-49ff-ad28-2cff2228a7fe",
        "name" : "view-identity-providers",
        "description" : "${role_view-identity-providers}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "b48617a7-178e-472a-8c82-327ceaf70229",
        "name" : "create-client",
        "description" : "${role_create-client}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "83acb7b4-8c62-4b2b-b4d9-e08511ba64f7",
        "name" : "manage-clients",
        "description" : "${role_manage-clients}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "42533bd1-b17e-4f11-a699-1a0ee8527eef",
        "name" : "query-clients",
        "description" : "${role_query-clients}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "e54eb175-4bdf-4c29-9adb-d3df82e2521c",
        "name" : "query-realms",
        "description" : "${role_query-realms}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "55e5ce14-33ce-4537-bdb7-a2fdcdecfe31",
        "name" : "view-authorization",
        "description" : "${role_view-authorization}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "d3eef861-f825-4784-84b5-a04c14559277",
        "name" : "view-users",
        "description" : "${role_view-users}",
        "composite" : true,
        "composites" : {
          "client" : {
            "realm-management" : [ "query-users", "query-groups" ]
          }
        },
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "6dd77cae-a029-4053-8969-c80827c5ca0b",
        "name" : "query-users",
        "description" : "${role_query-users}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "ac343b74-f396-4cb8-a697-0008e6ab997f",
        "name" : "manage-users",
        "description" : "${role_manage-users}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "738c11f6-2b30-47a9-b207-d87fd69792fc",
        "name" : "manage-identity-providers",
        "description" : "${role_manage-identity-providers}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "687ea9f2-29bb-4353-a8c9-568560a47c84",
        "name" : "manage-realm",
        "description" : "${role_manage-realm}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "0a70726e-5a85-4820-bb92-5cf0736e5069",
        "name" : "view-realm",
        "description" : "${role_view-realm}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "9ad15668-6a03-4f72-8335-031ccdd87ba5",
        "name" : "manage-authorization",
        "description" : "${role_manage-authorization}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "f9c2ecf8-ded0-4158-8736-1b7ee16c6e9d",
        "name" : "query-groups",
        "description" : "${role_query-groups}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "3c4ce88d-073c-4507-9f6a-2b1f2ca20136",
        "name" : "manage-events",
        "description" : "${role_manage-events}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      }, {
        "id" : "d39be877-cdd6-44b1-b4f9-da903b6af4cf",
        "name" : "realm-admin",
        "description" : "${role_realm-admin}",
        "composite" : true,
        "composites" : {
          "client" : {
            "realm-management" : [ "view-clients", "impersonation", "view-events", "view-identity-providers", "create-client", "manage-clients", "query-clients", "query-realms", "view-authorization", "view-users", "query-users", "manage-users", "manage-identity-providers", "manage-realm", "view-realm", "manage-authorization", "query-groups", "manage-events" ]
          }
        },
        "clientRole" : true,
        "containerId" : "2968dca6-f268-45a2-8411-d25e2e428d38",
        "attributes" : { }
      } ],
      "pims-login" : [ {
        "id" : "4501b720-75ce-4b9f-ba50-bdeb3fe359e3",
        "name" : "uma_protection",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2377b208-3490-43cd-80ae-6aa738e70ff8",
        "attributes" : { }
      }, {
        "id" : "71eefb56-a105-45ee-bca0-9915718ea201",
        "name" : "pims-user",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "2377b208-3490-43cd-80ae-6aa738e70ff8",
        "attributes" : { }
      } ],
      "app-login" : [ {
        "id" : "a9ec516c-120f-4d26-9a56-63089abdf80e",
        "name" : "user",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "5dd19d73-8f92-46a1-8751-c5aa3b5b5285",
        "attributes" : { }
      } ],
      "security-admin-console" : [ ],
      "admin-cli" : [ ],
      "account-console" : [ ],
      "app-signed-jwt" : [ ],
      "broker" : [ {
        "id" : "c483090d-5882-45f2-926f-01ec9a247a97",
        "name" : "read-token",
        "description" : "${role_read-token}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "04c99173-698a-4ac7-9c0d-05b9b0fd069b",
        "attributes" : { }
      } ],
      "account" : [ {
        "id" : "9039939b-057f-47ea-960c-a6c5e28d82b2",
        "name" : "delete-account",
        "description" : "${role_delete-account}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "7897d2b8-f239-40e2-9595-5581d442c4bf",
        "attributes" : { }
      }, {
        "id" : "71339155-b816-4a65-8b12-b480bcc7c780",
        "name" : "view-groups",
        "description" : "${role_view-groups}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "7897d2b8-f239-40e2-9595-5581d442c4bf",
        "attributes" : { }
      }, {
        "id" : "53bcbe2f-5685-4dd9-a58a-4bf3fe3e23d6",
        "name" : "manage-consent",
        "description" : "${role_manage-consent}",
        "composite" : true,
        "composites" : {
          "client" : {
            "account" : [ "view-consent" ]
          }
        },
        "clientRole" : true,
        "containerId" : "7897d2b8-f239-40e2-9595-5581d442c4bf",
        "attributes" : { }
      }, {
        "id" : "0a9d5350-04da-45fd-b060-6430f97f1105",
        "name" : "manage-account-links",
        "description" : "${role_manage-account-links}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "7897d2b8-f239-40e2-9595-5581d442c4bf",
        "attributes" : { }
      }, {
        "id" : "3735190a-ff0f-4d30-a0b2-d281b8c10083",
        "name" : "view-profile",
        "description" : "${role_view-profile}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "7897d2b8-f239-40e2-9595-5581d442c4bf",
        "attributes" : { }
      }, {
        "id" : "dda41b76-3c27-4963-85f3-e676f214596a",
        "name" : "view-applications",
        "description" : "${role_view-applications}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "7897d2b8-f239-40e2-9595-5581d442c4bf",
        "attributes" : { }
      }, {
        "id" : "d0724282-973b-45fc-8590-48162623ae46",
        "name" : "view-consent",
        "description" : "${role_view-consent}",
        "composite" : false,
        "clientRole" : true,
        "containerId" : "7897d2b8-f239-40e2-9595-5581d442c4bf",
        "attributes" : { }
      }, {
        "id" : "b1971956-efa4-465c-9598-e66edfe045bb",
        "name" : "manage-account",
        "description" : "${role_manage-account}",
        "composite" : true,
        "composites" : {
          "client" : {
            "account" : [ "manage-account-links" ]
          }
        },
        "clientRole" : true,
        "containerId" : "7897d2b8-f239-40e2-9595-5581d442c4bf",
        "attributes" : { }
      } ]
    }
  },
  "groups" : [ ],
  "defaultRole" : {
    "id" : "b7c89805-cb05-4098-8468-3d90c1a86a3f",
    "name" : "default-roles-clientfhirserver",
    "description" : "${role_default-roles}",
    "composite" : true,
    "clientRole" : false,
    "containerId" : "ClientFhirServer"
  },
  "requiredCredentials" : [ "password" ],
  "otpPolicyType" : "totp",
  "otpPolicyAlgorithm" : "HmacSHA1",
  "otpPolicyInitialCounter" : 0,
  "otpPolicyDigits" : 6,
  "otpPolicyLookAheadWindow" : 1,
  "otpPolicyPeriod" : 30,
