{
  "adminUrl": "{{ admin_url }}",
  "attributes": {
    "saml.assertion.signature": "false",
    "saml.force.post.binding": "false",
    "saml.multivalued.roles": "false",
    "saml.encrypt": "false",
    "saml.server.signature": "false",
    "saml.server.signature.keyinfo.ext": "false",
    "exclude.session.state.from.auth.response": "false",
    "saml_force_name_id_format": "false",
    "saml.client.signature": "false",
    "tls.client.certificate.bound.access.tokens": "false",
    "saml.authnstatement": "false",
    "display.on.consent.screen": "false",
    "saml.onetimeuse.condition": "false"
  },
  "authenticationFlowBindingOverrides": {},
  "authorizationServicesEnabled": true,
  "bearerOnly": false,
  "clientAuthenticatorType": "client-secret",
  "clientId": "{{ client_id }}",
  "consentRequired": false,
  "defaultClientScopes": [
    "role_list",
    "profile",
    "roles",
    "email"
  ],
  "directAccessGrantsEnabled": true,
  "enabled": true,
  "frontchannelLogout": false,
  "fullScopeAllowed": true,
  "implicitFlowEnabled": false,
  "name": "{{ client_name }}",
  "nodeReRegistrationTimeout": -1,
  "notBefore": 0,
  "optionalClientScopes": [],
  "protocol" : "{{ protocol | default('openid-connect') }}",
  "protocolMappers": [
    {
      "name": "username",
      "protocol": "openid-connect",
      "protocolMapper": "oidc-usermodel-property-mapper",
      "consentRequired": false,
      "config": {
        "user.attribute": "username",
        "claim.name": "sub",
        "id.token.claim": "true",
        "access.token.claim": "true",
        "userinfo.token.claim": "true"
      }
    },
    {
      "name": "groups",
      "protocol": "openid-connect",
      "protocolMapper": "oidc-group-membership-mapper",
      "consentRequired": false,
      "config": {
        "full.path": "false",
        "id.token.claim": "true",
        "access.token.claim": "true",
        "claim.name": "groups",
        "userinfo.token.claim": "true"
      }
    }
  ],
  "publicClient": false,
  "redirectUris": {{ redirect_uris }},
  "rootUrl": "{{ root_url }}",
  "secret": "{{ secret }}",
  "serviceAccountsEnabled": true,
  "standardFlowEnabled": true,
  "surrogateAuthRequired": false,
  "webOrigins": {{ web_origins }}
}