From e7648fe428f93d47ff04ca12ce6cfba2caf3d270 Mon Sep 17 00:00:00 2001
From: github-actions <github-actions@github.com>
Date: Wed, 8 Mar 2023 07:52:37 +0000
Subject: [PATCH] Update docs for main

---
 main/CHANGELOG.html                           |  189 +-
 main/README.html                              |    5 +-
 main/_sources/CHANGELOG.rst.txt               |    5 +
 main/_sources/plugins/index.rst.txt           |   11 +
 main/_sources/plugins/keycloak_client.rst.txt | 3707 +++++++++++++++++
 main/_sources/plugins/keycloak_role.rst.txt   | 1015 +++++
 .../plugins/keycloak_user_federation.rst.txt  | 3233 ++++++++++++++
 main/developing.html                          |    1 +
 main/genindex.html                            |    1 +
 main/index.html                               |    7 +
 main/objects.inv                              |  Bin 470 -> 3483 bytes
 main/plugins/index.html                       |  172 +
 main/plugins/keycloak_client.html             | 1156 +++++
 main/plugins/keycloak_role.html               |  446 ++
 main/plugins/keycloak_user_federation.html    | 1003 +++++
 main/releasing.html                           |    1 +
 main/roles/index.html                         |    5 +-
 main/roles/keycloak.html                      |    1 +
 main/roles/keycloak_quarkus.html              |    1 +
 main/roles/keycloak_realm.html                |    1 +
 main/search.html                              |    1 +
 main/searchindex.js                           |    2 +-
 main/testing.html                             |    1 +
 23 files changed, 10869 insertions(+), 95 deletions(-)
 create mode 100644 main/_sources/plugins/index.rst.txt
 create mode 100644 main/_sources/plugins/keycloak_client.rst.txt
 create mode 100644 main/_sources/plugins/keycloak_role.rst.txt
 create mode 100644 main/_sources/plugins/keycloak_user_federation.rst.txt
 create mode 100644 main/plugins/index.html
 create mode 100644 main/plugins/keycloak_client.html
 create mode 100644 main/plugins/keycloak_role.html
 create mode 100644 main/plugins/keycloak_user_federation.html

diff --git a/main/CHANGELOG.html b/main/CHANGELOG.html
index d3dde6a..5aee95d 100644
--- a/main/CHANGELOG.html
+++ b/main/CHANGELOG.html
@@ -44,6 +44,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul>
 <li class="toctree-l1"><a class="reference internal" href="README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1"><a class="reference internal" href="roles/index.html">Role Index</a></li>
 </ul>
 <p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
@@ -57,6 +58,7 @@
 <li class="toctree-l1 current"><a class="current reference internal" href="#">Changelog</a><ul>
 <li class="toctree-l2"><a class="reference internal" href="#v1-2-0-devel">v1.2.0-devel</a><ul>
 <li class="toctree-l3"><a class="reference internal" href="#major-changes">Major Changes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#minor-changes">Minor Changes</a></li>
 </ul>
 </li>
 <li class="toctree-l2"><a class="reference internal" href="#v1-1-1">v1.1.1</a><ul>
@@ -64,44 +66,44 @@
 </ul>
 </li>
 <li class="toctree-l2"><a class="reference internal" href="#v1-1-0">v1.1.0</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="#minor-changes">Minor Changes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id4">Minor Changes</a></li>
 <li class="toctree-l3"><a class="reference internal" href="#breaking-changes-porting-guide">Breaking Changes / Porting Guide</a></li>
-<li class="toctree-l3"><a class="reference internal" href="#id8">Bugfixes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id10">Bugfixes</a></li>
 </ul>
 </li>
 <li class="toctree-l2"><a class="reference internal" href="#v1-0-7">v1.0.7</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="#id10">Breaking Changes / Porting Guide</a></li>
-<li class="toctree-l3"><a class="reference internal" href="#id12">Bugfixes</a></li>
-</ul>
-</li>
-<li class="toctree-l2"><a class="reference internal" href="#v1-0-6">v1.0.6</a><ul>
+<li class="toctree-l3"><a class="reference internal" href="#id12">Breaking Changes / Porting Guide</a></li>
 <li class="toctree-l3"><a class="reference internal" href="#id14">Bugfixes</a></li>
 </ul>
 </li>
+<li class="toctree-l2"><a class="reference internal" href="#v1-0-6">v1.0.6</a><ul>
+<li class="toctree-l3"><a class="reference internal" href="#id16">Bugfixes</a></li>
+</ul>
+</li>
 <li class="toctree-l2"><a class="reference internal" href="#v1-0-5">v1.0.5</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="#id17">Minor Changes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id19">Minor Changes</a></li>
 </ul>
 </li>
 <li class="toctree-l2"><a class="reference internal" href="#v1-0-4">v1.0.4</a></li>
 <li class="toctree-l2"><a class="reference internal" href="#v1-0-3">v1.0.3</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="#id19">Major Changes</a></li>
-<li class="toctree-l3"><a class="reference internal" href="#id21">Minor Changes</a></li>
-<li class="toctree-l3"><a class="reference internal" href="#id23">Bugfixes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id21">Major Changes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id23">Minor Changes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id25">Bugfixes</a></li>
 </ul>
 </li>
 <li class="toctree-l2"><a class="reference internal" href="#v1-0-2">v1.0.2</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="#id25">Minor Changes</a></li>
-<li class="toctree-l3"><a class="reference internal" href="#id28">Bugfixes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id27">Minor Changes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id30">Bugfixes</a></li>
 </ul>
 </li>
 <li class="toctree-l2"><a class="reference internal" href="#v1-0-1">v1.0.1</a><ul>
 <li class="toctree-l3"><a class="reference internal" href="#release-summary">Release Summary</a></li>
-<li class="toctree-l3"><a class="reference internal" href="#id30">Major Changes</a></li>
-<li class="toctree-l3"><a class="reference internal" href="#id32">Minor Changes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id32">Major Changes</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id34">Minor Changes</a></li>
 </ul>
 </li>
 <li class="toctree-l2"><a class="reference internal" href="#v1-0-0">v1.0.0</a><ul>
-<li class="toctree-l3"><a class="reference internal" href="#id34">Release Summary</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#id36">Release Summary</a></li>
 </ul>
 </li>
 </ul>
@@ -144,69 +146,70 @@
            <div itemprop="articleBody">
              
   <section id="middleware-automation-keycloak-release-notes">
-<h1><a class="toc-backref" href="#id35" role="doc-backlink">middleware_automation.keycloak Release Notes</a><a class="headerlink" href="#middleware-automation-keycloak-release-notes" title="Permalink to this heading"></a></h1>
+<h1><a class="toc-backref" href="#id37" role="doc-backlink">middleware_automation.keycloak Release Notes</a><a class="headerlink" href="#middleware-automation-keycloak-release-notes" title="Permalink to this heading"></a></h1>
 <nav class="contents" id="topics">
 <p class="topic-title">Topics</p>
 <ul class="simple">
-<li><p><a class="reference internal" href="#middleware-automation-keycloak-release-notes" id="id35">middleware_automation.keycloak Release Notes</a></p>
+<li><p><a class="reference internal" href="#middleware-automation-keycloak-release-notes" id="id37">middleware_automation.keycloak Release Notes</a></p>
 <ul>
-<li><p><a class="reference internal" href="#v1-2-0-devel" id="id36">v1.2.0-devel</a></p>
+<li><p><a class="reference internal" href="#v1-2-0-devel" id="id38">v1.2.0-devel</a></p>
 <ul>
-<li><p><a class="reference internal" href="#major-changes" id="id37">Major Changes</a></p></li>
+<li><p><a class="reference internal" href="#major-changes" id="id39">Major Changes</a></p></li>
+<li><p><a class="reference internal" href="#minor-changes" id="id40">Minor Changes</a></p></li>
 </ul>
 </li>
-<li><p><a class="reference internal" href="#v1-1-1" id="id38">v1.1.1</a></p>
+<li><p><a class="reference internal" href="#v1-1-1" id="id41">v1.1.1</a></p>
 <ul>
-<li><p><a class="reference internal" href="#bugfixes" id="id39">Bugfixes</a></p></li>
+<li><p><a class="reference internal" href="#bugfixes" id="id42">Bugfixes</a></p></li>
 </ul>
 </li>
-<li><p><a class="reference internal" href="#v1-1-0" id="id40">v1.1.0</a></p>
+<li><p><a class="reference internal" href="#v1-1-0" id="id43">v1.1.0</a></p>
 <ul>
-<li><p><a class="reference internal" href="#minor-changes" id="id41">Minor Changes</a></p></li>
-<li><p><a class="reference internal" href="#breaking-changes-porting-guide" id="id42">Breaking Changes / Porting Guide</a></p></li>
-<li><p><a class="reference internal" href="#id8" id="id43">Bugfixes</a></p></li>
+<li><p><a class="reference internal" href="#id4" id="id44">Minor Changes</a></p></li>
+<li><p><a class="reference internal" href="#breaking-changes-porting-guide" id="id45">Breaking Changes / Porting Guide</a></p></li>
+<li><p><a class="reference internal" href="#id10" id="id46">Bugfixes</a></p></li>
 </ul>
 </li>
-<li><p><a class="reference internal" href="#v1-0-7" id="id44">v1.0.7</a></p>
+<li><p><a class="reference internal" href="#v1-0-7" id="id47">v1.0.7</a></p>
 <ul>
-<li><p><a class="reference internal" href="#id10" id="id45">Breaking Changes / Porting Guide</a></p></li>
-<li><p><a class="reference internal" href="#id12" id="id46">Bugfixes</a></p></li>
+<li><p><a class="reference internal" href="#id12" id="id48">Breaking Changes / Porting Guide</a></p></li>
+<li><p><a class="reference internal" href="#id14" id="id49">Bugfixes</a></p></li>
 </ul>
 </li>
-<li><p><a class="reference internal" href="#v1-0-6" id="id47">v1.0.6</a></p>
+<li><p><a class="reference internal" href="#v1-0-6" id="id50">v1.0.6</a></p>
 <ul>
-<li><p><a class="reference internal" href="#id14" id="id48">Bugfixes</a></p></li>
+<li><p><a class="reference internal" href="#id16" id="id51">Bugfixes</a></p></li>
 </ul>
 </li>
-<li><p><a class="reference internal" href="#v1-0-5" id="id49">v1.0.5</a></p>
+<li><p><a class="reference internal" href="#v1-0-5" id="id52">v1.0.5</a></p>
 <ul>
-<li><p><a class="reference internal" href="#id17" id="id50">Minor Changes</a></p></li>
+<li><p><a class="reference internal" href="#id19" id="id53">Minor Changes</a></p></li>
 </ul>
 </li>
-<li><p><a class="reference internal" href="#v1-0-4" id="id51">v1.0.4</a></p></li>
