WildFly 35 Model Reference

An individual authentication configuration definition.

Provided capabilities(1)

Name Dynamic Other provider points
org.wildfly.security.authentication-configuration true

none

Attributes (15)

  • anonymous Enables anonymous authentication.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • authentication-name The authentication name to use.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • authorization-name The authorization name to use.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • credential-reference The reference to credential stored in CredentialStore under defined alias or clear text password.
    • Attribute Value
    Type OBJECT
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • extends A previously defined authentication configuration to extend.
    • Attribute Value
    Capability reference
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • forwarding-mode The type of security identity forwarding to use. A mode of 'authentication' forwarding forwards the principal and credential. A mode of 'authorization' forwards the authorization id, allowing for a different authentication identity.
    • Attribute Value
    Default Value authentication
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values authentication
    authorization
    Stability default
  • host The host to use.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • kerberos-security-factory Reference to a kerberos security factory used to obtain a GSS kerberos credential
    • Attribute Value
    Capability reference
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • mechanism-properties Configuration properties for the SASL authentication mechanism.
    • Attribute Value
    Type OBJECT
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • port The port to use.
    • Attribute Value
    Type INT
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • protocol The protocol to use.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • realm The realm to use.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • sasl-mechanism-selector The SASL mechanism selector string.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Stability default
  • security-domain Reference to a security domain to obtain a forwarded identity.
    • Attribute Value
    Capability reference
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • webservices Web services client configuration definition.
    • Attribute Value
    Type OBJECT
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default

Operations (2)

  • add Add a new authentication configuration definition.
    Request Parameter Type Required Expressions Allowed Default value Description
    anonymous BOOLEAN false true false Enables anonymous authentication.
    authentication-name STRING false true The authentication name to use.
    authorization-name STRING false true The authorization name to use.
    credential-reference OBJECT false false The reference to credential stored in CredentialStore under defined alias or clear text password.
    extends STRING false false A previously defined authentication configuration to extend.
    forwarding-mode STRING false true authentication The type of security identity forwarding to use. A mode of 'authentication' forwarding forwards the principal and credential. A mode of 'authorization' forwards the authorization id, allowing for a different authentication identity.
    host STRING false true The host to use.
    kerberos-security-factory STRING false false Reference to a kerberos security factory used to obtain a GSS kerberos credential
    mechanism-properties OBJECT false false Configuration properties for the SASL authentication mechanism.
    port INT false true The port to use.
    protocol STRING false true The protocol to use.
    realm STRING false true The realm to use.
    sasl-mechanism-selector STRING false true The SASL mechanism selector string.
    security-domain STRING false false Reference to a security domain to obtain a forwarded identity.
    webservices OBJECT false true Web services client configuration definition.
  • remove Remove the authentication configuration definition.