example.config.json

{
	"alias": "demo-eidas",
	"displayName": "eID.AS",
	"internalId": "192b8eb2-1b54-4607-ae9c-65faaac4dced",
	"providerId": "eidas-saml",
	"enabled": true,
	"updateProfileFirstLoginMode": "on",
	"trustEmail": false,
	"storeToken": false,
	"addReadTokenRoleOnCreate": false,
	"authenticateByDefault": false,
	"linkOnly": false,
	"firstBrokerLoginFlowAlias": "CHANGE ME",
	"config": {
		"hideOnLoginPage": "true",
		"validateSignature": "false",
		"signingCertificate": "CHANGE ME",
		"nameIDPolicyFormat": "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent",
		"postBindingResponse": "true",
		"entityId": "https://MYDOMAIN/realms/MYREALM/broker/demo-eidas/endpoint/descriptor",
		"backchannelSupported": "false",
		"levelOfAssurance": "http://eidas.europa.eu/LoA/low",
		"signSpMetadata": "true",
		"signatureAlgorithm": "RSA_SHA512_MGF1",
		"wantAssertionsEncrypted": "true",
		"xmlSigKeyInfoKeyNameTransformer": "KEY_ID",
		"serviceProviderCountryOfOrigin": "EL",
		"useJwksUrl": "true",
		"allowCreate": "true",
		"requestedAttributes": "[{\"Name\":\"http://eidas.europa.eu/attributes/naturalperson/PersonIdentifier\", \n  \"NameFormat\":  \"urn:oasis:names:tc:SAML:2.0:attrname-format:uri\", \"isRequired\":true\n }, \n {\"Name\":\"http://eidas.europa.eu/attributes/naturalperson/CurrentFamilyName\",\n  \"NameFormat\":  \"urn:oasis:names:tc:SAML:2.0:attrname-format:uri\", \"isRequired\":true},\n {\"Name\":\"http://eidas.europa.eu/attributes/naturalperson/CurrentGivenName\",\n  \"NameFormat\": \"urn:oasis:names:tc:SAML:2.0:attrname-format:uri\", \"isRequired\":true},\n {\"Name\":\"http://eidas.europa.eu/attributes/naturalperson/DateOfBirth\",\n  \"NameFormat\": \"urn:oasis:names:tc:SAML:2.0:attrname-format:uri\", \"isRequired\":true},\n {\"Name\":\"http://eidas.europa.eu/attributes/naturalperson/Gender\",\n  \"NameFormat\": \"urn:oasis:names:tc:SAML:2.0:attrname-format:uri\", \"isRequired\":false}\n]",
		"authnContextComparisonType": "minimum",
		"postBindingAuthnRequest": "true",
		"syncMode": "IMPORT",
		"forceAuthn": "true",
		"singleSignOnServiceUrl": "CHANGE ME",
		"wantAuthnRequestsSigned": "true",
		"principalType": "SUBJECT"
	}
}