  "otpPolicyCodeReusable" : false,
  "otpSupportedApplications" : [ "totpAppMicrosoftAuthenticatorName", "totpAppFreeOTPName", "totpAppGoogleName" ],
  "webAuthnPolicyRpEntityName" : "keycloak",
  "webAuthnPolicySignatureAlgorithms" : [ "ES256" ],
  "webAuthnPolicyRpId" : "",
  "webAuthnPolicyAttestationConveyancePreference" : "not specified",
  "webAuthnPolicyAuthenticatorAttachment" : "not specified",
  "webAuthnPolicyRequireResidentKey" : "not specified",
  "webAuthnPolicyUserVerificationRequirement" : "not specified",
  "webAuthnPolicyCreateTimeout" : 0,
  "webAuthnPolicyAvoidSameAuthenticatorRegister" : false,
  "webAuthnPolicyAcceptableAaguids" : [ ],
  "webAuthnPolicyPasswordlessRpEntityName" : "keycloak",
  "webAuthnPolicyPasswordlessSignatureAlgorithms" : [ "ES256" ],
  "webAuthnPolicyPasswordlessRpId" : "",
  "webAuthnPolicyPasswordlessAttestationConveyancePreference" : "not specified",
  "webAuthnPolicyPasswordlessAuthenticatorAttachment" : "not specified",
  "webAuthnPolicyPasswordlessRequireResidentKey" : "not specified",
  "webAuthnPolicyPasswordlessUserVerificationRequirement" : "not specified",
  "webAuthnPolicyPasswordlessCreateTimeout" : 0,
  "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister" : false,
  "webAuthnPolicyPasswordlessAcceptableAaguids" : [ ],
  "users" : [ {
    "id" : "620423a2-877a-46af-97d4-364d37b3349b",
    "createdTimestamp" : 1654609807450,
    "username" : "alice",
    "enabled" : true,
    "totp" : false,
    "emailVerified" : false,
    "firstName" : "Alice",
    "lastName" : "Nurse",
    "email" : "alice@example.com",
    "attributes" : {
      "userId" : [ "pra5678" ]
    },
    "credentials" : [ {
      "id" : "c26fc896-e31d-4ff2-86ef-d3bf1e12d0f8",
      "type" : "password",
      "createdDate" : 1654609819688,
      "secretData" : "{\"value\":\"TcHDEFKkSzJO/KdxxfR/R8UnYk48nfvIUnOKiT/axNU=\",\"salt\":\"ec+CKS8CbHwpblHU8/F7mw==\",\"additionalParameters\":{}}",
      "credentialData" : "{\"hashIterations\":27500,\"algorithm\":\"pbkdf2-sha256\",\"additionalParameters\":{}}"
    } ],
    "disableableCredentialTypes" : [ ],
    "requiredActions" : [ ],
    "realmRoles" : [ "offline_access", "user", "BackOffice", "default-roles-master" ],
    "notBefore" : 0,
    "groups" : [ ]
  }, {
    "id" : "602e9cef-0906-43f3-a5d0-31275d820c69",
    "createdTimestamp" : 1742308565854,
    "username" : "alicesmith",
    "enabled" : true,
    "totp" : false,
    "emailVerified" : false,
    "firstName" : "alice",
    "lastName" : "smith",
    "email" : "alicesmith@example.com",
    "attributes" : {
      "patientId" : [ "pat036" ],
      "userId" : [ "pat036" ]
    },
    "credentials" : [ {
      "id" : "2d917b04-903f-4c4b-802d-99d8f7c8ac55",
      "type" : "password",
      "userLabel" : "My password",
      "createdDate" : 1742308998437,
      "secretData" : "{\"value\":\"jLffgdnfOQBniVMa6395yi9XWBbmgkoNiIFSyoHIGek=\",\"salt\":\"uY1WDI9ieXTQiaAM0ERuiA==\",\"additionalParameters\":{}}",
      "credentialData" : "{\"hashIterations\":27500,\"algorithm\":\"pbkdf2-sha256\",\"additionalParameters\":{}}"
    } ],
    "disableableCredentialTypes" : [ ],
    "requiredActions" : [ ],
    "realmRoles" : [ "default-roles-clientfhirserver" ],
    "notBefore" : 0,
    "groups" : [ ]
  }, {
    "id" : "11dd7e9c-1e77-4fcb-9c22-247b915e5c34",
    "createdTimestamp" : 1654535788585,
    "username" : "janedoe",
    "enabled" : true,
    "totp" : false,
    "emailVerified" : false,
    "firstName" : "Jane",
    "lastName" : "Doe",
    "email" : "jane@example.com",
    "attributes" : {
      "userId" : [ "pra1234" ]
    },
    "credentials" : [ {
      "id" : "0b3d985e-80ad-4410-a965-21709928419e",
      "type" : "password",
      "createdDate" : 1654535793987,
      "secretData" : "{\"value\":\"rOp7R0MgtvUETvybUteFq7GkUQU/mgGYZxE3eExi9UE=\",\"salt\":\"tfAJgLk6KFmco5wcEk6euQ==\",\"additionalParameters\":{}}",
      "credentialData" : "{\"hashIterations\":27500,\"algorithm\":\"pbkdf2-sha256\",\"additionalParameters\":{}}"
    } ],
    "disableableCredentialTypes" : [ ],
    "requiredActions" : [ ],
    "realmRoles" : [ "offline_access", "user", "default-roles-master" ],
    "notBefore" : 0,
    "groups" : [ ]
  }, {
    "id" : "26071539-a2e8-43de-9e7f-a74a3ea76b73",
    "createdTimestamp" : 1667244326118,
    "username" : "jimpims",
    "enabled" : true,
    "totp" : false,
    "emailVerified" : false,
    "firstName" : "Jim",
    "lastName" : "Pims",
    "email" : "jimpims@pims.org",
    "attributes" : {
      "userId" : [ "per789" ]
    },
    "credentials" : [ {
      "id" : "eae0edaa-d915-4678-abc7-1a8ab7132d80",
      "type" : "password",
      "createdDate" : 1667244375204,
      "secretData" : "{\"value\":\"AHojb/MWHR18QNYiLy3reou3eeiR4+dQPgiSomdxvGQ=\",\"salt\":\"1gr8Hh1D1eBKvM3eS4IAQQ==\",\"additionalParameters\":{}}",
      "credentialData" : "{\"hashIterations\":27500,\"algorithm\":\"pbkdf2-sha256\",\"additionalParameters\":{}}"
    } ],
    "disableableCredentialTypes" : [ ],
    "requiredActions" : [ ],
    "realmRoles" : [ "default-roles-clientfhirserver" ],
    "clientRoles" : {
      "pims-login" : [ "pims-user" ]
    },
    "notBefore" : 0,
    "groups" : [ ]
  }, {
    "id" : "d6999f64-7165-4742-8a69-44f719d6783f",
    "createdTimestamp" : 1654609729216,
    "username" : "jonsnow",
    "enabled" : true,
    "totp" : false,
    "emailVerified" : false,
    "firstName" : "Jon",
    "lastName" : "Snow",
    "email" : "jon@example.com",
    "attributes" : {
      "patientId" : [ "pat017" ],
      "userId" : [ "pat017" ]
    },
    "credentials" : [ {
      "id" : "232e4607-8591-40c8-8ca8-1a365f63cadf",
      "type" : "password",
      "createdDate" : 1654609739752,
      "secretData" : "{\"value\":\"Xq7cH7ifZxji7HbjOCvADrZayo4ioDay727u7Rb2bXM=\",\"salt\":\"mXdOhvm6+MkT7rXj0z76Wg==\",\"additionalParameters\":{}}",
      "credentialData" : "{\"hashIterations\":27500,\"algorithm\":\"pbkdf2-sha256\",\"additionalParameters\":{}}"
    } ],
    "disableableCredentialTypes" : [ ],
    "requiredActions" : [ ],
    "realmRoles" : [ "offline_access", "user", "default-roles-master" ],
    "notBefore" : 0,
    "groups" : [ ]
  }, {
    "id" : "1087d614-7b75-4f91-b955-57c248532015",
    "createdTimestamp" : 1667246076771,
    "username" : "service-account-pims-login",
    "enabled" : true,
    "totp" : false,
    "emailVerified" : false,
    "serviceAccountClientId" : "pims-login",
    "credentials" : [ ],
    "disableableCredentialTypes" : [ ],
    "requiredActions" : [ ],
    "realmRoles" : [ "default-roles-clientfhirserver" ],
    "clientRoles" : {
      "pims-login" : [ "uma_protection" ]
    },
    "notBefore" : 0,
    "groups" : [ ]
  } ],
  "scopeMappings" : [ {
    "clientScope" : "offline_access",
    "roles" : [ "offline_access" ]
  } ],
  "clientScopeMappings" : {
    "pims-login" : [ {
      "clientScope" : "pims",
      "roles" : [ "pims-user" ]
    } ],
    "account" : [ {
      "client" : "account-console",
      "roles" : [ "manage-account", "view-groups" ]
    } ]
  },
  "clients" : [ {
    "id" : "7897d2b8-f239-40e2-9595-5581d442c4bf",
    "clientId" : "account",
    "name" : "${client_account}",
    "rootUrl" : "${authBaseUrl}",
    "baseUrl" : "/realms/ClientFhirServer/account/",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret",
    "secret" : "**********",
    "redirectUris" : [ "/realms/ClientFhirServer/account/*" ],
    "webOrigins" : [ ],
    "notBefore" : 0,
    "bearerOnly" : false,
    "consentRequired" : false,
    "standardFlowEnabled" : true,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : false,
    "serviceAccountsEnabled" : false,
