WildFly 36 Model Reference

A virtual security domain definition.

Provided capabilities(1)

Name Dynamic Other provider points
org.wildfly.security.virtual-security-domain true

none

Attributes (3)

  • auth-method The authentication mechanism that will be used with the virtual security domain. Allowed values: 'OIDC', 'MP-JWT'. The default value is 'OIDC'.
    • Attribute Value
    Default Value OIDC
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required no-services
    Allowed Values OIDC
    MP-JWT
    Stability default
  • outflow-anonymous When outflowing to a security domain, if outflow is not possible, should the anonymous identity be used? Outflow to a security domain might not be possible if the domain does not trust this domain or if the identity being outflowed to a domain does not exist in that domain. Outflowing anonymous has the effect of clearing any identity already established for that domain.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Stability default
  • outflow-security-domains The list of security domains that the security identity from this virtual domain should automatically outflow to.
    • Attribute Value
    Capability reference
    Type LIST
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required resource-services
    Stability default

Operations (2)

  • add The add operation for a virtual security domain definition.
    Request Parameter Type Required Expressions Allowed Default value Description
    auth-method STRING false false OIDC The authentication mechanism that will be used with the virtual security domain. Allowed values: 'OIDC', 'MP-JWT'. The default value is 'OIDC'.
    outflow-anonymous BOOLEAN false true false When outflowing to a security domain, if outflow is not possible, should the anonymous identity be used? Outflow to a security domain might not be possible if the domain does not trust this domain or if the identity being outflowed to a domain does not exist in that domain. Outflowing anonymous has the effect of clearing any identity already established for that domain.
    outflow-security-domains LIST false false The list of security domains that the security identity from this virtual domain should automatically outflow to.
  • remove The remove operation for a virtual security domain definition.