{
  "Logging": {
    "LogLevel": {
      "Default": "Trace",
      "Microsoft": "Warning",
      "Microsoft.Hosting.Lifetime": "Information",
      "Microsoft.AspNetCore.Hosting.Diagnostics": "Information"
    }
  },
  "AllowedHosts": "*",
  "Localization": {
    "DefaultCulture": "ru-RU"
  },
  "AuthenticationServer": {
    "Url": "https://indeed-1.company.local/am/core/",
    "IsIgnoreCertErrors": false
  },
  "AuthenticationSettings": {
    "SessionExpirationTimeInMinutes": 40,
    "Domains": [
      ""
    ],
    "LoginFormats": [
      {
        "ServiceProvider": "urn:indeedid:emc",
        "InLoginFormat": "Name",
        "OutLoginFormat": "SamCompatibleName"
      },
      {
        "ServiceProvider": "urn:indeedid:selfservice",
        "InLoginFormat": "Name",
        "OutLoginFormat": "SamCompatibleName"
      },
      {
        "ServiceProvider": "google.com",
        "InLoginFormat": "Email",
        "OutLoginFormat": "SamCompatibleName"
      },
      {
        "ServiceProvider": "urn:indeedid:mobiledeviceprovisioning",
        "InLoginFormat": "Name",
        "OutLoginFormat": "SamCompatibleName"
      },
      {
        "ServiceProvider": "http://localhost:8080/auth/realms/master",
        "InLoginFormat": "Name",
        "OutLoginFormat": "PrincipalName"
      }
    ],
    "ServiceProvidersWithDeniedSso": [],
    "CustomAttributes": [
      {
        "ServiceProvider": "http://localhost:8080/auth/realms/master",
        "Attributes": [
          {
            "Name": "email",
            "UserNameFormat": "email"
          },
          {
            "Name": "given_name",
            "UserNameFormat": "firstName"
          },
          {
            "Name": "family_name",
            "UserNameFormat": "lastName"
          },
          {
            "Name": "preferred_username",
            "UserNameFormat": "PrincipalName"
          }                       
        ]
      }
    ],
    "AuthenticationMethods": [
      {
        "Name": "Passcode",
        "Providers": [
          "F696F05D-5466-42b4-BF52-21BEE1CB9529"
        ]
      },
      {
        "Name": "HOTP_Passcode",
        "Providers": [
          "AD3FBA95-AE99-4773-93A3-6530A29C7556",
          "F696F05D-5466-42b4-BF52-21BEE1CB9529"
        ]
      },
      {
        "Name": "HadrwareTOTP",
        "Providers": [
          "CEB3FEAF-86ED-4A5A-BD3F-6A7B6E60CA05"
        ]
      },
      {
        "Name": "Windows Password",
        "Providers": [
          "CF189AF5-01C5-469D-A859-A8F2F41ED153"
        ]
      },
      {
        "Name": "SoftwareTOTP",
        "Providers": [
          "0FA7FDB4-3652-4B55-B0C0-469A1E9D31F0"
        ]
      }
    ],
    "SelfService": {
      "AllowWinPwdIfAuthMethodsAreNotAvailable": false
    }
  },
  "LogServer": {
    "AppId": "ea",
    "Component": "server",
    "EventCache": {
      "Directory": "./EventCache",
      "SendingIntervalSec": 600
    },
    "Server": {
      "Url": "https://indeed-1.company.local/ls/api/",
      "Certificate": {
        "Thumbprint": "",
        "FilePath": "",
        "FilePassword": ""
      }
    },
    "DetailsSettings": {
      "CatalogObjectField": "Name",
      "ComputerField": "Ip"
    }
  },
  "SAML": {
    "$schema": "https://www.componentspace.com/schemas/saml-config-schema-v1.0.json",
    "Configurations": [
      {
        "LocalIdentityProviderConfiguration": {
          "Name": "urn:indeedid:saml_idp",
          "SingleSignOnServiceUrl": "https://indeed.company.com/am/idp/Account/SsoService",
          "LocalCertificates": [
            {
              "Thumbprint": "57CB4D6B2884DD36869F059BDA9CFAAB5599E933"
            }
          ]
        },
        "PartnerServiceProviderConfigurations": [
          {
            "Name": "urn:indeedid:selfservice",
            "SingleLogoutServiceUrl": "SELF_SERVICE_URL/Account/SLOService",
            "PartnerCertificates": [
              {