    "publicClient" : false,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "post.logout.redirect.uris" : "+"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : false,
    "nodeReRegistrationTimeout" : 0,
    "defaultClientScopes" : [ "web-origins", "profile", "roles", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  }, {
    "id" : "88ff27ba-2e77-4dac-b717-52d14ea04747",
    "clientId" : "account-console",
    "name" : "${client_account-console}",
    "rootUrl" : "${authBaseUrl}",
    "baseUrl" : "/realms/ClientFhirServer/account/",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret",
    "redirectUris" : [ "/realms/ClientFhirServer/account/*" ],
    "webOrigins" : [ ],
    "notBefore" : 0,
    "bearerOnly" : false,
    "consentRequired" : false,
    "standardFlowEnabled" : true,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : false,
    "serviceAccountsEnabled" : false,
    "publicClient" : true,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "post.logout.redirect.uris" : "+",
      "pkce.code.challenge.method" : "S256"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : false,
    "nodeReRegistrationTimeout" : 0,
    "protocolMappers" : [ {
      "id" : "7274374f-093a-4b5c-811d-3e5e52f24216",
      "name" : "audience resolve",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-audience-resolve-mapper",
      "consentRequired" : false,
      "config" : { }
    } ],
    "defaultClientScopes" : [ "web-origins", "roles", "profile", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  }, {
    "id" : "dbe91dfc-1005-4950-855a-038b3011037c",
    "clientId" : "admin-cli",
    "name" : "${client_admin-cli}",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret",
    "secret" : "**********",
    "redirectUris" : [ ],
    "webOrigins" : [ ],
    "notBefore" : 0,
    "bearerOnly" : false,
    "consentRequired" : false,
    "standardFlowEnabled" : false,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : true,
    "serviceAccountsEnabled" : false,
    "publicClient" : true,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "post.logout.redirect.uris" : "+"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : false,
    "nodeReRegistrationTimeout" : 0,
    "defaultClientScopes" : [ "web-origins", "profile", "roles", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  }, {
    "id" : "5dd19d73-8f92-46a1-8751-c5aa3b5b5285",
    "clientId" : "app-login",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret",
    "secret" : "**********",
    "redirectUris" : [ "http://localhost:8080/*" ],
    "webOrigins" : [ "*" ],
    "notBefore" : 0,
    "bearerOnly" : false,
    "consentRequired" : false,
    "standardFlowEnabled" : true,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : true,
    "serviceAccountsEnabled" : false,
    "publicClient" : true,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "saml.assertion.signature" : "false",
      "saml.force.post.binding" : "false",
      "saml.multivalued.roles" : "false",
      "saml.encrypt" : "false",
      "post.logout.redirect.uris" : "+",
      "saml.server.signature" : "false",
      "saml.server.signature.keyinfo.ext" : "false",
      "exclude.session.state.from.auth.response" : "false",
      "saml_force_name_id_format" : "false",
      "saml.client.signature" : "false",
      "tls.client.certificate.bound.access.tokens" : "false",
      "saml.authnstatement" : "false",
      "display.on.consent.screen" : "false",
      "saml.onetimeuse.condition" : "false"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : true,
    "nodeReRegistrationTimeout" : -1,
    "protocolMappers" : [ {
      "id" : "20ca93c9-c53d-40ba-83c6-53dbf80071de",
      "name" : "userId",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "aggregate.attrs" : "false",
        "userinfo.token.claim" : "true",
        "multivalued" : "false",
        "user.attribute" : "userId",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "userId"
      }
    }, {
      "id" : "38a69e61-114a-47e1-9f21-09062eedebbf",
      "name" : "patientId",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "patientId",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "patientId",
        "jsonType.label" : "String"
      }
    } ],
    "defaultClientScopes" : [ "web-origins", "user/Observation.read", "patient/Patient.read", "patient/Coverage.read", "profile", "roles", "user/Patient.read", "patient/Condition.read", "patient/Observation.read", "launch", "user/Practitioner.read", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  }, {
    "id" : "0ab10cb3-13ae-435c-8b9a-a73767f836b5",
    "clientId" : "app-signed-jwt",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret-jwt",
    "secret" : "**********",
    "redirectUris" : [ ],
    "webOrigins" : [ ],
    "notBefore" : 0,
    "bearerOnly" : true,
    "consentRequired" : false,
    "standardFlowEnabled" : true,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : true,
    "serviceAccountsEnabled" : false,
    "publicClient" : false,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "saml.assertion.signature" : "false",
      "saml.force.post.binding" : "false",
      "saml.multivalued.roles" : "false",
      "saml.encrypt" : "false",
      "post.logout.redirect.uris" : "+",
      "saml.server.signature" : "false",
      "saml.server.signature.keyinfo.ext" : "false",
      "exclude.session.state.from.auth.response" : "false",
      "saml_force_name_id_format" : "false",
      "saml.client.signature" : "false",
      "tls.client.certificate.bound.access.tokens" : "false",
      "saml.authnstatement" : "false",
      "display.on.consent.screen" : "false",
      "saml.onetimeuse.condition" : "false"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : true,
    "nodeReRegistrationTimeout" : -1,
    "defaultClientScopes" : [ "profile", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access" ]
  }, {
    "id" : "11c7d028-8a86-4ea0-8f51-9ac00954ecbd",
    "clientId" : "app-token",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret",
    "secret" : "60422cb9-8e39-4230-9c6a-ef470fa8fd39",
    "redirectUris" : [ "localhost:8080" ],
    "webOrigins" : [ "*" ],
    "notBefore" : 0,
    "bearerOnly" : true,
    "consentRequired" : false,
    "standardFlowEnabled" : true,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : true,
    "serviceAccountsEnabled" : false,
    "publicClient" : false,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "saml.assertion.signature" : "false",
      "saml.force.post.binding" : "false",
      "saml.multivalued.roles" : "false",
      "saml.encrypt" : "false",
      "post.logout.redirect.uris" : "+",
      "saml.server.signature" : "false",
      "saml.server.signature.keyinfo.ext" : "false",
      "exclude.session.state.from.auth.response" : "false",
      "saml_force_name_id_format" : "false",
      "saml.client.signature" : "false",
      "tls.client.certificate.bound.access.tokens" : "false",
      "saml.authnstatement" : "false",
      "display.on.consent.screen" : "false",
      "saml.onetimeuse.condition" : "false"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : true,
    "nodeReRegistrationTimeout" : -1,
    "defaultClientScopes" : [ "profile", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access" ]
  }, {
    "id" : "04c99173-698a-4ac7-9c0d-05b9b0fd069b",
    "clientId" : "broker",
    "name" : "${client_broker}",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret",
    "secret" : "**********",
    "redirectUris" : [ ],
    "webOrigins" : [ ],
    "notBefore" : 0,
    "bearerOnly" : false,
    "consentRequired" : false,
