User-authentication (Section)#

Path: /profiles/profile{id, type}/settings/authorization-server/client-store/config-backed/client{id}/user-authentication

Parameters#

NameTypeRequiredDefaultDescription
allowed-authenticatorsmulti-value, leafrefoptionalThe list of allowed authenticators for this client
authenticator-filtersmulti-value, leafrefoptionalThe list of authenticator-filters for this client
required-claimsmulti-value, stringoptionalA list of named claims that must be required by the authenticator when authenticating the user.
context-infostringoptionalInformation that will be displayed to the user when authenticating the client
force-authnbooleanoptionalOptional default setting whether user authentication is forced at all times.
freshnessuint32optionalOptional maximum age in seconds after which re-authentication must take place.
localenon-empty-stringoptionalOptional override for default locale.
frontchannel-logout-uriurioptionalOptional uri of the client that is called upon user logout when attempting front channel logout. Requires OpenId Connect to be enabled.
backchannel-logout-uriurioptionalOptional uri of the client that is called upon user logout when attempting back channel logout. Requires OpenId Connect to be enabled.
http-clientleafrefoptionalThe HTTP client that will be used when delivering the logout token to the backchannel logout uri
allowed-post-logout-redirect-urismulti-value, urioptionalThe optional list of URIs that is allowed for the client to use as post logout redirect uri. Requires OpenId Connect to be enabled.
template-areanon-empty-stringoptional

Subsections#

NameTypeDescription
ui-experience Section(experimental) Configure which UI experience to use. Defaults to the UI experience configured for the system. This can be overridden for specific client applications in the related profiles.

Was this helpful?