parameter

description

value

realm

name of the realm in Keycloak

url

***

patterns for request origin

.*{tenant name}.vx.your-iam.com.*

client id for contextual logs

stats-dashboard-client

Secret for contextual logs:

Human-readable clients related to client-id in keycloak:

Translation of audit terms to understandable view in Audit logs. 

• vx-selfservice: Selfservice
• vx-vault: Vault

Human-readable authentication method related to auth-method in keycloak:

Translation of audit terms to understandable view in Audit logs.

• openid-connect: SSO login

Human-readable provider related to provider alias in keycloak:

Translation of audit terms to understandable view in Audit logs.

• safewalk-saml: QR/username + password
• fido2: FIDO2
• keycloak-oidc: Certificate

JWKs

If filled Token validation will use JSON Web Key store in here instead of downloading current certificates. Structure based on rfc-7517 (https://datatracker.ietf.org/doc/html/rfc7517). RH-SSO provides this certificates on URL: {rh-sso address}/auth/realms/{realm}/protocol/openid-connect/certs