    "standardFlowEnabled" : true,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : false,
    "serviceAccountsEnabled" : false,
    "publicClient" : false,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "post.logout.redirect.uris" : "+"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : false,
    "nodeReRegistrationTimeout" : 0,
    "defaultClientScopes" : [ "web-origins", "profile", "roles", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  }, {
    "id" : "2377b208-3490-43cd-80ae-6aa738e70ff8",
    "clientId" : "pims-login",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret",
    "redirectUris" : [ "http://localhost:3006" ],
    "webOrigins" : [ "*" ],
    "notBefore" : 0,
    "bearerOnly" : false,
    "consentRequired" : false,
    "standardFlowEnabled" : true,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : true,
    "serviceAccountsEnabled" : true,
    "publicClient" : true,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "id.token.as.detached.signature" : "false",
      "saml.assertion.signature" : "false",
      "saml.force.post.binding" : "false",
      "saml.multivalued.roles" : "false",
      "saml.encrypt" : "false",
      "post.logout.redirect.uris" : "+",
      "oauth2.device.authorization.grant.enabled" : "false",
      "backchannel.logout.revoke.offline.tokens" : "false",
      "saml.server.signature" : "false",
      "saml.server.signature.keyinfo.ext" : "false",
      "use.refresh.tokens" : "true",
      "exclude.session.state.from.auth.response" : "false",
      "oidc.ciba.grant.enabled" : "false",
      "saml.artifact.binding" : "false",
      "backchannel.logout.session.required" : "true",
      "client_credentials.use_refresh_token" : "false",
      "saml_force_name_id_format" : "false",
      "require.pushed.authorization.requests" : "false",
      "saml.client.signature" : "false",
      "tls.client.certificate.bound.access.tokens" : "false",
      "saml.authnstatement" : "false",
      "display.on.consent.screen" : "false",
      "saml.onetimeuse.condition" : "false"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : true,
    "nodeReRegistrationTimeout" : -1,
    "protocolMappers" : [ {
      "id" : "cb9baa58-3be6-4b9a-9c64-a1be3d85b78f",
      "name" : "Client IP Address",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usersessionmodel-note-mapper",
      "consentRequired" : false,
      "config" : {
        "user.session.note" : "clientAddress",
        "userinfo.token.claim" : "true",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "clientAddress",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "74892dd8-6095-4876-a585-9224da752837",
      "name" : "Client Host",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usersessionmodel-note-mapper",
      "consentRequired" : false,
      "config" : {
        "user.session.note" : "clientHost",
        "userinfo.token.claim" : "true",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "clientHost",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "84e1d264-a8a5-41cc-9066-312ee386c824",
      "name" : "Client ID",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usersessionmodel-note-mapper",
      "consentRequired" : false,
      "config" : {
        "user.session.note" : "clientId",
        "userinfo.token.claim" : "true",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "clientId",
        "jsonType.label" : "String"
      }
    } ],
    "defaultClientScopes" : [ "web-origins", "profile", "roles", "launch", "pims", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  }, {
    "id" : "2968dca6-f268-45a2-8411-d25e2e428d38",
    "clientId" : "realm-management",
    "name" : "${client_realm-management}",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret",
    "secret" : "**********",
    "redirectUris" : [ ],
    "webOrigins" : [ ],
    "notBefore" : 0,
    "bearerOnly" : true,
    "consentRequired" : false,
    "standardFlowEnabled" : true,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : false,
    "serviceAccountsEnabled" : false,
    "publicClient" : false,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "post.logout.redirect.uris" : "+"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : false,
    "nodeReRegistrationTimeout" : 0,
    "defaultClientScopes" : [ "profile", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access" ]
  }, {
    "id" : "61a8e544-3bb4-47d3-8964-2afd81bdad93",
    "clientId" : "security-admin-console",
    "name" : "${client_security-admin-console}",
    "rootUrl" : "${authAdminUrl}",
    "baseUrl" : "/admin/ClientFhirServer/console/",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "alwaysDisplayInConsole" : false,
    "clientAuthenticatorType" : "client-secret",
    "secret" : "**********",
    "redirectUris" : [ "/admin/ClientFhirServer/console/*" ],
    "webOrigins" : [ "+" ],
    "notBefore" : 0,
    "bearerOnly" : false,
    "consentRequired" : false,
    "standardFlowEnabled" : true,
    "implicitFlowEnabled" : false,
    "directAccessGrantsEnabled" : false,
    "serviceAccountsEnabled" : false,
    "publicClient" : true,
    "frontchannelLogout" : false,
    "protocol" : "openid-connect",
    "attributes" : {
      "post.logout.redirect.uris" : "+",
      "pkce.code.challenge.method" : "S256"
    },
    "authenticationFlowBindingOverrides" : { },
    "fullScopeAllowed" : false,
    "nodeReRegistrationTimeout" : 0,
    "protocolMappers" : [ {
      "id" : "65964a7b-c520-44d7-ac3b-e93c1cf0e376",
      "name" : "locale",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "locale",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "locale",
        "jsonType.label" : "String"
      }
    } ],
    "defaultClientScopes" : [ "web-origins", "profile", "roles", "email" ],
    "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
  } ],
  "clientScopes" : [ {
    "id" : "67b7a272-38c2-4634-b67f-dd8e0bcfc465",
    "name" : "offline_access",
    "description" : "OpenID Connect built-in scope: offline_access",
    "protocol" : "openid-connect",
    "attributes" : {
      "consent.screen.text" : "${offlineAccessScopeConsentText}",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "bef5b483-2d7f-4ed2-9b6b-743255bd7638",
    "name" : "patient/Condition.read",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "410b6f5e-7673-4aaa-9027-553d7a7791a7",
    "name" : "phone",
    "description" : "OpenID Connect built-in scope: phone",
    "protocol" : "openid-connect",
    "attributes" : {
      "consent.screen.text" : "${phoneScopeConsentText}",
      "display.on.consent.screen" : "true"
    },
    "protocolMappers" : [ {
      "id" : "aee958aa-47e3-463b-b52e-bfbb80356668",
      "name" : "phone number",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "phoneNumber",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "phone_number",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "68e18d59-8867-4ded-80cb-5eeb7e90e032",
      "name" : "phone number verified",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "phoneNumberVerified",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "phone_number_verified",
        "jsonType.label" : "boolean"
      }
    } ]
  }, {
    "id" : "2a5926d6-7d37-4aa8-a903-032b4b187958",
    "name" : "email",
    "description" : "OpenID Connect built-in scope: email",
    "protocol" : "openid-connect",
    "attributes" : {
      "consent.screen.text" : "${emailScopeConsentText}",
      "display.on.consent.screen" : "true"
    },
    "protocolMappers" : [ {
      "id" : "02a2ac50-ea71-4e3f-8b0f-88bb92937539",
