WildFly Full 22 Model Reference

  1. home
  2. subsystem=security
  3. security-domain
Deprecated Since 1.3.0
The Security subsystem is deprecated and may be removed, significantly revised, or limited to managed domain legacy server use in future versions.

Configures a security domain. Authentication, authorization, ACL, mapping, auditing and identity trust are configured here.

Children (7)

  • acl Access control list configuration. Configures a list of ACL modules to be used.
    • classic Access control list configuration. Configures a list of ACL modules to be used.
  • audit Auditing configuration. Configures a list of provider modules to be used.
    • classic Auditing configuration. Configures a list of provider modules to be used.
  • authentication "Authentication configuration for this domain. Can either be classic or jaspi.
    • classic Traditional authentication configuration. Configures a list of login modules to be used.
    • jaspi JASPI authentication configuration.
  • authorization Authorization configuration. Configures a list of authorization policy modules to be used.
    • classic Authorization configuration. Configures a list of authorization policy modules to be used.
  • identity-trust Identity trust configuration. Configures a list of trust modules to be used.
    • classic Identity trust configuration. Configures a list of trust modules to be used.
  • jsse JSSE configuration. Configures attributes for keystores that can be used for setting up SSL.
    • classic JSSE configuration. Configures attributes for keystores that can be used for setting up SSL.
  • mapping Mapping configuration. Configures a list of mapping modules to be used for principal, role, attribute and credential mapping.
    • classic Mapping configuration. Configures a list of mapping modules to be used for principal, role, attribute and credential mapping.

Provided capabilities(1)

Name Dynamic Other provider points
org.wildfly.security.legacy-security-domain true

none

Attributes (1)

  • cache-type Adds a cache to speed up authentication checks. Allowed values are 'default' to use simple map as the cache and 'infinispan' to use an Infinispan cache.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required no-services
    Allowed Values default
    infinispan

Operations (4)

  • add Add a security domain.
    Request Parameter Type Required Expressions Allowed Default value Description
    cache-type STRING false true Adds a cache to speed up authentication checks. Allowed values are 'default' to use simple map as the cache and 'infinispan' to use an Infinispan cache.
  • flush-cache Remove entries stored in the authentication cache for this security domain. A single entry can be flushed by using the principal argument with the username as the value. If no argument is passed to the operation, all entries are flushed.
    Request Parameter Type Required Expressions Allowed Default value Description
    principal STRING false false Username of the principal to remove from the authentication cache.
  • list-cached-principals Lists the principals stored in the authentication cache for this security domain.

    Reply properties

    type
    LIST
    Value Type
    STRING
  • remove Remove a security domain.