                "Thumbprint": ""
              }
            ]
          },
		{
            "Name": "http://localhost:8080/auth/realms/master",
            "SignSamlResponse": true,
			"ValidAssertionConsumerServiceUrls": [
			"http://localhost:8080"
			],
			"SingleLogoutServiceUrl": "http://localhost:8080/auth/realms/master/broker/saml/endpoint"
        },		  
          {
            "Name": "urn:indeedid:emc",
            "SingleLogoutServiceUrl": "https://indeed-1.company.local/am/mc/Account/SLOService",
            "PartnerCertificates": [
              {
                "Thumbprint": "54AE8F28072152042B8A95F0B375DA504D7C0699"
              }
            ]
          },
          {
            "Name": "https://ExampleServiceProvider",
            "Description": "Example Service Provider",
            "WantAuthnRequestSigned": true,
            "SignSamlResponse": true,
            "EncryptAssertion": true,
            "SignLogoutRequest": true,
            "SignLogoutResponse": true,
            "SignAssertion": true,
            "WantLogoutRequestSigned": true,
            "WantLogoutResponseSigned": true,
            "DisableInboundLogout": false,
            "DisableOutboundLogout": false,
            "DisableInResponseToCheck": false,
            "DisableDestinationCheck": false,
            "DisablePendingLogoutCheck": true,
            "LogoutRequestLifeTime": "00:03:00",
            "AssertionConsumerServiceUrl": "https://localhost:44360/SAML/AssertionConsumerService",
            "ValidAssertionConsumerServiceUrls": [
              "https://localhost:44360/SAML/AssertionConsumerService"
            ],
            "SingleLogoutServiceUrl": "https://localhost:44360/SAML/SingleLogoutService",
            "ArtifactResolutionServiceUrl": "https://localhost:44360/SAML/ArtifactResolutionService",
            "DigestAlgorithm": "http://www.w3.org/2001/04/xmlenc#sha256",
            "SignatureAlgorithm": "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256",
            "KeyEncryptionAlgorithm": "http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p",
            "DataEncryptionAlgorithm": "http://www.w3.org/2001/04/xmlenc#aes256-cbc",
            "UseEmbeddedCertificate": false,
            "PartnerCertificates": [
              {
                "Thumbprint": "374ad45f1839d44530fc120ad0a5ba31b19b2c10"
              }
            ]
          }
        ]
      }
    ]
  },
"OpenIddict": {
  "Server": {
    "Scopes": [ "openid", "profile", "email", "offline_access" ]
  }
}, 
"OIDC": {
  "IDP": {
    "CertificateThumbprint": "57CB4D6B2884DD36869F059BDA9CFAAB5599E933"
  },
  "Scopes": [
    {
      "Name": "profile",
      "DisplayName": "User profile information",
      "Claims": [
        "name",
        "preferred_username",
        "given_name",
        "family_name"
      ]
    },
    {
      "Name": "email",
      "DisplayName": "Email address",
      "Claims": [
        "email"
      ]
    }
  ],
  "Clients": [
    {
      "ClientId": "keycloak-local",
      "ClientSecret": "super_secret_12345",
      "DisplayName": "Keycloak Local",
      "Permissions": [
        "ept:authorization",
		"ept:device",
		"ept:introspection",
		"ept:logout",
		"ept:revocation",
		"ept:token",
		"gt:authorization_code",
		"gt:client_credentials",
		"gt:urn:ietf:params:oauth:grant-type:device_code",
		"gt:implicit",
		"gt:password",
		"gt:refresh_token",
		"rst:code",
		"rst:code id_token",
		"rst:code id_token token",
		"rst:code token",
		"rst:id_token",
		"rst:id_token token",
		"rst:none",
		"rst:token",
		"scp:address",
		"scp:email",
		"scp:phone",
		"scp:profile",
		"scp:roles"
      ],
      "RedirectUris": [
        "http://localhost:8080/auth/realms/my-realms/broker/indeed/endpoint"
      ],
      "PostLogoutRedirectUris": [
        "https://indeed-1.company.local/am/idp/connect/logout"
      ],
      "Requirements": [
      ]
    }
  ]
}
}