      "name" : "email verified",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-property-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "emailVerified",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "email_verified",
        "jsonType.label" : "boolean"
      }
    }, {
      "id" : "98686797-7c8f-490a-9850-e9cbe0c59c1c",
      "name" : "email",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-property-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "email",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "email",
        "jsonType.label" : "String"
      }
    } ]
  }, {
    "id" : "5ee6891a-3602-4348-a949-bdaa665ec3d8",
    "name" : "acr",
    "description" : "OpenID Connect scope for add acr (authentication context class reference) to the token",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "false",
      "display.on.consent.screen" : "false"
    },
    "protocolMappers" : [ {
      "id" : "500c6b71-984f-40a5-99f4-0b561e88a39b",
      "name" : "acr loa level",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-acr-mapper",
      "consentRequired" : false,
      "config" : {
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "userinfo.token.claim" : "true"
      }
    } ]
  }, {
    "id" : "f50e6a48-1a5f-434d-97c5-50384933cfaf",
    "name" : "patient/Coverage.read",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "0b5c4b37-d774-4d2d-a09a-8726b79e15e7",
    "name" : "patient/Patient.read",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "3732af7c-19a9-46d9-bba9-f4a98da0bedb",
    "name" : "launch",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "226bf23b-a12c-4506-9e1f-fa9fd784f87d",
    "name" : "microprofile-jwt",
    "description" : "Microprofile - JWT built-in scope",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "false"
    },
    "protocolMappers" : [ {
      "id" : "81334494-6c86-4800-ab48-e0fac15e962c",
      "name" : "groups",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-realm-role-mapper",
      "consentRequired" : false,
      "config" : {
        "multivalued" : "true",
        "userinfo.token.claim" : "true",
        "user.attribute" : "foo",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "groups",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "2739cd3b-4e94-4f0d-9b6f-f8dfb02fff4e",
      "name" : "upn",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-property-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "username",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "upn",
        "jsonType.label" : "String"
      }
    } ]
  }, {
    "id" : "c9912791-0e61-489d-9a98-2fa6c6e82cd0",
    "name" : "profile",
    "description" : "OpenID Connect built-in scope: profile",
    "protocol" : "openid-connect",
    "attributes" : {
      "consent.screen.text" : "${profileScopeConsentText}",
      "display.on.consent.screen" : "true"
    },
    "protocolMappers" : [ {
      "id" : "9ceaee69-7b4f-44b0-8eac-6e8aee066505",
      "name" : "locale",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "locale",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "locale",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "07dbdf07-9849-46f9-b39a-ec5a17632141",
      "name" : "nickname",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "nickname",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "nickname",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "ff2555a8-dedd-456e-abf9-6f1221d36344",
      "name" : "birthdate",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "birthdate",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "birthdate",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "a8755a72-e94c-4619-ab90-30d1e429ff0d",
      "name" : "picture",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "picture",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "picture",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "c5aaeca5-d92c-4d0f-8128-a924883d065b",
      "name" : "username",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-property-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "username",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "preferred_username",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "ff806961-4fb4-4901-bdb7-33a4b6256034",
      "name" : "website",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "website",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "website",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "02753ee2-3152-4e39-9b8a-dfab97866a6f",
      "name" : "zoneinfo",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "zoneinfo",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "zoneinfo",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "080c009d-ad5e-4065-80af-46a2ef5cf1ea",
      "name" : "middle name",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "middleName",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "middle_name",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "6a4a691d-c6ab-4c0c-be30-22ed32358e8c",
      "name" : "updated at",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "updatedAt",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "updated_at",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "40747ae5-48ac-418b-9e10-444ea51d2916",
      "name" : "profile",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "profile",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "profile",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "1a4d110d-7460-4d98-a2bc-bb2ae3eaaaf9",
      "name" : "full name",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-full-name-mapper",
      "consentRequired" : false,
      "config" : {
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "userinfo.token.claim" : "true"
      }
    }, {
      "id" : "03b609b5-a540-4d55-84d7-899edbcf327c",
      "name" : "family name",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-property-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "lastName",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "family_name",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "4a531fbf-b249-479f-8018-39b20c647649",
      "name" : "gender",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-attribute-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "gender",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "gender",
        "jsonType.label" : "String"
      }
    }, {
      "id" : "4e10d657-e23e-4ed3-b2a6-3ee6012067f7",
      "name" : "given name",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-property-mapper",
      "consentRequired" : false,
      "config" : {
        "userinfo.token.claim" : "true",
        "user.attribute" : "firstName",
        "id.token.claim" : "true",
        "access.token.claim" : "true",
        "claim.name" : "given_name",
        "jsonType.label" : "String"
      }
    } ]
  }, {
    "id" : "033caa6b-b074-4510-b0ab-baadc38cb427",
    "name" : "roles",
    "description" : "OpenID Connect scope for add user roles to the access token",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "false",
      "display.on.consent.screen" : "true",
      "consent.screen.text" : "${rolesScopeConsentText}"
    },
    "protocolMappers" : [ {
      "id" : "5bbb0cf6-1339-4bad-88bd-4fb0d7681b2f",
      "name" : "audience resolve",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-audience-resolve-mapper",
      "consentRequired" : false,
      "config" : { }
    }, {
      "id" : "d7f2e07c-a608-457f-b83f-472d2854663c",
      "name" : "client roles",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-client-role-mapper",
      "consentRequired" : false,
      "config" : {
        "user.attribute" : "foo",