-<li><p><a class="reference internal" href="#v1-0-3" id="id52">v1.0.3</a></p>
+<li><p><a class="reference internal" href="#v1-0-4" id="id54">v1.0.4</a></p></li>
+<li><p><a class="reference internal" href="#v1-0-3" id="id55">v1.0.3</a></p>
 <ul>
-<li><p><a class="reference internal" href="#id19" id="id53">Major Changes</a></p></li>
-<li><p><a class="reference internal" href="#id21" id="id54">Minor Changes</a></p></li>
-<li><p><a class="reference internal" href="#id23" id="id55">Bugfixes</a></p></li>
+<li><p><a class="reference internal" href="#id21" id="id56">Major Changes</a></p></li>
+<li><p><a class="reference internal" href="#id23" id="id57">Minor Changes</a></p></li>
+<li><p><a class="reference internal" href="#id25" id="id58">Bugfixes</a></p></li>
 </ul>
 </li>
-<li><p><a class="reference internal" href="#v1-0-2" id="id56">v1.0.2</a></p>
+<li><p><a class="reference internal" href="#v1-0-2" id="id59">v1.0.2</a></p>
 <ul>
-<li><p><a class="reference internal" href="#id25" id="id57">Minor Changes</a></p></li>
-<li><p><a class="reference internal" href="#id28" id="id58">Bugfixes</a></p></li>
+<li><p><a class="reference internal" href="#id27" id="id60">Minor Changes</a></p></li>
+<li><p><a class="reference internal" href="#id30" id="id61">Bugfixes</a></p></li>
 </ul>
 </li>
-<li><p><a class="reference internal" href="#v1-0-1" id="id59">v1.0.1</a></p>
+<li><p><a class="reference internal" href="#v1-0-1" id="id62">v1.0.1</a></p>
 <ul>
-<li><p><a class="reference internal" href="#release-summary" id="id60">Release Summary</a></p></li>
-<li><p><a class="reference internal" href="#id30" id="id61">Major Changes</a></p></li>
-<li><p><a class="reference internal" href="#id32" id="id62">Minor Changes</a></p></li>
+<li><p><a class="reference internal" href="#release-summary" id="id63">Release Summary</a></p></li>
+<li><p><a class="reference internal" href="#id32" id="id64">Major Changes</a></p></li>
+<li><p><a class="reference internal" href="#id34" id="id65">Minor Changes</a></p></li>
 </ul>
 </li>
-<li><p><a class="reference internal" href="#v1-0-0" id="id63">v1.0.0</a></p>
+<li><p><a class="reference internal" href="#v1-0-0" id="id66">v1.0.0</a></p>
 <ul>
-<li><p><a class="reference internal" href="#id34" id="id64">Release Summary</a></p></li>
+<li><p><a class="reference internal" href="#id36" id="id67">Release Summary</a></p></li>
 </ul>
 </li>
 </ul>
@@ -215,27 +218,33 @@
 </nav>
 <p>This changelog describes changes after version 0.2.6.</p>
 <section id="v1-2-0-devel">
-<h2><a class="toc-backref" href="#id36" role="doc-backlink">v1.2.0-devel</a><a class="headerlink" href="#v1-2-0-devel" title="Permalink to this heading"></a></h2>
+<h2><a class="toc-backref" href="#id38" role="doc-backlink">v1.2.0-devel</a><a class="headerlink" href="#v1-2-0-devel" title="Permalink to this heading"></a></h2>
 <section id="major-changes">
-<h3><a class="toc-backref" href="#id37" role="doc-backlink">Major Changes</a><a class="headerlink" href="#major-changes" title="Permalink to this heading"></a></h3>
+<h3><a class="toc-backref" href="#id39" role="doc-backlink">Major Changes</a><a class="headerlink" href="#major-changes" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Provide config for multiple modcluster proxies <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/60">#60</a></p></li>
 </ul>
 </section>
+<section id="minor-changes">
+<h3><a class="toc-backref" href="#id40" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#minor-changes" title="Permalink to this heading"></a></h3>
+<ul class="simple">
+<li><p>Drop community.general from dependencies <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/61">#61</a></p></li>
+</ul>
+</section>
 </section>
 <section id="v1-1-1">
-<h2><a class="toc-backref" href="#id38" role="doc-backlink">v1.1.1</a><a class="headerlink" href="#v1-1-1" title="Permalink to this heading"></a></h2>
+<h2><a class="toc-backref" href="#id41" role="doc-backlink">v1.1.1</a><a class="headerlink" href="#v1-1-1" title="Permalink to this heading"></a></h2>
 <section id="bugfixes">
-<h3><a class="toc-backref" href="#id39" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#bugfixes" title="Permalink to this heading"></a></h3>
+<h3><a class="toc-backref" href="#id42" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#bugfixes" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>keycloak-quarkus: fix <code class="docutils literal notranslate"><span class="pre">cache-config-file</span></code> path in keycloak.conf.j2 template <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/53">#53</a></p></li>
 </ul>
 </section>
 </section>
 <section id="v1-1-0">
-<h2><a class="toc-backref" href="#id40" role="doc-backlink">v1.1.0</a><a class="headerlink" href="#v1-1-0" title="Permalink to this heading"></a></h2>
-<section id="minor-changes">
-<h3><a class="toc-backref" href="#id41" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#minor-changes" title="Permalink to this heading"></a></h3>
+<h2><a class="toc-backref" href="#id43" role="doc-backlink">v1.1.0</a><a class="headerlink" href="#v1-1-0" title="Permalink to this heading"></a></h2>
+<section id="id4">
+<h3><a class="toc-backref" href="#id44" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#id4" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Update keycloak to 18.0.2 - sso to 7.6.1 <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/46">#46</a></p></li>
 <li><p>Variable <code class="docutils literal notranslate"><span class="pre">keycloak_no_log</span></code> controls ansible <code class="docutils literal notranslate"><span class="pre">no_log</span></code> parameter (for debugging purposes) <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/47">#47</a></p></li>
@@ -244,37 +253,37 @@
 </ul>
 </section>
 <section id="breaking-changes-porting-guide">
-<h3><a class="toc-backref" href="#id42" role="doc-backlink">Breaking Changes / Porting Guide</a><a class="headerlink" href="#breaking-changes-porting-guide" title="Permalink to this heading"></a></h3>
+<h3><a class="toc-backref" href="#id45" role="doc-backlink">Breaking Changes / Porting Guide</a><a class="headerlink" href="#breaking-changes-porting-guide" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Rename variables from <code class="docutils literal notranslate"><span class="pre">infinispan_</span></code> prefix to <code class="docutils literal notranslate"><span class="pre">keycloak_infinispan_</span></code> <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/42">#42</a></p></li>
 </ul>
 </section>
-<section id="id8">
-<h3><a class="toc-backref" href="#id43" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id8" title="Permalink to this heading"></a></h3>
+<section id="id10">
+<h3><a class="toc-backref" href="#id46" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id10" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>keycloak_quarkus: fix /var/log/keycloak symlink to keycloak log directory <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/44">#44</a></p></li>
 </ul>
 </section>
 </section>
 <section id="v1-0-7">
-<h2><a class="toc-backref" href="#id44" role="doc-backlink">v1.0.7</a><a class="headerlink" href="#v1-0-7" title="Permalink to this heading"></a></h2>
-<section id="id10">
-<h3><a class="toc-backref" href="#id45" role="doc-backlink">Breaking Changes / Porting Guide</a><a class="headerlink" href="#id10" title="Permalink to this heading"></a></h3>
+<h2><a class="toc-backref" href="#id47" role="doc-backlink">v1.0.7</a><a class="headerlink" href="#v1-0-7" title="Permalink to this heading"></a></h2>
+<section id="id12">
+<h3><a class="toc-backref" href="#id48" role="doc-backlink">Breaking Changes / Porting Guide</a><a class="headerlink" href="#id12" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>keycloak_quarkus: use absolute path for certificate files <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/39">#39</a></p></li>
 </ul>
 </section>
-<section id="id12">
-<h3><a class="toc-backref" href="#id46" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id12" title="Permalink to this heading"></a></h3>
+<section id="id14">
+<h3><a class="toc-backref" href="#id49" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id14" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>keycloak_quarkus: use become for tasks that will otherwise fail <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/38">#38</a></p></li>
 </ul>
 </section>
 </section>
 <section id="v1-0-6">
-<h2><a class="toc-backref" href="#id47" role="doc-backlink">v1.0.6</a><a class="headerlink" href="#v1-0-6" title="Permalink to this heading"></a></h2>
-<section id="id14">
-<h3><a class="toc-backref" href="#id48" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id14" title="Permalink to this heading"></a></h3>
+<h2><a class="toc-backref" href="#id50" role="doc-backlink">v1.0.6</a><a class="headerlink" href="#v1-0-6" title="Permalink to this heading"></a></h2>
+<section id="id16">
+<h3><a class="toc-backref" href="#id51" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id16" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>keycloak_quarkus: add selected java to PATH in systemd unit <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/34">#34</a></p></li>
 <li><p>keycloak_quarkus: set logfile path correctly under keycloak home <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/35">#35</a></p></li>
@@ -282,77 +291,77 @@
 </section>
 </section>
 <section id="v1-0-5">
-<h2><a class="toc-backref" href="#id49" role="doc-backlink">v1.0.5</a><a class="headerlink" href="#v1-0-5" title="Permalink to this heading"></a></h2>
-<section id="id17">
-<h3><a class="toc-backref" href="#id50" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#id17" title="Permalink to this heading"></a></h3>
+<h2><a class="toc-backref" href="#id52" role="doc-backlink">v1.0.5</a><a class="headerlink" href="#v1-0-5" title="Permalink to this heading"></a></h2>
+<section id="id19">
+<h3><a class="toc-backref" href="#id53" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#id19" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Update config options: keycloak and quarkus <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/32">#32</a></p></li>
 </ul>
 </section>
 </section>
 <section id="v1-0-4">
