DEV-479: added bruteforce detection to keycloak realm configuration

3 years ago · 8db347934f
parent 64ebe201e2
commit 8db347934f
1 changed files with 1 additions and 0 deletions
--- a/roles/keycloak/tasks/_configure_realm.yml
+++ b/roles/keycloak/tasks/_configure_realm.yml
@ -19,6 +19,7 @@
    duplicate_emails_allowed: yes
    internationalization_enabled: yes
    default_locale: "de"
+    brute_force_protected: yes
    password_policy: "{{ current_realm_password_policy | default('forceExpiredPasswordChange(60) and passwordHistory(3) and length(8) and notUsername(undefined) and upperCase(2) and lowerCase(2) and specialChars(2) and digits(1)') }}"
    supported_locales:
    - "de"