        "access.token.claim" : "true",
        "claim.name" : "resource_access.${client_id}.roles",
        "jsonType.label" : "String",
        "multivalued" : "true"
      }
    }, {
      "id" : "49b3f80a-abb4-40af-b50c-e333f0a9dcac",
      "name" : "realm roles",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-usermodel-realm-role-mapper",
      "consentRequired" : false,
      "config" : {
        "user.attribute" : "foo",
        "access.token.claim" : "true",
        "claim.name" : "realm_access.roles",
        "jsonType.label" : "String",
        "multivalued" : "true"
      }
    } ]
  }, {
    "id" : "98d59542-aeb8-4b84-a94a-f202af83986e",
    "name" : "user/Patient.read",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "582f5a8f-345a-4650-9fad-94214ddcef2e",
    "name" : "web-origins",
    "description" : "OpenID Connect scope for add allowed web origins to the access token",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "false",
      "display.on.consent.screen" : "false",
      "consent.screen.text" : ""
    },
    "protocolMappers" : [ {
      "id" : "e3f04eba-2c15-4fcc-b9ca-1a9d864c3542",
      "name" : "allowed web origins",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-allowed-origins-mapper",
      "consentRequired" : false,
      "config" : { }
    } ]
  }, {
    "id" : "e35fc9da-e7eb-4761-8c13-523130a6633f",
    "name" : "address",
    "description" : "OpenID Connect built-in scope: address",
    "protocol" : "openid-connect",
    "attributes" : {
      "consent.screen.text" : "${addressScopeConsentText}",
      "display.on.consent.screen" : "true"
    },
    "protocolMappers" : [ {
      "id" : "88517616-a144-4f28-b3ff-a980b1d730c0",
      "name" : "address",
      "protocol" : "openid-connect",
      "protocolMapper" : "oidc-address-mapper",
      "consentRequired" : false,
      "config" : {
        "user.attribute.formatted" : "formatted",
        "user.attribute.country" : "country",
        "user.attribute.postal_code" : "postal_code",
        "userinfo.token.claim" : "true",
        "user.attribute.street" : "street",
        "id.token.claim" : "true",
        "user.attribute.region" : "region",
        "access.token.claim" : "true",
        "user.attribute.locality" : "locality"
      }
    } ]
  }, {
    "id" : "9345fb58-c7bf-4f8a-9974-30657bbc1df4",
    "name" : "pims",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "12891f42-cdcb-4168-afbd-ae5b7e35d4e5",
    "name" : "user/Observation.read",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "9bd77372-1db4-4fc5-8a47-4ba2f25b42b6",
    "name" : "patient/Observation.read",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "8cfdea87-0cd8-4b2f-b59a-ae4f6e1ec5da",
    "name" : "user/Practitioner.read",
    "protocol" : "openid-connect",
    "attributes" : {
      "include.in.token.scope" : "true",
      "display.on.consent.screen" : "true"
    }
  }, {
    "id" : "fba4cf10-795d-42a9-8567-c2a6fdd76d00",
    "name" : "role_list",
    "description" : "SAML role list",
    "protocol" : "saml",
    "attributes" : {
      "consent.screen.text" : "${samlRoleListScopeConsentText}",
      "display.on.consent.screen" : "true"
    },
    "protocolMappers" : [ {
      "id" : "45687751-5de2-42a7-8644-febb3ee1006f",
      "name" : "role list",
      "protocol" : "saml",
      "protocolMapper" : "saml-role-list-mapper",
      "consentRequired" : false,
      "config" : {
        "single" : "false",
        "attribute.nameformat" : "Basic",
        "attribute.name" : "Role"
      }
    } ]
  } ],
  "defaultDefaultClientScopes" : [ "role_list", "profile", "email", "roles", "web-origins", "acr" ],
  "defaultOptionalClientScopes" : [ "offline_access", "address", "phone", "microprofile-jwt" ],
  "browserSecurityHeaders" : {
    "contentSecurityPolicyReportOnly" : "",
    "xContentTypeOptions" : "nosniff",
    "referrerPolicy" : "no-referrer",
    "xRobotsTag" : "none",
    "xFrameOptions" : "SAMEORIGIN",
    "contentSecurityPolicy" : "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
    "xXSSProtection" : "1; mode=block",
    "strictTransportSecurity" : "max-age=31536000; includeSubDomains"
  },
  "smtpServer" : { },
  "eventsEnabled" : false,
  "eventsListeners" : [ "jboss-logging" ],
  "enabledEventTypes" : [ ],
  "adminEventsEnabled" : false,
  "adminEventsDetailsEnabled" : false,
  "identityProviders" : [ ],
  "identityProviderMappers" : [ ],
  "components" : {
    "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy" : [ {
      "id" : "399aa45a-9bc0-410e-a7f4-1c8a45f0c8cc",
      "name" : "Allowed Client Scopes",
      "providerId" : "allowed-client-templates",
      "subType" : "anonymous",
      "subComponents" : { },
      "config" : {
        "allow-default-scopes" : [ "true" ]
      }
    }, {
      "id" : "59af3c95-7c81-432d-96b9-e7283e2882b4",
      "name" : "Trusted Hosts",
      "providerId" : "trusted-hosts",
      "subType" : "anonymous",
      "subComponents" : { },
      "config" : {
        "host-sending-registration-request-must-match" : [ "true" ],
        "client-uris-must-match" : [ "true" ]
      }
    }, {
      "id" : "f7202a67-c576-48a8-a965-77d77d693bc5",
      "name" : "Consent Required",
      "providerId" : "consent-required",
      "subType" : "anonymous",
      "subComponents" : { },
      "config" : { }
    }, {
      "id" : "2f4d50aa-30df-41a5-b778-27d1e0a02557",
      "name" : "Max Clients Limit",
      "providerId" : "max-clients",
      "subType" : "anonymous",
      "subComponents" : { },
      "config" : {
        "max-clients" : [ "200" ]
      }
    }, {
      "id" : "b32a39f1-2fa7-4669-b599-0dc90b673710",
      "name" : "Allowed Protocol Mapper Types",
      "providerId" : "allowed-protocol-mappers",
      "subType" : "authenticated",
      "subComponents" : { },
      "config" : {
        "allowed-protocol-mapper-types" : [ "saml-user-property-mapper", "oidc-usermodel-property-mapper", "oidc-usermodel-attribute-mapper", "saml-role-list-mapper", "saml-user-attribute-mapper", "oidc-address-mapper", "oidc-sha256-pairwise-sub-mapper", "oidc-full-name-mapper" ]
      }
    }, {
      "id" : "04e6b32d-3412-44dc-8026-639895a1d7aa",
      "name" : "Allowed Client Scopes",
      "providerId" : "allowed-client-templates",
      "subType" : "authenticated",
      "subComponents" : { },
      "config" : {
        "allow-default-scopes" : [ "true" ]
      }
    }, {
      "id" : "b558bd9d-2e2e-452f-ba3d-1932cf472e49",
      "name" : "Full Scope Disabled",
      "providerId" : "scope",
      "subType" : "anonymous",
      "subComponents" : { },
      "config" : { }
    }, {
      "id" : "06dc3ba2-a60f-40c2-9ab2-56dc2dd793b3",
      "name" : "Allowed Protocol Mapper Types",
      "providerId" : "allowed-protocol-mappers",
      "subType" : "anonymous",
      "subComponents" : { },
      "config" : {
        "allowed-protocol-mapper-types" : [ "oidc-full-name-mapper", "oidc-sha256-pairwise-sub-mapper", "saml-role-list-mapper", "oidc-usermodel-property-mapper", "oidc-address-mapper", "saml-user-attribute-mapper", "oidc-usermodel-attribute-mapper", "saml-user-property-mapper" ]
      }
    } ],
    "org.keycloak.keys.KeyProvider" : [ {
      "id" : "cba4d7cc-f67c-4a74-86cb-56007e990b61",
      "name" : "hmac-generated",
      "providerId" : "hmac-generated",
      "subComponents" : { },
      "config" : {
        "kid" : [ "1f8886fa-fb2f-45d7-882f-3469a67fbbd3" ],
        "secret" : [ "ubeZK4iYKB07jh3j03447rT7DD_Fbn-RCVpaihJktQnol1LrqBXhFuR1ejMx8vFxXshS2qZkzGfvtlhTM35dGg" ],
        "priority" : [ "100" ]
      }
    }, {
      "id" : "907c8b28-cbf1-43bb-88bc-ef48e6b1fe21",