-<h2><a class="toc-backref" href="#id51" role="doc-backlink">v1.0.4</a><a class="headerlink" href="#v1-0-4" title="Permalink to this heading"></a></h2>
+<h2><a class="toc-backref" href="#id54" role="doc-backlink">v1.0.4</a><a class="headerlink" href="#v1-0-4" title="Permalink to this heading"></a></h2>
 </section>
 <section id="v1-0-3">
-<h2><a class="toc-backref" href="#id52" role="doc-backlink">v1.0.3</a><a class="headerlink" href="#v1-0-3" title="Permalink to this heading"></a></h2>
-<section id="id19">
-<h3><a class="toc-backref" href="#id53" role="doc-backlink">Major Changes</a><a class="headerlink" href="#id19" title="Permalink to this heading"></a></h3>
+<h2><a class="toc-backref" href="#id55" role="doc-backlink">v1.0.3</a><a class="headerlink" href="#v1-0-3" title="Permalink to this heading"></a></h2>
+<section id="id21">
+<h3><a class="toc-backref" href="#id56" role="doc-backlink">Major Changes</a><a class="headerlink" href="#id21" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>New role for installing keycloak &gt;= 17.0.0 (quarkus) <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/29">#29</a></p></li>
 </ul>
 </section>
-<section id="id21">
-<h3><a class="toc-backref" href="#id54" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#id21" title="Permalink to this heading"></a></h3>
+<section id="id23">
+<h3><a class="toc-backref" href="#id57" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#id23" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Add <code class="docutils literal notranslate"><span class="pre">keycloak_config_override_template</span></code> parameter for passing a custom xml config template <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/30">#30</a></p></li>
 </ul>
 </section>
-<section id="id23">
-<h3><a class="toc-backref" href="#id55" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id23" title="Permalink to this heading"></a></h3>
+<section id="id25">
+<h3><a class="toc-backref" href="#id58" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id25" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Make sure systemd unit starts with selected java JVM <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/31">#31</a></p></li>
 </ul>
 </section>
 </section>
 <section id="v1-0-2">
-<h2><a class="toc-backref" href="#id56" role="doc-backlink">v1.0.2</a><a class="headerlink" href="#v1-0-2" title="Permalink to this heading"></a></h2>
-<section id="id25">
-<h3><a class="toc-backref" href="#id57" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#id25" title="Permalink to this heading"></a></h3>
+<h2><a class="toc-backref" href="#id59" role="doc-backlink">v1.0.2</a><a class="headerlink" href="#v1-0-2" title="Permalink to this heading"></a></h2>
+<section id="id27">
+<h3><a class="toc-backref" href="#id60" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#id27" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Make <code class="docutils literal notranslate"><span class="pre">keycloak_admin_password</span></code> a default with assert (was: role variable) <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/26">#26</a></p></li>
 <li><p>Simplify dependency install logic and reduce play execution time <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/19">#19</a></p></li>
 </ul>
 </section>
-<section id="id28">
-<h3><a class="toc-backref" href="#id58" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id28" title="Permalink to this heading"></a></h3>
+<section id="id30">
+<h3><a class="toc-backref" href="#id61" role="doc-backlink">Bugfixes</a><a class="headerlink" href="#id30" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Set <code class="docutils literal notranslate"><span class="pre">keycloak_frontend_url</span></code> default according to other defaults <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/25">#25</a></p></li>
 </ul>
 </section>
 </section>
 <section id="v1-0-1">
-<h2><a class="toc-backref" href="#id59" role="doc-backlink">v1.0.1</a><a class="headerlink" href="#v1-0-1" title="Permalink to this heading"></a></h2>
+<h2><a class="toc-backref" href="#id62" role="doc-backlink">v1.0.1</a><a class="headerlink" href="#v1-0-1" title="Permalink to this heading"></a></h2>
 <section id="release-summary">
-<h3><a class="toc-backref" href="#id60" role="doc-backlink">Release Summary</a><a class="headerlink" href="#release-summary" title="Permalink to this heading"></a></h3>
+<h3><a class="toc-backref" href="#id63" role="doc-backlink">Release Summary</a><a class="headerlink" href="#release-summary" title="Permalink to this heading"></a></h3>
 <p>Minor enhancements, bug and documentation fixes.</p>
 </section>
-<section id="id30">
-<h3><a class="toc-backref" href="#id61" role="doc-backlink">Major Changes</a><a class="headerlink" href="#id30" title="Permalink to this heading"></a></h3>
+<section id="id32">
+<h3><a class="toc-backref" href="#id64" role="doc-backlink">Major Changes</a><a class="headerlink" href="#id32" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Apply latest cumulative patch of RH-SSO automatically when new parameter <code class="docutils literal notranslate"><span class="pre">keycloak_rhsso_apply_patches</span></code> is <code class="docutils literal notranslate"><span class="pre">true</span></code> <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/18">#18</a></p></li>
 </ul>
 </section>
-<section id="id32">
-<h3><a class="toc-backref" href="#id62" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#id32" title="Permalink to this heading"></a></h3>
+<section id="id34">
+<h3><a class="toc-backref" href="#id65" role="doc-backlink">Minor Changes</a><a class="headerlink" href="#id34" title="Permalink to this heading"></a></h3>
 <ul class="simple">
 <li><p>Clustered installs now perform database initialization on first node to avoid locking issues <a class="reference external" href="https://github.com/ansible-middleware/keycloak/pull/17">#17</a></p></li>
 </ul>
 </section>
 </section>
 <section id="v1-0-0">
-<h2><a class="toc-backref" href="#id63" role="doc-backlink">v1.0.0</a><a class="headerlink" href="#v1-0-0" title="Permalink to this heading"></a></h2>
-<section id="id34">
-<h3><a class="toc-backref" href="#id64" role="doc-backlink">Release Summary</a><a class="headerlink" href="#id34" title="Permalink to this heading"></a></h3>
+<h2><a class="toc-backref" href="#id66" role="doc-backlink">v1.0.0</a><a class="headerlink" href="#v1-0-0" title="Permalink to this heading"></a></h2>
+<section id="id36">
+<h3><a class="toc-backref" href="#id67" role="doc-backlink">Release Summary</a><a class="headerlink" href="#id36" title="Permalink to this heading"></a></h3>
 <p>This is the first stable release of the <code class="docutils literal notranslate"><span class="pre">middleware_automation.keycloak</span></code> collection.</p>
 </section>
 </section>
diff --git a/main/README.html b/main/README.html
index 22138bb..1458f8d 100644
--- a/main/README.html
+++ b/main/README.html
@@ -19,7 +19,7 @@
     <script src="_static/js/theme.js"></script>
     <link rel="index" title="Index" href="genindex.html" />
     <link rel="search" title="Search" href="search.html" />
-    <link rel="next" title="Role Index" href="roles/index.html" />
+    <link rel="next" title="Plugin Index" href="plugins/index.html" />
     <link rel="prev" title="Welcome to Keycloak Collection documentation" href="index.html" /> 
 </head>
 
@@ -69,6 +69,7 @@
 <li class="toctree-l2"><a class="reference internal" href="#license">License</a></li>
 </ul>
 </li>
+<li class="toctree-l1"><a class="reference internal" href="plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1"><a class="reference internal" href="roles/index.html">Role Index</a></li>
 </ul>
 <p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
@@ -253,7 +254,7 @@ the download tasks. The local path for the archive matches the downloaded archiv
           </div>
           <footer><div class="rst-footer-buttons" role="navigation" aria-label="Footer">
         <a href="index.html" class="btn btn-neutral float-left" title="Welcome to Keycloak Collection documentation" accesskey="p" rel="prev"><span class="fa fa-arrow-circle-left" aria-hidden="true"></span> Previous</a>
-        <a href="roles/index.html" class="btn btn-neutral float-right" title="Role Index" accesskey="n" rel="next">Next <span class="fa fa-arrow-circle-right" aria-hidden="true"></span></a>
+        <a href="plugins/index.html" class="btn btn-neutral float-right" title="Plugin Index" accesskey="n" rel="next">Next <span class="fa fa-arrow-circle-right" aria-hidden="true"></span></a>
     </div>
 
   <hr/>
diff --git a/main/_sources/CHANGELOG.rst.txt b/main/_sources/CHANGELOG.rst.txt
index d5207fd..54ea39e 100644
--- a/main/_sources/CHANGELOG.rst.txt
+++ b/main/_sources/CHANGELOG.rst.txt
@@ -14,6 +14,11 @@ Major Changes
 
 - Provide config for multiple modcluster proxies `#60 <https://github.com/ansible-middleware/keycloak/pull/60>`_
 
+Minor Changes
+-------------
+
+- Drop community.general from dependencies `#61 <https://github.com/ansible-middleware/keycloak/pull/61>`_
+
 v1.1.1
 ======
 
diff --git a/main/_sources/plugins/index.rst.txt b/main/_sources/plugins/index.rst.txt
new file mode 100644
index 0000000..76755e4
--- /dev/null
+++ b/main/_sources/plugins/index.rst.txt
@@ -0,0 +1,11 @@
+Plugin Index
+============
+
+.. toctree::
+   :caption: modules plugins
+   :maxdepth: 0
+
+   keycloak_client
+   keycloak_role
+   keycloak_user_federation
+
diff --git a/main/_sources/plugins/keycloak_client.rst.txt b/main/_sources/plugins/keycloak_client.rst.txt
new file mode 100644
index 0000000..57814ea
--- /dev/null
+++ b/main/_sources/plugins/keycloak_client.rst.txt
@@ -0,0 +1,3707 @@
+
+.. Document meta
+
+:orphan:
+
+.. |antsibull-internal-nbsp| unicode:: 0xA0
+    :trim:
+
+.. role:: ansible-attribute-support-label
+.. role:: ansible-attribute-support-property
+.. role:: ansible-attribute-support-full
+.. role:: ansible-attribute-support-partial
+.. role:: ansible-attribute-support-none
+.. role:: ansible-attribute-support-na
+.. role:: ansible-option-type
+.. role:: ansible-option-elements
+.. role:: ansible-option-required
+.. role:: ansible-option-versionadded
+.. role:: ansible-option-aliases
+.. role:: ansible-option-choices
+.. role:: ansible-option-choices-default-mark
+.. role:: ansible-option-default-bold
+.. role:: ansible-option-configuration
+.. role:: ansible-option-returned-bold
