WildFly 18.0 Model Reference

Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface. By configuring a realm as being modifiable management operations will be made available to manipulate the realm.

Provided capabilities(2)

Name	Dynamic	Other provider points
org.wildfly.security.security-realm	true	/subsystem=elytron/jdbc-realm=* /subsystem=elytron/filesystem-realm=* /subsystem=security/elytron-realm=* /subsystem=elytron/identity-realm=* /subsystem=elytron/token-realm=* /subsystem=elytron/ldap-realm=* /subsystem=elytron/key-store-realm=* /subsystem=elytron/aggregate-realm=* /subsystem=elytron/properties-realm=* /subsystem=elytron/caching-realm=* /subsystem=elytron/custom-realm=*
org.wildfly.security.modifiable-security-realm	true	/subsystem=elytron/token-realm=* /subsystem=elytron/ldap-realm=* /subsystem=elytron/filesystem-realm=*

Attributes (3)

class-name The class name of the implementation of the custom realm.

Attribute	Value
Type	STRING
Nillable	false
Expressions Allowed	false
Storage	configuration
Access Type	read-write
Restart Required	all-services

configuration The optional key/value configuration for the custom realm.

Attribute	Value
Type	OBJECT
Nillable	true
Expressions Allowed	true
Storage	configuration
Access Type	read-write
Restart Required	all-services

module The module to use to load the custom realm.

Attribute	Value
Type	STRING
Nillable	false
Expressions Allowed	false
Storage	configuration
Access Type	read-write
Restart Required	all-services

Operations (8)

add The add operation for the security realm.

Request Parameter	Type	Required	Expressions Allowed	Description
configuration	OBJECT	false	true	The optional key/value configuration for the custom realm.
class-name	STRING	true	false	The class name of the implementation of the custom realm.
module	STRING	true	false	The module to use to load the custom realm.

add-identity Add an identity to a security realm.

Request Parameter Type Required Expressions Allowed Default value Description

identity STRING true false The name of the identity.

add-identity-attribute Add an attribute to an existing identity.

Request Parameter	Type	Required	Expressions Allowed	Description
identity	STRING	true	false	The name of the identity.
name	STRING	true	false	The name of the attribute.
value	LIST	true	false	The value of the attribute.

read-identity Read an identity from a security realm if it exists.

Request Parameter Type Required Expressions Allowed Default value Description

identity STRING true false The name of the identity.
remove The remove operation for the security realm.
remove-identity Remove an identity from a security realm.

Request Parameter Type Required Expressions Allowed Default value Description

identity STRING true false The name of the identity.

remove-identity-attribute Remove an attribute to an existing identity.

Request Parameter	Type	Required	Expressions Allowed	Description
identity	STRING	true	false	The name of the identity.
name	STRING	true	false	The name of the attribute.
value	LIST	false	false	The value of the attribute.

set-password Add a password to an existing identity.

Request Parameter	Type	Required	Expressions Allowed	Description
identity	STRING	true	false	The name of the identity.
bcrypt	OBJECT	false	false	A password using the Bcrypt algorithm.
clear	OBJECT	false	false	A password in clear text.
simple-digest	OBJECT	false	false	A simple digest password.
salted-simple-digest	OBJECT	false	false	A salted simple digest password.
scram-digest	OBJECT	false	false	A password using the SCRAM digest algorithm.
digest	OBJECT	false	false	A digest password.
otp	OBJECT	false	false	A one-time password, used by the OTP SASL mechanism.