      "name" : "rsa-generated",
      "providerId" : "rsa-generated",
      "subComponents" : { },
      "config" : {
        "privateKey" : [ "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" ],
        "certificate" : [ "MIICrzCCAZcCBgGBP5L8aTANBgkqhkiG9w0BAQsFADAbMRkwFwYDVQQDDBBDbGllbnRGaGlyU2VydmVyMB4XDTIyMDYwNzE5MDgyNloXDTMyMDYwNzE5MTAwNlowGzEZMBcGA1UEAwwQQ2xpZW50RmhpclNlcnZlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIbdJ7FCIENcy/hqo2zNprtkq1DUc2hQ3Yvda7I492j41x5FTsMTQt0VocNgf/t+rjDjWq0IJgaXoMwVghwEK1LoroYmG+V0HLSMtvBqPQw5Az2hoZaLtlXsbCJeU9wrPyyKks5IRSko8plMEjbGJ57QVuCCpJENdP4tn11vigdDu0YSa+6UWfs9MHeg+DN0yIykwdK1f+Mq7uVmau2gLK/1tOuF5HxHzyddD/jGQFZBZpYToWWMukqYyfHvq6wAZMPC8SOi5FxcAkIZ5eUXfl4hs28MBTqJDi8QbTkTZX5j2bes/ADWMn9ZDpF57bSOfsiubMITjC5u6f33lK7ZLoECAwEAATANBgkqhkiG9w0BAQsFAAOCAQEABosQqw9kM2+Wmo7qKOs6QFWqDZWkLQNljvvvuLnKLykm3krXhPUQuoWxlJkBMEtR+/FdZISREI121dP7VXR8qKOoReJqhRK8OU6Vz8raWuYS56DCu+bNiCx/urJKpRBDtKscTxI3ucCEPvTJF2jcKKF80AXyQuk7AxEyPEDof81Son0jaULHXj+sGlt7+Rb/5JQ5/9rUu/QWu7zKu/RBAOG5Ct83KrIec0C7izRyNVfUQs+INSDTPcfJi4GYvTIcr14RSIF5XJPQ/HMYNXsrOFGZ4D/k6V6HehSQnOxGWLGQEKSZrqJ/2C8cV0yc0w++XkM4Ci4vbBfAapN688Xdtw==" ],
        "priority" : [ "100" ]
      }
    }, {
      "id" : "014aa042-53ee-498b-9200-b0b47db927d2",
      "name" : "aes-generated",
      "providerId" : "aes-generated",
      "subComponents" : { },
      "config" : {
        "kid" : [ "22b116d2-339e-4fcb-ae16-3647e8f50559" ],
        "secret" : [ "H7s-NZ0IooON2NfAimjvig" ],
        "priority" : [ "100" ]
      }
    } ]
  },
  "internationalizationEnabled" : false,
  "supportedLocales" : [ ],
  "authenticationFlows" : [ {
    "id" : "5496ebaf-2068-4b67-834d-cd1ae424e5de",
    "alias" : "Handle Existing Account",
    "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider",
    "providerId" : "basic-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "idp-confirm-link",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticatorFlow" : true,
      "requirement" : "REQUIRED",
      "priority" : 20,
      "autheticatorFlow" : true,
      "flowAlias" : "Handle Existing Account - Alternatives - 0",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "c9a938eb-c2b1-41e8-ae22-bcb47c6425be",
    "alias" : "Handle Existing Account - Alternatives - 0",
    "description" : "Subflow of Handle Existing Account with alternative executions",
    "providerId" : "basic-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "idp-email-verification",
      "authenticatorFlow" : false,
      "requirement" : "ALTERNATIVE",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticatorFlow" : true,
      "requirement" : "ALTERNATIVE",
      "priority" : 20,
      "autheticatorFlow" : true,
      "flowAlias" : "Verify Existing Account by Re-authentication",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "d0276ee5-8b8a-4638-90a3-49a2f5d77a5c",
    "alias" : "Verify Existing Account by Re-authentication",
    "description" : "Reauthentication of existing account",
    "providerId" : "basic-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "idp-username-password-form",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticatorFlow" : true,
      "requirement" : "CONDITIONAL",
      "priority" : 20,
      "autheticatorFlow" : true,
      "flowAlias" : "Verify Existing Account by Re-authentication - auth-otp-form - Conditional",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "bd4da188-4623-46b3-a650-1c68e303f5b2",
    "alias" : "Verify Existing Account by Re-authentication - auth-otp-form - Conditional",
    "description" : "Flow to determine if the auth-otp-form authenticator should be used or not.",
    "providerId" : "basic-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "conditional-user-configured",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "auth-otp-form",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 20,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "ea340ccb-02fc-40dc-a225-9fc0835787c6",
    "alias" : "browser",
    "description" : "browser based authentication",
    "providerId" : "basic-flow",
    "topLevel" : true,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "auth-cookie",
      "authenticatorFlow" : false,
      "requirement" : "ALTERNATIVE",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "auth-spnego",
      "authenticatorFlow" : false,
      "requirement" : "DISABLED",
      "priority" : 20,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "identity-provider-redirector",
      "authenticatorFlow" : false,
      "requirement" : "ALTERNATIVE",
      "priority" : 25,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticatorFlow" : true,
      "requirement" : "ALTERNATIVE",
      "priority" : 30,
      "autheticatorFlow" : true,
      "flowAlias" : "forms",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "1f0ef709-ad46-45ee-8f27-8e25050d331e",
    "alias" : "clients",
    "description" : "Base authentication for clients",
    "providerId" : "client-flow",
    "topLevel" : true,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "client-secret",
      "authenticatorFlow" : false,
      "requirement" : "ALTERNATIVE",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "client-jwt",
      "authenticatorFlow" : false,
      "requirement" : "ALTERNATIVE",
      "priority" : 20,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "client-secret-jwt",
      "authenticatorFlow" : false,
      "requirement" : "ALTERNATIVE",
      "priority" : 30,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "48c0ef55-c7da-464d-9ff3-faa5f806d165",
    "alias" : "direct grant",
    "description" : "OpenID Connect Resource Owner Grant",
    "providerId" : "basic-flow",
    "topLevel" : true,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "direct-grant-validate-username",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "direct-grant-validate-password",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 20,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticatorFlow" : true,
      "requirement" : "CONDITIONAL",
      "priority" : 30,
      "autheticatorFlow" : true,
      "flowAlias" : "direct grant - direct-grant-validate-otp - Conditional",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "d514dd45-49e0-4e1c-bb96-e6ac0bce7da9",
    "alias" : "direct grant - direct-grant-validate-otp - Conditional",
    "description" : "Flow to determine if the direct-grant-validate-otp authenticator should be used or not.",
    "providerId" : "basic-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "conditional-user-configured",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "direct-grant-validate-otp",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 20,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "27bda700-d22a-4779-a5d7-9e3e29f86bf6",
    "alias" : "docker auth",
    "description" : "Used by Docker clients to authenticate against the IDP",
    "providerId" : "basic-flow",
    "topLevel" : true,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "docker-http-basic-authenticator",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "91b7e176-d00a-416d-9c93-236b04b04d1c",
    "alias" : "first broker login",
    "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
    "providerId" : "basic-flow",
    "topLevel" : true,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticatorConfig" : "review profile config",
      "authenticator" : "idp-review-profile",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticatorFlow" : true,
      "requirement" : "REQUIRED",
      "priority" : 20,
      "autheticatorFlow" : true,