+.. role:: ansible-option-sample-bold
+
+.. Anchors
+
+.. _ansible_collections.middleware_automation.keycloak.keycloak_client_module:
+
+.. Anchors: short name for ansible.builtin
+
+.. Anchors: aliases
+
+
+
+.. Title
+
+keycloak_client -- Allows administration of Keycloak clients via Keycloak API
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+.. Collection note
+
+.. note::
+    This module is part of the `middleware_automation.keycloak collection <https://galaxy.ansible.com/middleware_automation/keycloak>`_.
+
+    To install it, use: :code:`ansible-galaxy collection install middleware\_automation.keycloak`.
+
+    To use it in a playbook, specify: :code:`middleware_automation.keycloak.keycloak_client`.
+
+.. version_added
+
+
+.. contents::
+   :local:
+   :depth: 1
+
+.. Deprecated
+
+
+Synopsis
+--------
+
+.. Description
+
+- This module allows the administration of Keycloak clients via the Keycloak REST API. It requires access to the REST API via OpenID Connect; the user connecting and the client being used must have the requisite access rights. In a default Keycloak installation, admin-cli and an admin user would work, as would a separate client definition with the scope tailored to your needs and a user having the expected roles.
+- The names of module options are snake\_cased versions of the camelCase ones found in the Keycloak API and its documentation at \ https://www.keycloak.org/docs-api/8.0/rest-api/index.html\ . Aliases are provided so camelCased versions can be used as well.
+- The Keycloak API does not always sanity check inputs e.g. you can set SAML-specific settings on an OpenID Connect client for instance and vice versa. Be careful. If you do not specify a setting, usually a sensible default is chosen.
+
+
+.. Aliases
+
+
+.. Requirements
+
+
+
+
+
+
+.. Options
+
+Parameters
+----------
+
+
+.. rst-class:: ansible-option-table
+
+.. list-table::
+  :width: 100%
+  :widths: auto
+  :header-rows: 1
+
+  * - Parameter
+    - Comments
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-admin_url"></div>
+        <div class="ansibleOptionAnchor" id="parameter-adminUrl"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-admin_url:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-adminurl:
+
+      .. rst-class:: ansible-option-title
+
+      **admin_url**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-admin_url" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: adminUrl`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      URL to the admin interface of the client. This is 'adminUrl' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-always_display_in_console"></div>
+        <div class="ansibleOptionAnchor" id="parameter-alwaysDisplayInConsole"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-always_display_in_console:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-alwaysdisplayinconsole:
+
+      .. rst-class:: ansible-option-title
+
+      **always_display_in_console**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-always_display_in_console" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: alwaysDisplayInConsole`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 4.7.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Whether or not to display this client in account console, even if the user does not have an active session.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes:
+
+      .. rst-class:: ansible-option-title
+
+      **attributes**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      A dict of further attributes for this client. This can contain various configuration settings; an example is given in the examples section. While an exhaustive list of permissible options is not available; possible options as of Keycloak 3.4 are listed below. The Keycloak API does not validate whether a given option is appropriate for the protocol used; if specified anyway, Keycloak will simply not use it.
+
+
+      .. raw:: html
+
+        </div>
+    
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/jwks.url"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/jwks.url:
+
+      .. rst-class:: ansible-option-title
+
+      **jwks.url**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/jwks.url" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For OpenID-Connect clients, URL where client keys in JWK are stored.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/jwt.credential.certificate"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/jwt.credential.certificate:
+
+      .. rst-class:: ansible-option-title
+
+      **jwt.credential.certificate**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/jwt.credential.certificate" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For OpenID-Connect clients, client certificate for validating JWT issued by client and signed by its key, base64-encoded.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/request.object.signature.alg"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/request.object.signature.alg:
+
+      .. rst-class:: ansible-option-title
+
+      **request.object.signature.alg**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/request.object.signature.alg" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For OpenID-Connect clients, JWA algorithm which the client needs to use when sending OIDC request object. One of \ :literal:`any`\ , \ :literal:`none`\ , \ :literal:`RS256`\ .
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.authnstatement"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.authnstatement:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.authnstatement**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.authnstatement" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For SAML clients, boolean specifying whether or not a statement containing method and timestamp should be included in the login response.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.client.signature"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.client.signature:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.client.signature**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.client.signature" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For SAML clients, boolean specifying whether a client signature is required and validated.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.encrypt"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.encrypt:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.encrypt**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.encrypt" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Boolean specifying whether SAML assertions should be encrypted with the client's public key.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.force.post.binding"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.force.post.binding:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.force.post.binding**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.force.post.binding" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For SAML clients, boolean specifying whether always to use POST binding for responses.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.onetimeuse.condition"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.onetimeuse.condition:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.onetimeuse.condition**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.onetimeuse.condition" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For SAML clients, boolean specifying whether a OneTimeUse condition should be included in login responses.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.server.signature"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.server.signature:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.server.signature**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.server.signature" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Boolean specifying whether SAML documents should be signed by the realm.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.server.signature.keyinfo.ext"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.server.signature.keyinfo.ext:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.server.signature.keyinfo.ext**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.server.signature.keyinfo.ext" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For SAML clients, boolean specifying whether REDIRECT signing key lookup should be optimized through inclusion of the signing key id in the SAML Extensions element.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.signature.algorithm"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.signature.algorithm:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.signature.algorithm**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.signature.algorithm" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Signature algorithm used to sign SAML documents. One of \ :literal:`RSA\_SHA256`\ , \ :literal:`RSA\_SHA1`\ , \ :literal:`RSA\_SHA512`\ , or \ :literal:`DSA\_SHA1`\ .
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.signing.certificate"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.signing.certificate:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.signing.certificate**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.signing.certificate" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      SAML signing key certificate, base64-encoded.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml.signing.private.key"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml.signing.private.key:
+
+      .. rst-class:: ansible-option-title
+
+      **saml.signing.private.key**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml.signing.private.key" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      SAML signing key private key, base64-encoded.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml_assertion_consumer_url_post"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml_assertion_consumer_url_post:
+
+      .. rst-class:: ansible-option-title
+
+      **saml_assertion_consumer_url_post**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml_assertion_consumer_url_post" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      SAML POST Binding URL for the client's assertion consumer service (login responses).
