ansible-infra/resources/chaosknoten/keycloak/auth_flows/browser.yaml

31 lines
1.1 KiB
YAML

---
realm: ccchh
alias: passkey and 2FA
description: Login flow with passkey and proper 2FA handling.
providerId: basic-flow
authenticationExecutions:
- subFlow: pk2fa-login
requirement: REQUIRED
authenticationExecutions:
- providerId: auth-cookie
requirement: ALTERNATIVE
- subFlow: pk2fa-authentication
requirement: ALTERNATIVE
authenticationExecutions:
- providerId: auth-username-password-form
requirement: REQUIRED
- subFlow: pk2fa-conditional-2fa
requirement: CONDITIONAL
authenticationExecutions:
- providerId: conditional-credential
requirement: REQUIRED
authenticationConfig:
alias: pk2fa-conditional-2fa-passwordless-conditional
config:
credentials: webauthn-passwordless
- providerId: conditional-user-configured
requirement: REQUIRED
- providerId: webauthn-authenticator
requirement: ALTERNATIVE
- providerId: auth-otp-form
requirement: ALTERNATIVE