Oa4mpClient/cfg_example.json at main · cilogon/Oa4mpClient · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
{
  "tokens": {
    "identity": {
      "qdl": {
        "args": {
          "claim_mappings": [
            {
              "claim_constraints": [
                {
                  "constraint_field": "type",
                  "constraint_value": "messid"
                }
              ],
              "claim_multiple_value_serialization": "json_array",
              "claim_name": "vo_person_id",
              "claim_value_json_format": "string",
              "claim_value_selection": "first",
              "source_model": "Identifier",
              "source_model_claim_value_field": "identifier"
            },
            {
              "claim_constraints": [
                {
                  "constraint_field": "type",
                  "constraint_value": "all"
                },
                {
                  "constraint_field": "verified",
                  "constraint_value": "false"
                }
              ],
              "claim_multiple_value_serialization": "delimited_string",
              "claim_name": "email",
              "claim_value_json_format": "string",
              "claim_value_selection": "all",
              "claim_value_string_serialization_delimiter": ",",
              "source_model": "EmailAddress",
              "source_model_claim_value_field": "mail"
            },
            {
              "claim_constraints": [
                {
                  "constraint_field": "owner",
                  "constraint_value": "false"
                }
              ],
              "claim_multiple_value_serialization": "delimited_string",
              "claim_name": "is_member_of",
              "claim_value_json_format": "string",
              "claim_value_selection": "all",
              "claim_value_string_serialization_delimiter": ",",
              "source_model": "CoGroupMember",
              "source_model_claim_value_field": "member"
            },
            {
              "claim_constraints": [
                {
                  "constraint_field": "type",
                  "constraint_value": "all"
                },
                {
                  "constraint_field": "primary",
                  "constraint_value": "true"
                }
              ],
              "claim_multiple_value_serialization": "json_array",
              "claim_name": "name",
              "claim_value_json_format": "string",
              "claim_value_selection": "first",
              "source_model": "Name",
              "source_model_claim_value_field": "all"
            },
            {
              "claim_constraints": [
                {
                  "constraint_field": "status",
                  "constraint_value": "active"
                }
              ],
              "claim_multiple_value_serialization": "json_array",
              "claim_name": "roles",
              "claim_value_json_format": "string",
              "claim_value_selection": "all",
              "source_model": "CoPersonRole",
              "source_model_claim_value_field": "all"
            },
            {
              "claim_constraints": [
                {
                  "constraint_field": "type",
                  "constraint_value": "all"
                }
              ],
              "claim_multiple_value_serialization": "json_array",
              "claim_name": "ssh_key",
              "claim_value_json_format": "string",
              "claim_value_selection": "all",
              "source_model": "SshKey",
              "source_model_claim_value_field": "all"
            },
            {
              "claim_multiple_value_serialization": "json_array",
              "claim_name": "tandc",
              "claim_value_json_format": "string",
              "claim_value_selection": "all",
              "source_model": "CoTAndCAgreement",
              "source_model_claim_value_field": "all"
            },
            {
              "claim_multiple_value_serialization": "json_array",
              "claim_name": "cluster_accounts",
              "claim_value_json_format": "number",
              "claim_value_selection": "all",
              "source_model": "UnixClusterAccount",
              "source_model_claim_value_field": "all"
            }
          ],
          "dynamo_module_config": {
            "access_key_id": "AKIA6MESHHJ73ZODZZZZ",
            "partition_key": "PartitionKey",
            "region": "us-west-2",
            "secret_access_key": "dummy/KC1ewZ43JijREjsUoQ5btqzzzzzz",
            "table_name": "multitenant_mess_dev"
          },
          "partition_key_claim_name": "sub",
          "partition_key_template": "identifier#oidcsub#%%CLAIM_VALUE%%",
          "require_active_redirect_url": "https://www.google.com",
          "require_active_status": "1"
        },
        "load": "COmanageRegistry/default/dynamodb_claims.qdl",
        "xmd": {
          "exec_phase": [
            "post_auth",
            "post_refresh",
            "post_token",
            "post_user_info"
          ]
        }
      },
      "type": "identity"
    }
  }
}