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml_assertion_consumer_url_redirect"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml_assertion_consumer_url_redirect:
+
+      .. rst-class:: ansible-option-title
+
+      **saml_assertion_consumer_url_redirect**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml_assertion_consumer_url_redirect" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      SAML Redirect Binding URL for the client's assertion consumer service (login responses).
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml_force_name_id_format"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml_force_name_id_format:
+
+      .. rst-class:: ansible-option-title
+
+      **saml_force_name_id_format**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml_force_name_id_format" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For SAML clients, Boolean specifying whether to ignore requested NameID subject format and using the configured one instead.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml_name_id_format"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml_name_id_format:
+
+      .. rst-class:: ansible-option-title
+
+      **saml_name_id_format**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml_name_id_format" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For SAML clients, the NameID format to use (one of \ :literal:`username`\ , \ :literal:`email`\ , \ :literal:`transient`\ , or \ :literal:`persistent`\ )
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml_signature_canonicalization_method"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml_signature_canonicalization_method:
+
+      .. rst-class:: ansible-option-title
+
+      **saml_signature_canonicalization_method**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml_signature_canonicalization_method" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      SAML signature canonicalization method. This is one of four values, namely \ :literal:`http://www.w3.org/2001/10/xml-exc-c14n#`\  for EXCLUSIVE, \ :literal:`http://www.w3.org/2001/10/xml-exc-c14n#WithComments`\  for EXCLUSIVE\_WITH\_COMMENTS, \ :literal:`http://www.w3.org/TR/2001/REC-xml-c14n-20010315`\  for INCLUSIVE, and \ :literal:`http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments`\  for INCLUSIVE\_WITH\_COMMENTS.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml_single_logout_service_url_post"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml_single_logout_service_url_post:
+
+      .. rst-class:: ansible-option-title
+
+      **saml_single_logout_service_url_post**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml_single_logout_service_url_post" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      SAML POST binding url for the client's single logout service.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/saml_single_logout_service_url_redirect"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/saml_single_logout_service_url_redirect:
+
+      .. rst-class:: ansible-option-title
+
+      **saml_single_logout_service_url_redirect**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/saml_single_logout_service_url_redirect" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      SAML redirect binding url for the client's single logout service.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/use.jwks.url"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/use.jwks.url:
+
+      .. rst-class:: ansible-option-title
+
+      **use.jwks.url**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/use.jwks.url" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For OpenID-Connect clients, boolean specifying whether to use a JWKS URL to obtain client public keys.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes/user.info.response.signature.alg"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-attributes/user.info.response.signature.alg:
+
+      .. rst-class:: ansible-option-title
+
+      **user.info.response.signature.alg**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes/user.info.response.signature.alg" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For OpenID-Connect clients, JWA algorithm for signed UserInfo-endpoint responses. One of \ :literal:`RS256`\  or \ :literal:`unsigned`\ .
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_client_id"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-auth_client_id:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_client_id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_client_id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      OpenID Connect \ :emphasis:`client\_id`\  to authenticate to the API with.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"admin-cli"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_client_secret"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-auth_client_secret:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_client_secret**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_client_secret" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Client Secret to use in conjunction with \ :emphasis:`auth\_client\_id`\  (if required).
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_keycloak_url"></div>
+        <div class="ansibleOptionAnchor" id="parameter-url"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-auth_keycloak_url:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-url:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_keycloak_url**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_keycloak_url" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: url`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string` / :ansible-option-required:`required`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      URL to the Keycloak instance.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_password"></div>
+        <div class="ansibleOptionAnchor" id="parameter-password"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-auth_password:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-password:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_password**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_password" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: password`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Password to authenticate for API access with.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_realm"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-auth_realm:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_realm**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_realm" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Keycloak realm name to authenticate to for API access.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_username"></div>
+        <div class="ansibleOptionAnchor" id="parameter-username"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-auth_username:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-username:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_username**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_username" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: username`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Username to authenticate for API access with.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-authentication_flow_binding_overrides"></div>
+        <div class="ansibleOptionAnchor" id="parameter-authenticationFlowBindingOverrides"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-authentication_flow_binding_overrides:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-authenticationflowbindingoverrides:
+
+      .. rst-class:: ansible-option-title
+
+      **authentication_flow_binding_overrides**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-authentication_flow_binding_overrides" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: authenticationFlowBindingOverrides`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 3.4.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Override realm authentication flow bindings.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-authorization_services_enabled"></div>
+        <div class="ansibleOptionAnchor" id="parameter-authorizationServicesEnabled"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-authorization_services_enabled:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-authorizationservicesenabled:
+
+      .. rst-class:: ansible-option-title
+
+      **authorization_services_enabled**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-authorization_services_enabled" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: authorizationServicesEnabled`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Are authorization services enabled for this client or not (OpenID connect). This is 'authorizationServicesEnabled' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-authorization_settings"></div>
+        <div class="ansibleOptionAnchor" id="parameter-authorizationSettings"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-authorization_settings:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-authorizationsettings:
+
+      .. rst-class:: ansible-option-title
+
+      **authorization_settings**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-authorization_settings" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: authorizationSettings`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      a data structure defining the authorization settings for this client. For reference, please see the Keycloak API docs at \ https://www.keycloak.org/docs-api/8.0/rest-api/index.html#_resourceserverrepresentation\ . This is 'authorizationSettings' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-base_url"></div>
+        <div class="ansibleOptionAnchor" id="parameter-baseUrl"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-base_url:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-baseurl:
+
+      .. rst-class:: ansible-option-title
+
+      **base_url**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-base_url" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: baseUrl`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Default URL to use when the auth server needs to redirect or link back to the client This is 'baseUrl' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-bearer_only"></div>
+        <div class="ansibleOptionAnchor" id="parameter-bearerOnly"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-bearer_only:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-beareronly:
+
+      .. rst-class:: ansible-option-title
+
+      **bearer_only**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-bearer_only" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: bearerOnly`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      The access type of this client is bearer-only. This is 'bearerOnly' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-client_authenticator_type"></div>
+        <div class="ansibleOptionAnchor" id="parameter-clientAuthenticatorType"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-client_authenticator_type:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-clientauthenticatortype:
+
+      .. rst-class:: ansible-option-title
+
+      **client_authenticator_type**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-client_authenticator_type" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: clientAuthenticatorType`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      How do clients authenticate with the auth server? Either \ :literal:`client-secret`\  or \ :literal:`client-jwt`\  can be chosen. When using \ :literal:`client-secret`\ , the module parameter \ :emphasis:`secret`\  can set it, while for \ :literal:`client-jwt`\ , you can use the keys \ :literal:`use.jwks.url`\ , \ :literal:`jwks.url`\ , and \ :literal:`jwt.credential.certificate`\  in the \ :emphasis:`attributes`\  module parameter to configure its behavior. This is 'clientAuthenticatorType' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`"client-secret"`
+      - :ansible-option-choices-entry:`"client-jwt"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-client_id"></div>
+        <div class="ansibleOptionAnchor" id="parameter-clientId"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-client_id:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-clientid:
+
+      .. rst-class:: ansible-option-title
+
+      **client_id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-client_id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: clientId`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Client id of client to be worked on. This is usually an alphanumeric name chosen by you. Either this or \ :emphasis:`id`\  is required. If you specify both, \ :emphasis:`id`\  takes precedence. This is 'clientId' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-client_template"></div>
+        <div class="ansibleOptionAnchor" id="parameter-clientTemplate"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-client_template:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-clienttemplate:
+
+      .. rst-class:: ansible-option-title
+
+      **client_template**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-client_template" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: clientTemplate`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Client template to use for this client. If it does not exist this field will silently be dropped. This is 'clientTemplate' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-connection_timeout"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-connection_timeout:
+
+      .. rst-class:: ansible-option-title
+
+      **connection_timeout**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-connection_timeout" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 4.5.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Controls the HTTP connections timeout period (in seconds) to Keycloak API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`10`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-consent_required"></div>
+        <div class="ansibleOptionAnchor" id="parameter-consentRequired"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-consent_required:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-consentrequired:
+
+      .. rst-class:: ansible-option-title
+
+      **consent_required**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-consent_required" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: consentRequired`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      If enabled, users have to consent to client access. This is 'consentRequired' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-default_client_scopes"></div>
+        <div class="ansibleOptionAnchor" id="parameter-defaultClientScopes"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-default_client_scopes:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-defaultclientscopes:
+
+      .. rst-class:: ansible-option-title
+
+      **default_client_scopes**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-default_client_scopes" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: defaultClientScopes`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`list` / :ansible-option-elements:`elements=string`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 4.7.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      List of default client scopes.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-default_roles"></div>
+        <div class="ansibleOptionAnchor" id="parameter-defaultRoles"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-default_roles:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-defaultroles:
+
+      .. rst-class:: ansible-option-title
+
+      **default_roles**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-default_roles" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: defaultRoles`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`list` / :ansible-option-elements:`elements=string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      list of default roles for this client. If the client roles referenced do not exist yet, they will be created. This is 'defaultRoles' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-description"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-description:
+
+      .. rst-class:: ansible-option-title
+
+      **description**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-description" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Description of the client in Keycloak.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-direct_access_grants_enabled"></div>
+        <div class="ansibleOptionAnchor" id="parameter-directAccessGrantsEnabled"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-direct_access_grants_enabled:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-directaccessgrantsenabled:
+
+      .. rst-class:: ansible-option-title
+
+      **direct_access_grants_enabled**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-direct_access_grants_enabled" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: directAccessGrantsEnabled`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Are direct access grants enabled for this client or not (OpenID connect). This is 'directAccessGrantsEnabled' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-enabled"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-enabled:
+
+      .. rst-class:: ansible-option-title
+
+      **enabled**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-enabled" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Is this client enabled or not?
