{
  "clientId": "https://<gateway_fqdn>/",
  "name": "",
  "description": "",
  "rootUrl": "https://<gateway_fqdn>/",
  "adminUrl": "",
  "baseUrl": "",
  "surrogateAuthRequired": false,
  "enabled": true,
  "alwaysDisplayInConsole": false,
  "clientAuthenticatorType": "client-secret",
  "redirectUris": ["https://<gateway_fqdn>/*"],
  "webOrigins": ["https://<gateway_fqdn>"],
  "notBefore": 0,
  "bearerOnly": false,
  "consentRequired": false,
  "standardFlowEnabled": true,
  "implicitFlowEnabled": false,
  "directAccessGrantsEnabled": false,
  "serviceAccountsEnabled": false,
  "publicClient": false,
  "frontchannelLogout": true,
  "protocol": "saml",
  "attributes": {
    "saml.force.post.binding": "true",
    "saml.multivalued.roles": "false",
    "oauth2.device.authorization.grant.enabled": "false",
    "backchannel.logout.revoke.offline.tokens": "false",
    "saml.server.signature.keyinfo.ext": "true",
    "use.refresh.tokens": "true",
    "saml.signing.certificate": "<saml_signing_certificate>",
    "oidc.ciba.grant.enabled": "false",
    "backchannel.logout.session.required": "false",
    "saml.signature.algorithm": "RSA_SHA256",
    "client_credentials.use_refresh_token": "false",
    "require.pushed.authorization.requests": "false",
    "saml.client.signature": "false",
    "saml.force.name.id.format": "false",
    "saml.signing.private.key": "<saml_signing_private_key>",
    "saml.allow.ecp.flow": "false",
    "id.token.as.detached.signature": "false",
    "saml.assertion.signature": "false",
    "x509.subjectdn": "(.*?)(?:$)",
    "saml.encrypt": "true",
    "login_theme": "keycloak",
    "saml_assertion_consumer_url_post": "",
    "saml.server.signature": "true",
    "saml_idp_initiated_sso_url_name": "",
    "exclude.session.state.from.auth.response": "false",
    "saml.artifact.binding": "false",
    "saml.server.signature.keyinfo$xmlSigKeyInfoKeyNameTransformer": "CERT_SUBJECT",
    "saml.server.signature.keyinfo.xmlSigKeyInfoKeyNameTransformer": "CERT_SUBJECT",
    "saml_force_name_id_format": "false",
    "tls.client.certificate.bound.access.tokens": "false",
    "saml.authnstatement": "true",
    "display.on.consent.screen": "false",
    "saml_name_id_format": "username",
    "x509.allow.regex.pattern.comparison": "true",
    "saml.onetimeuse.condition": "false",
    "saml_signature_canonicalization_method": "http://www.w3.org/2001/10/xml-exc-c14n#",
    "saml_single_logout_service_url_post": "https://<gateway_fqdn>/",
    "saml_single_logout_service_url_redirect": "https://<gateway_fqdn>/",
    "saml.encryption.certificate": "<saml_encryption_certificate>",
    "saml.encryption.private.key": "<saml_encryption_private_key>",
    "saml.encryption.algorithm": "http://www.w3.org/2001/04/xmlenc#aes256-cbc",
    "saml.encryption.keyAlgorithm": "http://www.w3.org/2001/04/xmlenc#rsa-1_5"
  },
  "authenticationFlowBindingOverrides": {},
  "fullScopeAllowed": true,
  "nodeReRegistrationTimeout": -1,
  "protocolMappers": [
    {
      "name": "last_name",
      "protocol": "saml",
      "protocolMapper": "saml-user-property-mapper",
      "consentRequired": false,
      "config": {
        "attribute.nameformat": "Basic",
        "user.attribute": "lastName",
        "friendly.name": "Last Name",
        "attribute.name": "last_name"
      }
    },
    {
      "name": "email",
      "protocol": "saml",
      "protocolMapper": "saml-user-property-mapper",
      "consentRequired": false,
      "config": {
        "attribute.nameformat": "Basic",
        "user.attribute": "email",
        "friendly.name": "Email",
        "attribute.name": "email"
      }
    },
    {
      "name": "user_name",
      "protocol": "saml",
      "protocolMapper": "saml-user-property-mapper",
      "consentRequired": false,
      "config": {
        "attribute.nameformat": "Basic",
        "user.attribute": "username",
        "friendly.name": "User Name",
        "attribute.name": "username"
      }
    },
    {
      "name": "first_name",
      "protocol": "saml",
      "protocolMapper": "saml-user-property-mapper",
      "consentRequired": false,
      "config": {
        "attribute.nameformat": "Basic",
        "user.attribute": "firstName",
        "friendly.name": "First Name",
        "attribute.name": "first_name"
      }
    }
  ],
  "defaultClientScopes": ["role_list"],
  "optionalClientScopes": [],
  "access": {
    "view": true,
    "configure": true,
    "manage": true
  }
}