Definition of a RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
Name | Dynamic | Other provider points |
---|---|---|
org.wildfly.security.realm-mapper | true | /subsystem=elytron/constant-realm-mapper=* /subsystem=elytron/simple-regex-realm-mapper=* /subsystem=elytron/custom-realm-mapper=* |
Attribute | Value |
---|---|
Capability reference | |
Type | STRING |
Nillable | true |
Expressions Allowed | false |
Storage | configuration |
Access Type | read-write |
Restart Required | all-services |
Attribute | Value |
---|---|
Type | STRING |
Nillable | false |
Expressions Allowed | true |
Storage | configuration |
Access Type | read-write |
Restart Required | all-services |
Attribute | Value |
---|---|
Type | OBJECT |
Nillable | false |
Expressions Allowed | true |
Storage | configuration |
Access Type | read-write |
Restart Required | all-services |
Request Parameter | Type | Required | Expressions Allowed | Default value | Description |
---|---|---|---|---|---|
delegate-realm-mapper | STRING | false | false | The RealmMapper to delegate to if the pattern does not match. If no delegate is specified then the default realm on the domain will be used instead. If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map. | |
pattern | STRING | true | true | The regular expression which must contain at least one capture group to extract the realm from the name. If the regular expression matches more than one capture group, the first capture group is used. | |
realm-map | OBJECT | true | true | Mapping of realm name extracted using the regular expression to a defined realm name. If the value for the mapping is not in the map or the realm whose name is the result of the mapping does not exist in the given security domain, the default realm is used. |