A security realm definition capable of validating and extracting identities from security tokens.
| Attribute | Value | 
|---|---|
| Type | OBJECT | 
| Nillable | true | 
| Expressions Allowed | false | 
| Storage | configuration | 
| Access Type | read-write | 
| Restart Required | all-services | 
| Attribute | Value | 
|---|---|
| Type | OBJECT | 
| Nillable | true | 
| Expressions Allowed | false | 
| Storage | configuration | 
| Access Type | read-write | 
| Restart Required | all-services | 
| Attribute | Value | 
|---|---|
| Default Value | username | 
| Type | STRING | 
| Nillable | true | 
| Expressions Allowed | true | 
| Storage | configuration | 
| Access Type | read-write | 
| Restart Required | all-services | 
| Request Parameter | Type | Required | Expressions Allowed | Default value | Description | 
|---|---|---|---|---|---|
| jwt | OBJECT | false | false | A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard. | |
| oauth2-introspection | OBJECT | false | false | A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validates them using an endpoint compliant with OAuth2 Token Introspection specification(RFC-7662). | |
| principal-claim | STRING | false | true | username | The name of the claim that should be used to obtain the principal's name. |