railiance-platform/openbao/auth/netkingdom-platform-admin-role.json
codex 2126457a16 RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054)
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 328925@bnt-lap001
Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
2026-10-24 23:49:27 +02:00

46 lines
978 B
JSON

{
"allowed_redirect_uris": [
"http://localhost:8250/oidc/callback",
"http://127.0.0.1:8250/oidc/callback",
"http://127.0.0.1:18200/ui/vault/auth/netkingdom/oidc/callback"
],
"bound_audiences": [],
"bound_claims": {
"groups": [
"net-kingdom-admins"
],
"/assurance/level": "aal2"
},
"bound_claims_type": "string",
"bound_subject": "",
"claim_mappings": {
"email": "email",
"preferred_username": "username"
},
"groups_claim": "groups",
"oidc_scopes": [
"openid",
"profile",
"email",
"groups"
],
"policies": [
"platform-admin",
"operator-custody"
],
"role_type": "oidc",
"token_bound_cidrs": [],
"token_explicit_max_ttl": 0,
"token_max_ttl": 0,
"token_no_default_policy": false,
"token_num_uses": 0,
"token_period": 0,
"token_policies": [
"platform-admin",
"operator-custody"
],
"token_ttl": 3600,
"token_type": "default",
"ttl": 3600,
"user_claim": "sub"
}