      "flowAlias" : "first broker login - Alternatives - 0",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "5de7cf05-41f4-4896-bb6f-6374c57da6c7",
    "alias" : "first broker login - Alternatives - 0",
    "description" : "Subflow of first broker login with alternative executions",
    "providerId" : "basic-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticatorConfig" : "create unique user config",
      "authenticator" : "idp-create-user-if-unique",
      "authenticatorFlow" : false,
      "requirement" : "ALTERNATIVE",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticatorFlow" : true,
      "requirement" : "ALTERNATIVE",
      "priority" : 20,
      "autheticatorFlow" : true,
      "flowAlias" : "Handle Existing Account",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "14588e2e-8e27-47f4-9f4e-c9c203252c6b",
    "alias" : "forms",
    "description" : "Username, password, otp and other auth forms.",
    "providerId" : "basic-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "auth-username-password-form",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticatorFlow" : true,
      "requirement" : "CONDITIONAL",
      "priority" : 20,
      "autheticatorFlow" : true,
      "flowAlias" : "forms - auth-otp-form - Conditional",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "98dd3e55-e2b6-4de9-b639-0731ceab011a",
    "alias" : "forms - auth-otp-form - Conditional",
    "description" : "Flow to determine if the auth-otp-form authenticator should be used or not.",
    "providerId" : "basic-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "conditional-user-configured",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "auth-otp-form",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 20,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "7ff74ca3-83ab-4f47-81e2-bde03f8b387a",
    "alias" : "registration",
    "description" : "registration flow",
    "providerId" : "basic-flow",
    "topLevel" : true,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "registration-page-form",
      "authenticatorFlow" : true,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : true,
      "flowAlias" : "registration form",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "adcd7848-1312-4449-bbd9-7969d1aa993e",
    "alias" : "registration form",
    "description" : "registration form",
    "providerId" : "form-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "registration-user-creation",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 20,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "registration-profile-action",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 40,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "registration-password-action",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 50,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "registration-recaptcha-action",
      "authenticatorFlow" : false,
      "requirement" : "DISABLED",
      "priority" : 60,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "479ce848-ce30-416f-8f06-d4396ba6a491",
    "alias" : "reset credentials",
    "description" : "Reset credentials for a user if they forgot their password or something",
    "providerId" : "basic-flow",
    "topLevel" : true,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "reset-credentials-choose-user",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "reset-credential-email",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 20,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "reset-password",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 30,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticatorFlow" : true,
      "requirement" : "CONDITIONAL",
      "priority" : 40,
      "autheticatorFlow" : true,
      "flowAlias" : "reset credentials - reset-otp - Conditional",
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "07790504-e8fa-4cdb-ad56-12cc0d1c11c7",
    "alias" : "reset credentials - reset-otp - Conditional",
    "description" : "Flow to determine if the reset-otp authenticator should be used or not.",
    "providerId" : "basic-flow",
    "topLevel" : false,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "conditional-user-configured",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    }, {
      "authenticator" : "reset-otp",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 20,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    } ]
  }, {
    "id" : "3192f3b4-05a2-49f0-8874-c6ff1a50b828",
    "alias" : "saml ecp",
    "description" : "SAML ECP Profile Authentication Flow",
    "providerId" : "basic-flow",
    "topLevel" : true,
    "builtIn" : true,
    "authenticationExecutions" : [ {
      "authenticator" : "http-basic-authenticator",
      "authenticatorFlow" : false,
      "requirement" : "REQUIRED",
      "priority" : 10,
      "autheticatorFlow" : false,
      "userSetupAllowed" : false
    } ]
  } ],
  "authenticatorConfig" : [ {
    "id" : "cdf42757-bc2b-4204-937e-f6c8efea33b9",
    "alias" : "create unique user config",
    "config" : {
      "require.password.update.after.registration" : "false"
    }
  }, {
    "id" : "d7db29ef-6394-438a-9423-329055f24e08",
    "alias" : "review profile config",
    "config" : {
      "update.profile.on.first.login" : "missing"
    }
  } ],
  "requiredActions" : [ {
    "alias" : "CONFIGURE_TOTP",
    "name" : "Configure OTP",
    "providerId" : "CONFIGURE_TOTP",
    "enabled" : true,
    "defaultAction" : false,
    "priority" : 10,
    "config" : { }
  }, {
    "alias" : "delete_account",
    "name" : "Delete Account",
    "providerId" : "delete_account",
    "enabled" : false,
    "defaultAction" : false,
    "priority" : 20,
    "config" : { }
  }, {
    "alias" : "TERMS_AND_CONDITIONS",
    "name" : "Terms and Conditions",
    "providerId" : "TERMS_AND_CONDITIONS",
    "enabled" : false,
    "defaultAction" : false,
    "priority" : 30,
    "config" : { }
  }, {
    "alias" : "UPDATE_PASSWORD",
    "name" : "Update Password",
    "providerId" : "UPDATE_PASSWORD",
    "enabled" : true,
    "defaultAction" : false,
    "priority" : 40,
    "config" : { }
  }, {
    "alias" : "UPDATE_PROFILE",
    "name" : "Update Profile",
    "providerId" : "UPDATE_PROFILE",
    "enabled" : true,
    "defaultAction" : false,
    "priority" : 50,
    "config" : { }
  }, {
    "alias" : "VERIFY_EMAIL",
    "name" : "Verify Email",
    "providerId" : "VERIFY_EMAIL",
    "enabled" : true,
    "defaultAction" : false,
    "priority" : 60,
    "config" : { }
  }, {
    "alias" : "update_user_locale",
    "name" : "Update User Locale",
    "providerId" : "update_user_locale",
    "enabled" : true,
    "defaultAction" : false,
    "priority" : 1000,
    "config" : { }
  } ],
  "browserFlow" : "browser",
  "registrationFlow" : "registration",
  "directGrantFlow" : "direct grant",
  "resetCredentialsFlow" : "reset credentials",
  "clientAuthenticationFlow" : "clients",
  "dockerAuthenticationFlow" : "docker auth",
  "attributes" : {
    "cibaBackchannelTokenDeliveryMode" : "poll",
    "cibaExpiresIn" : "120",
    "cibaAuthRequestedUserHint" : "login_hint",
    "oauth2DeviceCodeLifespan" : "600",
    "clientOfflineSessionMaxLifespan" : "0",
    "oauth2DevicePollingInterval" : "5",
    "clientSessionIdleTimeout" : "0",
    "parRequestUriLifespan" : "60",
    "clientSessionMaxLifespan" : "0",
    "clientOfflineSessionIdleTimeout" : "0",
    "cibaInterval" : "5",
    "realmReusableOtpCode" : "false"
  },
  "keycloakVersion" : "22.0.1",
  "userManagedAccessAllowed" : false,
  "clientProfiles" : {
    "profiles" : [ ]
  },
  "clientPolicies" : {
    "policies" : [ ]
  }
}