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-frontchannel_logout"></div>
+        <div class="ansibleOptionAnchor" id="parameter-frontchannelLogout"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-frontchannel_logout:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-frontchannellogout:
+
+      .. rst-class:: ansible-option-title
+
+      **frontchannel_logout**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-frontchannel_logout" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: frontchannelLogout`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Is frontchannel logout enabled for this client or not. This is 'frontchannelLogout' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-full_scope_allowed"></div>
+        <div class="ansibleOptionAnchor" id="parameter-fullScopeAllowed"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-full_scope_allowed:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-fullscopeallowed:
+
+      .. rst-class:: ansible-option-title
+
+      **full_scope_allowed**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-full_scope_allowed" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: fullScopeAllowed`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Is the "Full Scope Allowed" feature set for this client or not. This is 'fullScopeAllowed' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-http_agent"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-http_agent:
+
+      .. rst-class:: ansible-option-title
+
+      **http_agent**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-http_agent" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 5.4.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Configures the HTTP User-Agent header.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"Ansible"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-id"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-id:
+
+      .. rst-class:: ansible-option-title
+
+      **id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Id of client to be worked on. This is usually an UUID. Either this or \ :emphasis:`client\_id`\  is required. If you specify both, this takes precedence.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-implicit_flow_enabled"></div>
+        <div class="ansibleOptionAnchor" id="parameter-implicitFlowEnabled"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-implicit_flow_enabled:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-implicitflowenabled:
+
+      .. rst-class:: ansible-option-title
+
+      **implicit_flow_enabled**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-implicit_flow_enabled" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: implicitFlowEnabled`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Enable implicit flow for this client or not (OpenID connect). This is 'implicitFlowEnabled' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-name"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-name:
+
+      .. rst-class:: ansible-option-title
+
+      **name**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-name" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Name of the client (this is not the same as \ :emphasis:`client\_id`\ ).
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-node_re_registration_timeout"></div>
+        <div class="ansibleOptionAnchor" id="parameter-nodeReRegistrationTimeout"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-node_re_registration_timeout:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-nodereregistrationtimeout:
+
+      .. rst-class:: ansible-option-title
+
+      **node_re_registration_timeout**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-node_re_registration_timeout" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: nodeReRegistrationTimeout`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Cluster node re-registration timeout for this client. This is 'nodeReRegistrationTimeout' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-not_before"></div>
+        <div class="ansibleOptionAnchor" id="parameter-notBefore"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-not_before:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-notbefore:
+
+      .. rst-class:: ansible-option-title
+
+      **not_before**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-not_before" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: notBefore`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Revoke any tokens issued before this date for this client (this is a UNIX timestamp). This is 'notBefore' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-optional_client_scopes"></div>
+        <div class="ansibleOptionAnchor" id="parameter-optionalClientScopes"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-optional_client_scopes:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-optionalclientscopes:
+
+      .. rst-class:: ansible-option-title
+
+      **optional_client_scopes**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-optional_client_scopes" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: optionalClientScopes`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`list` / :ansible-option-elements:`elements=string`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 4.7.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      List of optional client scopes.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-protocol"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocol:
+
+      .. rst-class:: ansible-option-title
+
+      **protocol**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-protocol" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Type of client (either \ :literal:`openid-connect`\  or \ :literal:`saml`\ .
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`"openid-connect"`
+      - :ansible-option-choices-entry:`"saml"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-protocol_mappers"></div>
+        <div class="ansibleOptionAnchor" id="parameter-protocolMappers"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocol_mappers:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocolmappers:
+
+      .. rst-class:: ansible-option-title
+
+      **protocol_mappers**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-protocol_mappers" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: protocolMappers`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      a list of dicts defining protocol mappers for this client. This is 'protocolMappers' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+    
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-protocol_mappers/config"></div>
+        <div class="ansibleOptionAnchor" id="parameter-protocolMappers/config"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocol_mappers/config:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocolmappers/config:
+
+      .. rst-class:: ansible-option-title
+
+      **config**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-protocol_mappers/config" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Dict specifying the configuration options for the protocol mapper; the contents differ depending on the value of \ :emphasis:`protocolMapper`\  and are not documented other than by the source of the mappers and its parent class(es). An example is given below. It is easiest to obtain valid config values by dumping an already-existing protocol mapper configuration through check-mode in the \ :emphasis:`existing`\  field.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-protocol_mappers/consentRequired"></div>
+        <div class="ansibleOptionAnchor" id="parameter-protocolMappers/consentRequired"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocol_mappers/consentrequired:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocolmappers/consentrequired:
+
+      .. rst-class:: ansible-option-title
+
+      **consentRequired**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-protocol_mappers/consentRequired" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Specifies whether a user needs to provide consent to a client for this mapper to be active.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-protocol_mappers/consentText"></div>
+        <div class="ansibleOptionAnchor" id="parameter-protocolMappers/consentText"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocol_mappers/consenttext:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocolmappers/consenttext:
+
+      .. rst-class:: ansible-option-title
+
+      **consentText**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-protocol_mappers/consentText" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      The human-readable name of the consent the user is presented to accept.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-protocol_mappers/id"></div>
+        <div class="ansibleOptionAnchor" id="parameter-protocolMappers/id"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocol_mappers/id:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocolmappers/id:
+
+      .. rst-class:: ansible-option-title
+
+      **id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-protocol_mappers/id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Usually a UUID specifying the internal ID of this protocol mapper instance.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-protocol_mappers/name"></div>
+        <div class="ansibleOptionAnchor" id="parameter-protocolMappers/name"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocol_mappers/name:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocolmappers/name:
+
+      .. rst-class:: ansible-option-title
+
+      **name**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-protocol_mappers/name" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      The name of this protocol mapper.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-protocol_mappers/protocol"></div>
+        <div class="ansibleOptionAnchor" id="parameter-protocolMappers/protocol"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocol_mappers/protocol:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocolmappers/protocol:
+
+      .. rst-class:: ansible-option-title
+
+      **protocol**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-protocol_mappers/protocol" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      This is either \ :literal:`openid-connect`\  or \ :literal:`saml`\ , this specifies for which protocol this protocol mapper. is active.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`"openid-connect"`
+      - :ansible-option-choices-entry:`"saml"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-protocol_mappers/protocolMapper"></div>
+        <div class="ansibleOptionAnchor" id="parameter-protocolMappers/protocolMapper"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocol_mappers/protocolmapper:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-protocolmappers/protocolmapper:
+
+      .. rst-class:: ansible-option-title
+
+      **protocolMapper**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-protocol_mappers/protocolMapper" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      The Keycloak-internal name of the type of this protocol-mapper. While an exhaustive list is impossible to provide since this may be extended through SPIs by the user of Keycloak, by default Keycloak as of 3.4 ships with at least
+
+      \ :literal:`docker-v2-allow-all-mapper`\ 
+
+      \ :literal:`oidc-address-mapper`\ 
+
+      \ :literal:`oidc-full-name-mapper`\ 
+
+      \ :literal:`oidc-group-membership-mapper`\ 
+
+      \ :literal:`oidc-hardcoded-claim-mapper`\ 
+
+      \ :literal:`oidc-hardcoded-role-mapper`\ 
+
+      \ :literal:`oidc-role-name-mapper`\ 
+
+      \ :literal:`oidc-script-based-protocol-mapper`\ 
+
+      \ :literal:`oidc-sha256-pairwise-sub-mapper`\ 
+
+      \ :literal:`oidc-usermodel-attribute-mapper`\ 
+
+      \ :literal:`oidc-usermodel-client-role-mapper`\ 
+
+      \ :literal:`oidc-usermodel-property-mapper`\ 
+
+      \ :literal:`oidc-usermodel-realm-role-mapper`\ 
+
+      \ :literal:`oidc-usersessionmodel-note-mapper`\ 
+
+      \ :literal:`saml-group-membership-mapper`\ 
+
+      \ :literal:`saml-hardcode-attribute-mapper`\ 
+
+      \ :literal:`saml-hardcode-role-mapper`\ 
+
+      \ :literal:`saml-role-list-mapper`\ 
+
+      \ :literal:`saml-role-name-mapper`\ 
+
+      \ :literal:`saml-user-attribute-mapper`\ 
+
+      \ :literal:`saml-user-property-mapper`\ 
+
+      \ :literal:`saml-user-session-note-mapper`\ 
+
+      An exhaustive list of available mappers on your installation can be obtained on the admin console by going to Server Info -\> Providers and looking under 'protocol-mapper'.
