testsaml-with-mappers.json

{
    "id": "demo",
    "realm": "demo",
    "enabled": true,
    "sslRequired": "external",
    "registrationAllowed": true,
    "resetPasswordAllowed": true,
    "privateKey": "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",
    "publicKey": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrVrCuTtArbgaZzL1hvh0xtL5mc7o0NqPVnYXkLvgcwiC3BjLGw1tGEGoJaXDuSaRllobm53JBhjx33UNv+5z/UMG4kytBWxheNVKnL6GgqlNabMaFfPLPCF8kAgKnsi79NMo+n6KnSY8YeUmec/p2vjO2NjsSAVcWEQMVhJ31LwIDAQAB",
    "requiredCredentials": [ "password" ],
    "passwordPolicy": "hashIterations(1)",
    "defaultRoles": [ "user" ],
    "smtpServer": {
        "from": "[email protected]",
        "host": "localhost",
        "port":"3025"
    },
    "eventsEnabled" : true,
    "eventsListeners" : [ "jboss-logging" ],
    "enabledEventTypes" : [ ],
    "users" : [
        {
            "username" : "bburke",
            "enabled": true,
            "email" : "[email protected]",
            "credentials" : [
                { "type" : "password",
                    "value" : "password" }
            ],
            "attributes" : {
                "http://schemas.xmlsoap.org/claims/Building" : "31 3-024",
                "http://schemas.xmlsoap.org/claims/PhoneNumber" : "+4122767354",
                "http://schemas.xmlsoap.org/claims/Federation" : "CERN",
                "http://schemas.xmlsoap.org/claims/uidNumber" : "14825",
                "http://schemas.xmlsoap.org/claims/EmailAddress" : "[email protected]",
                "http://schemas.xmlsoap.org/claims/CommonName" : "lurodrig",
                "http://schemas.xmlsoap.org/claims/Lastname" : "Rodriguez Fernandez",
                "http://schemas.xmlsoap.org/claims/IdentityClass" : "CERN Registered",
                "http://schemas.xmlsoap.org/claims/PersonID" : "720335",
                "http://schemas.xmlsoap.org/claims/Department" : "IT/DB",
                "http://schemas.xmlsoap.org/claims/UPN" : "[email protected]",
                "http://schemas.xmlsoap.org/claims/gidNumber" : "2763",
                "http://schemas.xmlsoap.org/claims/FirstName" : "Luis",
                "http://schemas.microsoft.com/ws/2008/06/identity/claims/role" : "CERN Users",
                "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" : "[email protected]",
                "http://schemas.xmlsoap.org/claims/MobileNumber" : "+41754110558",
                "http://schemas.xmlsoap.org/claims/PreferredLanguage" : "FR",
                "http://schemas.xmlsoap.org/claims/AuthLevel" : "Normal",
                "http://schemas.xmlsoap.org/claims/HomeInstitute" : "CERN"
            },
            "realmRoles": ["manager", "user"],
            "applicationRoles": {
                "account": [ "it-dep-db-dar","dbondemand-users","sc-dep-dist-reports","oracle-em-ais-mw-users" ]
            }
        }
    ],
    "clients": [
        {
            "clientId" : "http://localhost:8082/web-module-3/",
            "name": "http://localhost:8082/web-module-3/",
            "enabled": true,
            "protocol": "saml",
            "fullScopeAllowed": true,
            "baseUrl": "http://localhost:8082/web-module-3",
            "redirectUris": [
                "http://localhost:8082/web-module-3/*"
            ],
            "attributes": {
                "saml_assertion_consumer_url_post": "http://localhost:8082/web-module-3/saml",
                "saml_assertion_consumer_url_redirect": "http://localhost:8082/web-module-3/saml",
                "saml_single_logout_service_url_post": "http://localhost:8082/web-module-3/saml2slo/saml",
                "saml_single_logout_service_url_redirect": "http://localhost:8082/web-module-3/saml2slo/saml",
                "saml.server.signature": "true",
                "saml.signature.algorithm": "RSA_SHA256",
                "saml.client.signature": "true",
                "saml.authnstatement": "true",
                "saml.signing.certificate": "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"
            },
            "protocolMappers": [
                {
                    "name": "HrIdMapper",
                    "protocol": "saml",
                    "protocolMapper": "saml-user-attribute-mapper",
                    "consentRequired": false,
                    "config": {
                        "user.attribute": "http://schemas.xmlsoap.org/claims/PersonID",
                        "friendly.name": "PersonID",
                        "attribute.name": "http://schemas.xmlsoap.org/claims/PersonID",
                        "attribute.nameformat": "Unspecified"
                    }
                },
                {
                    "name": "PreferredLanguageMapper",
                    "protocol": "saml",
                    "protocolMapper": "saml-user-attribute-mapper",
                    "consentRequired": false,
