---

# OpenID Connect client registry.
clients:
#  - id: playground.js
#    name: OIDC Playground
#    application_type: web
#    redirect_uris:
#       - https://my-host:8509/
#    origins:
#       - https://my-host:8509

#  - id: playground-trusted.js
#    name: Trusted OIDC Playground
#    trusted: yes
#    implicit_scopes:
#        - Implicitly.Added
#    application_type: web
#    redirect_uris:
#       - https://my-host:8509/
#    origins:
#       - https://my-host:8509

#  - id: playground-trusted.js
#    name: Trusted Insecure OIDC Playground
#    trusted: yes
#    application_type: web
#    insecure: yes

#  - id: client-with-keys
#    secret: super
#    application_type: native
#    redirect_uris:
#      - http://localhost
#    trusted_scopes:
#      - LibreGraph.GuestOK
#      - LibgreGraph.NumericID
#    jwks:
#      keys:
#        - kty: EC
#          use: sig
#          kid: client-with-keys-key-1
#          crv: P-256
#          x: RTZpWoRbjwX1YavmSHVBj6Cy3Yzdkkp6QLvTGB22D0c
#          y: jeavjwcX0xlDSchFcBMzXSU7wGs2VPpNxWCwmxFvmF0
#    request_object_signing_alg: ES256

#  - id: first
#    secret: lala
#    application_type: native
#    redirect_uris:
#      - my://app

#  - id: second
#    secret: lulu
#    application_type: native
#    redirect_uris:
#      - http://localhost

# External authority registry.
authorities:
#  - id: my-univention-oidc
#    name: Univention
#    client_id: libregraph-lico
#    authority_type: oidc
#    jwks:
#      keys:
#        - kty: EC
#          use: sig
#          kid: example-key-1
#          crv: P-256
#          x: RTZpWoRbjwX1YavmSHVBj6Cy3Yzdkkp6QLvTGB22D0c
#          y: jeavjwcX0xlDSchFcBMzXSU7wGs2VPpNxWCwmxFvmF0
#    default: yes
#    authorization_endpoint: https://my-univention/signin/v1/identifier/_/authorize
#    response_type: id_token
#    scopes:
#      - openid
#      - profile
#    identity_claim_name: preferred_username
#    identity_aliases:
#      external-user-a: local-user-a
#      external-user-b: local-user-b
#    identity_alias_required: true

#  - id: my-univention-saml2
#    name: Univention
#    entity_id: libregraph-lico
#    authority_type: saml2
#    default: yes
#    trusted: yes
#    discover: yes
#    metadata_endpoint: https://my-univention/simplesamlphp/saml2/idp/metadata.php
#    identity_claim_name: uid
#    identity_alias_required: false
#    end_session_enabled: true