WildFly Full 26 Model Reference

A realm definition that is an aggregation of two realms, one for the authentication steps and one for loading the identity for the authorization steps.

Provided capabilities(1)

Name	Dynamic	Other provider points
org.wildfly.security.security-realm	true	/subsystem=elytron/jaas-realm=* /subsystem=elytron/jdbc-realm=* /subsystem=elytron/filesystem-realm=* /subsystem=elytron/token-realm=* /subsystem=elytron/distributed-realm=* /subsystem=elytron/ldap-realm=* /subsystem=elytron/key-store-realm=* /subsystem=elytron/failover-realm=* /subsystem=elytron/identity-realm=* /subsystem=elytron/custom-modifiable-realm=* /subsystem=elytron/properties-realm=* /subsystem=elytron/caching-realm=* /subsystem=elytron/custom-realm=*

Attributes (4)

authentication-realm Reference to the security realm to use for authentication steps (obtaining or validating credentials).

Attribute	Value
Capability reference	/subsystem=elytron/jaas-realm=* /subsystem=elytron/jdbc-realm=* /subsystem=elytron/filesystem-realm=* /subsystem=elytron/token-realm=* /subsystem=elytron/distributed-realm=* /subsystem=elytron/ldap-realm=* /subsystem=elytron/key-store-realm=* /subsystem=elytron/failover-realm=* /subsystem=elytron/identity-realm=* /subsystem=elytron/custom-modifiable-realm=* /subsystem=elytron/aggregate-realm=* /subsystem=elytron/properties-realm=* /subsystem=elytron/caching-realm=* /subsystem=elytron/custom-realm=*
Type	STRING
Nillable	false
Expressions Allowed	false
Storage	configuration
Access Type	read-write
Restart Required	all-services

authorization-realm Reference to the security realm to use for loading the identity for authorization steps (loading of the identity).

Attribute	Value
Capability reference	/subsystem=elytron/jaas-realm=* /subsystem=elytron/jdbc-realm=* /subsystem=elytron/filesystem-realm=* /subsystem=elytron/token-realm=* /subsystem=elytron/distributed-realm=* /subsystem=elytron/ldap-realm=* /subsystem=elytron/key-store-realm=* /subsystem=elytron/failover-realm=* /subsystem=elytron/identity-realm=* /subsystem=elytron/custom-modifiable-realm=* /subsystem=elytron/aggregate-realm=* /subsystem=elytron/properties-realm=* /subsystem=elytron/caching-realm=* /subsystem=elytron/custom-realm=*
Type	STRING
Nillable	true
Expressions Allowed	false
Storage	configuration
Access Type	read-write
Restart Required	all-services

authorization-realms Reference to one or more security realms to use for loading the identity for authorization steps and aggregating the attributes (loading of the identity).

Attribute	Value
Capability reference	/subsystem=elytron/jaas-realm=* /subsystem=elytron/jdbc-realm=* /subsystem=elytron/filesystem-realm=* /subsystem=elytron/token-realm=* /subsystem=elytron/distributed-realm=* /subsystem=elytron/ldap-realm=* /subsystem=elytron/key-store-realm=* /subsystem=elytron/failover-realm=* /subsystem=elytron/identity-realm=* /subsystem=elytron/custom-modifiable-realm=* /subsystem=elytron/aggregate-realm=* /subsystem=elytron/properties-realm=* /subsystem=elytron/caching-realm=* /subsystem=elytron/custom-realm=*
Type	LIST
Nillable	true
Expressions Allowed	false
Storage	configuration
Access Type	read-write
Restart Required	all-services

principal-transformer Reference to a principal transformer to apply between loading the identity for authentication and loading the identity for authorization

Attribute	Value
Capability reference	/subsystem=elytron/constant-principal-decoder=* /subsystem=elytron/x500-attribute-principal-decoder=* /subsystem=elytron/custom-principal-transformer=* /subsystem=elytron/chained-principal-transformer=* /subsystem=elytron/aggregate-principal-transformer=* /subsystem=elytron/regex-principal-transformer=* /subsystem=elytron/case-principal-transformer=* /subsystem=elytron/constant-principal-transformer=* /subsystem=elytron/concatenating-principal-decoder=* /subsystem=elytron/regex-validating-principal-transformer=*
Type	STRING
Nillable	true
Expressions Allowed	true
Storage	configuration
Access Type	read-write
Restart Required	all-services

Operations (2)

add The add operation for the security realm.

Request Parameter	Type	Required	Expressions Allowed	Default value	Description
authentication-realm	STRING	true	false		Reference to the security realm to use for authentication steps (obtaining or validating credentials).
authorization-realm	STRING	true	false		Reference to the security realm to use for loading the identity for authorization steps (loading of the identity).
authorization-realms	LIST	true	false		Reference to one or more security realms to use for loading the identity for authorization steps and aggregating the attributes (loading of the identity).
principal-transformer	STRING	false	true		Reference to a principal transformer to apply between loading the identity for authentication and loading the identity for authorization

remove The remove operation for the security realm.