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-public_client"></div>
+        <div class="ansibleOptionAnchor" id="parameter-publicClient"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-public_client:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-publicclient:
+
+      .. rst-class:: ansible-option-title
+
+      **public_client**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-public_client" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: publicClient`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Is the access type for this client public or not. This is 'publicClient' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-realm"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-realm:
+
+      .. rst-class:: ansible-option-title
+
+      **realm**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-realm" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      The realm to create the client in.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"master"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-redirect_uris"></div>
+        <div class="ansibleOptionAnchor" id="parameter-redirectUris"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-redirect_uris:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-redirecturis:
+
+      .. rst-class:: ansible-option-title
+
+      **redirect_uris**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-redirect_uris" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: redirectUris`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`list` / :ansible-option-elements:`elements=string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Acceptable redirect URIs for this client. This is 'redirectUris' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-registered_nodes"></div>
+        <div class="ansibleOptionAnchor" id="parameter-registeredNodes"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-registered_nodes:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-registerednodes:
+
+      .. rst-class:: ansible-option-title
+
+      **registered_nodes**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-registered_nodes" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: registeredNodes`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      dict of registered cluster nodes (with \ :literal:`nodename`\  as the key and last registration time as the value). This is 'registeredNodes' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-registration_access_token"></div>
+        <div class="ansibleOptionAnchor" id="parameter-registrationAccessToken"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-registration_access_token:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-registrationaccesstoken:
+
+      .. rst-class:: ansible-option-title
+
+      **registration_access_token**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-registration_access_token" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: registrationAccessToken`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      The registration access token provides access for clients to the client registration service. This is 'registrationAccessToken' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-root_url"></div>
+        <div class="ansibleOptionAnchor" id="parameter-rootUrl"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-root_url:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-rooturl:
+
+      .. rst-class:: ansible-option-title
+
+      **root_url**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-root_url" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: rootUrl`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Root URL appended to relative URLs for this client. This is 'rootUrl' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-secret"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-secret:
+
+      .. rst-class:: ansible-option-title
+
+      **secret**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-secret" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      When using \ :emphasis:`client\_authenticator\_type`\  \ :literal:`client-secret`\  (the default), you can specify a secret here (otherwise one will be generated if it does not exit). If changing this secret, the module will not register a change currently (but the changed secret will be saved).
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-service_accounts_enabled"></div>
+        <div class="ansibleOptionAnchor" id="parameter-serviceAccountsEnabled"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-service_accounts_enabled:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-serviceaccountsenabled:
+
+      .. rst-class:: ansible-option-title
+
+      **service_accounts_enabled**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-service_accounts_enabled" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: serviceAccountsEnabled`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Are service accounts enabled for this client or not (OpenID connect). This is 'serviceAccountsEnabled' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-standard_flow_enabled"></div>
+        <div class="ansibleOptionAnchor" id="parameter-standardFlowEnabled"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-standard_flow_enabled:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-standardflowenabled:
+
+      .. rst-class:: ansible-option-title
+
+      **standard_flow_enabled**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-standard_flow_enabled" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: standardFlowEnabled`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Enable standard flow for this client or not (OpenID connect). This is 'standardFlowEnabled' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-state"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-state:
+
+      .. rst-class:: ansible-option-title
+
+      **state**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-state" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      State of the client
+
+      On \ :literal:`present`\ , the client will be created (or updated if it exists already).
+
+      On \ :literal:`absent`\ , the client will be removed if it exists
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`"present"` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`"absent"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-surrogate_auth_required"></div>
+        <div class="ansibleOptionAnchor" id="parameter-surrogateAuthRequired"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-surrogate_auth_required:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-surrogateauthrequired:
+
+      .. rst-class:: ansible-option-title
+
+      **surrogate_auth_required**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-surrogate_auth_required" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: surrogateAuthRequired`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Whether or not surrogate auth is required. This is 'surrogateAuthRequired' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-token"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-token:
+
+      .. rst-class:: ansible-option-title
+
+      **token**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-token" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 3.0.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Authentication token for Keycloak API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-use_template_config"></div>
+        <div class="ansibleOptionAnchor" id="parameter-useTemplateConfig"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-use_template_config:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-usetemplateconfig:
+
+      .. rst-class:: ansible-option-title
+
+      **use_template_config**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-use_template_config" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: useTemplateConfig`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Whether or not to use configuration from the \ :emphasis:`client\_template`\ . This is 'useTemplateConfig' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-use_template_mappers"></div>
+        <div class="ansibleOptionAnchor" id="parameter-useTemplateMappers"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-use_template_mappers:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-usetemplatemappers:
+
+      .. rst-class:: ansible-option-title
+
+      **use_template_mappers**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-use_template_mappers" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: useTemplateMappers`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Whether or not to use mapper configuration from the \ :emphasis:`client\_template`\ . This is 'useTemplateMappers' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-use_template_scope"></div>
+        <div class="ansibleOptionAnchor" id="parameter-useTemplateScope"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-use_template_scope:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-usetemplatescope:
+
+      .. rst-class:: ansible-option-title
+
+      **use_template_scope**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-use_template_scope" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: useTemplateScope`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Whether or not to use scope configuration from the \ :emphasis:`client\_template`\ . This is 'useTemplateScope' in the Keycloak REST API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-validate_certs"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-validate_certs:
+
+      .. rst-class:: ansible-option-title
+
+      **validate_certs**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-validate_certs" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Verify TLS certificates (do not disable this in production).
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-web_origins"></div>
+        <div class="ansibleOptionAnchor" id="parameter-webOrigins"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-web_origins:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__parameter-weborigins:
+
+      .. rst-class:: ansible-option-title
+
+      **web_origins**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-web_origins" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: webOrigins`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`list` / :ansible-option-elements:`elements=string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      List of allowed CORS origins. This is 'webOrigins' in the Keycloak REST API.
+
+
+      .. raw:: html
+
+        </div>
+
+
+.. Attributes
+
+
+.. Notes
+
+
+.. Seealso
+
+
+.. Examples
+
+Examples
+--------
+
+.. code-block:: yaml+jinja
+
+    
+    - name: Create or update Keycloak client (minimal example), authentication with credentials
+      middleware_automation.keycloak.keycloak_client:
+        auth_keycloak_url: https://auth.example.com/auth
+        auth_realm: master
+        auth_username: USERNAME
+        auth_password: PASSWORD
+        client_id: test
+        state: present
+      delegate_to: localhost
+
+
+    - name: Create or update Keycloak client (minimal example), authentication with token
+      middleware_automation.keycloak.keycloak_client:
+        auth_client_id: admin-cli
+        auth_keycloak_url: https://auth.example.com/auth
+        auth_realm: master
+        token: TOKEN
+        client_id: test
+        state: present
+      delegate_to: localhost
+
+
+    - name: Delete a Keycloak client
+      middleware_automation.keycloak.keycloak_client:
+        auth_client_id: admin-cli
+        auth_keycloak_url: https://auth.example.com/auth
+        auth_realm: master
+        auth_username: USERNAME
+        auth_password: PASSWORD
+        client_id: test
+        state: absent
+      delegate_to: localhost
+
+
+    - name: Create or update a Keycloak client (with all the bells and whistles)
+      middleware_automation.keycloak.keycloak_client:
+        auth_client_id: admin-cli
+        auth_keycloak_url: https://auth.example.com/auth
+        auth_realm: master
+        auth_username: USERNAME
+        auth_password: PASSWORD
+        state: present
+        realm: master
+        client_id: test
+        id: d8b127a3-31f6-44c8-a7e4-4ab9a3e78d95
+        name: this_is_a_test
+        description: Description of this wonderful client
+        root_url: https://www.example.com/
+        admin_url: https://www.example.com/admin_url
+        base_url: basepath
+        enabled: true
+        client_authenticator_type: client-secret
+        secret: REALLYWELLKEPTSECRET
+        redirect_uris:
+          - https://www.example.com/*
+          - http://localhost:8888/
+        web_origins:
+          - https://www.example.com/*
+        not_before: 1507825725
+        bearer_only: false
+        consent_required: false
+        standard_flow_enabled: true
+        implicit_flow_enabled: false
+        direct_access_grants_enabled: false
+        service_accounts_enabled: false
+        authorization_services_enabled: false
+        public_client: false
+        frontchannel_logout: false
+        protocol: openid-connect
+        full_scope_allowed: false
+        node_re_registration_timeout: -1
+        client_template: test
+        use_template_config: false
+        use_template_scope: false
+        use_template_mappers: false
+        always_display_in_console: true
+        registered_nodes:
+          node01.example.com: 1507828202
+        registration_access_token: eyJWT_TOKEN
+        surrogate_auth_required: false
+        default_roles:
+          - test01
+          - test02
+        authentication_flow_binding_overrides:
+            browser: 4c90336b-bf1d-4b87-916d-3677ba4e5fbb
+        protocol_mappers:
+          - config:
+              access.token.claim: true
+              claim.name: "family_name"
+              id.token.claim: true
+              jsonType.label: String
+              user.attribute: lastName
+              userinfo.token.claim: true
+            consentRequired: true
+            consentText: "${familyName}"
+            name: family name
+            protocol: openid-connect
+            protocolMapper: oidc-usermodel-property-mapper
+          - config:
+              attribute.name: Role
+              attribute.nameformat: Basic
+              single: false
+            consentRequired: false
+            name: role list
+            protocol: saml
+            protocolMapper: saml-role-list-mapper
+        attributes:
+          saml.authnstatement: true
+          saml.client.signature: true
+          saml.force.post.binding: true
+          saml.server.signature: true
+          saml.signature.algorithm: RSA_SHA256
+          saml.signing.certificate: CERTIFICATEHERE
+          saml.signing.private.key: PRIVATEKEYHERE
+          saml_force_name_id_format: false
+          saml_name_id_format: username
+          saml_signature_canonicalization_method: "http://www.w3.org/2001/10/xml-exc-c14n#"
+          user.info.response.signature.alg: RS256
+          request.object.signature.alg: RS256
+          use.jwks.url: true
+          jwks.url: JWKS_URL_FOR_CLIENT_AUTH_JWT
+          jwt.credential.certificate: JWT_CREDENTIAL_CERTIFICATE_FOR_CLIENT_AUTH
+      delegate_to: localhost
+
+
+
+
+.. Facts
+
+
+.. Return values
+
+Return Values
+-------------
+Common return values are documented :ref:`here <common_return_values>`, the following are the fields unique to this module:
+
+.. rst-class:: ansible-option-table
+
+.. list-table::
+  :width: 100%
+  :widths: auto
+  :header-rows: 1
+
+  * - Key
+    - Description
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-end_state"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__return-end_state:
+
+      .. rst-class:: ansible-option-title
+
+      **end_state**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-end_state" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Representation of client after module execution (sample is truncated).