                    "config": {
                        "user.attribute": "http://schemas.xmlsoap.org/claims/PreferredLanguage",
                        "friendly.name": "PreferredLanguage",
                        "attribute.name": "http://schemas.xmlsoap.org/claims/PreferredLanguage",
                        "attribute.nameformat": "Unspecified"
                    }
                },
                {
                    "name": "IdentityClassMapper",
                    "protocol": "saml",
                    "protocolMapper": "saml-user-attribute-mapper",
                    "consentRequired": false,
                    "config": {
                        "attribute.nameformat": "Unspecified",
                            "user.attribute": "http://schemas.xmlsoap.org/claims/IdentityClass",
                            "friendly.name": "IdentityClass",
                            "attribute.name": "http://schemas.xmlsoap.org/claims/IdentityClass"
                    }
                }
            ]
        },
        {
            "clientId" : "http://localhost:8082/web-module-4/",
            "name": "http://localhost:8082/web-module-4/",
            "enabled": true,
            "protocol": "saml",
            "fullScopeAllowed": true,
            "baseUrl": "http://localhost:8082/web-module-4",
            "redirectUris": [
                "http://localhost:8082/web-module-4/*"
            ],
            "attributes": {
                "saml_assertion_consumer_url_post": "http://localhost:8082/web-module-4/saml",
                "saml_assertion_consumer_url_redirect": "http://localhost:8082/web-module-4/saml",
                "saml_single_logout_service_url_post": "http://localhost:8082/web-module-4/saml2slo/saml",
                "saml_single_logout_service_url_redirect": "http://localhost:8082/web-module-4/saml2slo/saml",
                "saml.server.signature": "true",
                "saml.signature.algorithm": "RSA_SHA256",
                "saml.client.signature": "true",
                "saml.authnstatement": "true",
                "saml.signing.certificate": "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"
            },
            "protocolMappers": [
                {
                    "name": "HrIdMapper",
                    "protocol": "saml",
                    "protocolMapper": "saml-user-attribute-mapper",
                    "consentRequired": false,
                    "config": {
                        "user.attribute": "http://schemas.xmlsoap.org/claims/PersonID",
                        "friendly.name": "PersonID",
                        "attribute.name": "http://schemas.xmlsoap.org/claims/PersonID",
                        "attribute.nameformat": "Unspecified"
                    }
                },
                {
                    "name": "PreferredLanguageMapper",
                    "protocol": "saml",
                    "protocolMapper": "saml-user-attribute-mapper",
                    "consentRequired": false,
                    "config": {
                        "user.attribute": "http://schemas.xmlsoap.org/claims/PreferredLanguage",
                        "friendly.name": "PreferredLanguage",
                        "attribute.name": "http://schemas.xmlsoap.org/claims/PreferredLanguage",
                        "attribute.nameformat": "Unspecified"
                    }
                },
                {
                    "name": "IdentityClassMapper",
                    "protocol": "saml",
                    "protocolMapper": "saml-user-attribute-mapper",
                    "consentRequired": false,
                    "config": {
                        "attribute.nameformat": "Unspecified",
                            "user.attribute": "http://schemas.xmlsoap.org/claims/IdentityClass",
                            "friendly.name": "IdentityClass",
                            "attribute.name": "http://schemas.xmlsoap.org/claims/IdentityClass"
                    }
                }
            ]
        }
    ],
    "groups" : [
        {
            "name": "top",
            "attributes": {
                "topAttribute": ["true"]

            },
            "realmRoles": ["manager"],
            "subGroups": [
                {
                    "name": "level2",
                    "realmRoles": ["user"],
                    "attributes": {
                        "level2Attribute": ["true"]

                    }
                }
            ]
        }
    ],
    "roles" : {
        "realm" : [
            {
                "name": "manager",
                "description": "Have Manager privileges"
            },
            {
                "name": "user",
                "description": "Have User privileges"
            },
            {
                "name": "admin",
                "description": "Administrator privileges"
            }
        ]
    }
}