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` on success
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"adminUrl": "http://www.example.com/admin\_url", "attributes": {"request.object.signature.alg": "RS256"}}`
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-existing"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__return-existing:
+
+      .. rst-class:: ansible-option-title
+
+      **existing**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-existing" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Representation of existing client (sample is truncated).
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` always
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"adminUrl": "http://www.example.com/admin\_url", "attributes": {"request.object.signature.alg": "RS256"}}`
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-msg"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__return-msg:
+
+      .. rst-class:: ansible-option-title
+
+      **msg**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-msg" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Message as to what action was taken.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` always
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`"Client testclient has been updated"`
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-proposed"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_client_module__return-proposed:
+
+      .. rst-class:: ansible-option-title
+
+      **proposed**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-proposed" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Representation of proposed client.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` always
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"clientId": "test"}`
+
+
+      .. raw:: html
+
+        </div>
+
+
+
+..  Status (Presently only deprecated)
+
+
+.. Authors
+
+Authors
+~~~~~~~
+
+- Eike Frost (@eikef)
+
+
+
+.. Extra links
+
+
+.. Parsing errors
+
diff --git a/main/_sources/plugins/keycloak_role.rst.txt b/main/_sources/plugins/keycloak_role.rst.txt
new file mode 100644
index 0000000..b33b99d
--- /dev/null
+++ b/main/_sources/plugins/keycloak_role.rst.txt
@@ -0,0 +1,1015 @@
+
+.. Document meta
+
+:orphan:
+
+.. |antsibull-internal-nbsp| unicode:: 0xA0
+    :trim:
+
+.. role:: ansible-attribute-support-label
+.. role:: ansible-attribute-support-property
+.. role:: ansible-attribute-support-full
+.. role:: ansible-attribute-support-partial
+.. role:: ansible-attribute-support-none
+.. role:: ansible-attribute-support-na
+.. role:: ansible-option-type
+.. role:: ansible-option-elements
+.. role:: ansible-option-required
+.. role:: ansible-option-versionadded
+.. role:: ansible-option-aliases
+.. role:: ansible-option-choices
+.. role:: ansible-option-choices-default-mark
+.. role:: ansible-option-default-bold
+.. role:: ansible-option-configuration
+.. role:: ansible-option-returned-bold
+.. role:: ansible-option-sample-bold
+
+.. Anchors
+
+.. _ansible_collections.middleware_automation.keycloak.keycloak_role_module:
+
+.. Anchors: short name for ansible.builtin
+
+.. Anchors: aliases
+
+
+
+.. Title
+
+keycloak_role -- Allows administration of Keycloak roles via Keycloak API
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+.. Collection note
+
+.. note::
+    This module is part of the `middleware_automation.keycloak collection <https://galaxy.ansible.com/middleware_automation/keycloak>`_.
+
+    To install it, use: :code:`ansible-galaxy collection install middleware\_automation.keycloak`.
+
+    To use it in a playbook, specify: :code:`middleware_automation.keycloak.keycloak_role`.
+
+.. version_added
+
+.. rst-class:: ansible-version-added
+
+New in middleware\_automation.keycloak 3.4.0
+
+.. contents::
+   :local:
+   :depth: 1
+
+.. Deprecated
+
+
+Synopsis
+--------
+
+.. Description
+
+- This module allows you to add, remove or modify Keycloak roles via the Keycloak REST API. It requires access to the REST API via OpenID Connect; the user connecting and the client being used must have the requisite access rights. In a default Keycloak installation, admin-cli and an admin user would work, as would a separate client definition with the scope tailored to your needs and a user having the expected roles.
+- The names of module options are snake\_cased versions of the camelCase ones found in the Keycloak API and its documentation at \ https://www.keycloak.org/docs-api/8.0/rest-api/index.html\ .
+- Attributes are multi-valued in the Keycloak API. All attributes are lists of individual values and will be returned that way by this module. You may pass single values for attributes when calling the module, and this will be translated into a list suitable for the API.
+
+
+.. Aliases
+
+
+.. Requirements
+
+
+
+
+
+
+.. Options
+
+Parameters
+----------
+
+
+.. rst-class:: ansible-option-table
+
+.. list-table::
+  :width: 100%
+  :widths: auto
+  :header-rows: 1
+
+  * - Parameter
+    - Comments
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-attributes"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-attributes:
+
+      .. rst-class:: ansible-option-title
+
+      **attributes**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-attributes" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      A dict of key/value pairs to set as custom attributes for the role.
+
+      Values may be single values (e.g. a string) or a list of strings.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_client_id"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-auth_client_id:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_client_id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_client_id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      OpenID Connect \ :emphasis:`client\_id`\  to authenticate to the API with.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"admin-cli"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_client_secret"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-auth_client_secret:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_client_secret**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_client_secret" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Client Secret to use in conjunction with \ :emphasis:`auth\_client\_id`\  (if required).
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_keycloak_url"></div>
+        <div class="ansibleOptionAnchor" id="parameter-url"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-auth_keycloak_url:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-url:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_keycloak_url**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_keycloak_url" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: url`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string` / :ansible-option-required:`required`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      URL to the Keycloak instance.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_password"></div>
+        <div class="ansibleOptionAnchor" id="parameter-password"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-auth_password:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-password:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_password**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_password" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: password`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Password to authenticate for API access with.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_realm"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-auth_realm:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_realm**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_realm" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Keycloak realm name to authenticate to for API access.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_username"></div>
+        <div class="ansibleOptionAnchor" id="parameter-username"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-auth_username:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-username:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_username**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_username" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: username`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Username to authenticate for API access with.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-client_id"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-client_id:
+
+      .. rst-class:: ansible-option-title
+
+      **client_id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-client_id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      If the role is a client role, the client id under which it resides.
+
+      If this parameter is absent, the role is considered a realm role.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-connection_timeout"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-connection_timeout:
+
+      .. rst-class:: ansible-option-title
+
+      **connection_timeout**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-connection_timeout" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 4.5.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Controls the HTTP connections timeout period (in seconds) to Keycloak API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`10`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-description"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-description:
+
+      .. rst-class:: ansible-option-title
+
+      **description**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-description" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      The role description.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-http_agent"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-http_agent:
+
+      .. rst-class:: ansible-option-title
+
+      **http_agent**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-http_agent" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 5.4.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Configures the HTTP User-Agent header.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"Ansible"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-name"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-name:
+
+      .. rst-class:: ansible-option-title
+
+      **name**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-name" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string` / :ansible-option-required:`required`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Name of the role.
+
+      This parameter is required.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-realm"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-realm:
+
+      .. rst-class:: ansible-option-title
+
+      **realm**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-realm" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      The Keycloak realm under which this role resides.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"master"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-state"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-state:
+
+      .. rst-class:: ansible-option-title
+
+      **state**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-state" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      State of the role.
+
+      On \ :literal:`present`\ , the role will be created if it does not yet exist, or updated with the parameters you provide.
+
+      On \ :literal:`absent`\ , the role will be removed if it exists.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`"present"` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`"absent"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-token"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-token:
+
+      .. rst-class:: ansible-option-title
+
+      **token**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-token" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 3.0.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Authentication token for Keycloak API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-validate_certs"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__parameter-validate_certs:
+
+      .. rst-class:: ansible-option-title
+
+      **validate_certs**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-validate_certs" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Verify TLS certificates (do not disable this in production).
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)`
+
+
+      .. raw:: html
+
+        </div>
+
+
+.. Attributes
+
+
+.. Notes
+
+
+.. Seealso
+
+
+.. Examples
+
+Examples
+--------
+
+.. code-block:: yaml+jinja
+
+    
+    - name: Create a Keycloak realm role, authentication with credentials
+      middleware_automation.keycloak.keycloak_role:
+        name: my-new-kc-role
+        realm: MyCustomRealm
+        state: present
+        auth_client_id: admin-cli
+        auth_keycloak_url: https://auth.example.com/auth
+        auth_realm: master
+        auth_username: USERNAME
+        auth_password: PASSWORD
+      delegate_to: localhost
+
+    - name: Create a Keycloak realm role, authentication with token
+      middleware_automation.keycloak.keycloak_role:
+        name: my-new-kc-role
+        realm: MyCustomRealm
+        state: present
+        auth_client_id: admin-cli
+        auth_keycloak_url: https://auth.example.com/auth
+        token: TOKEN
+      delegate_to: localhost
+
+    - name: Create a Keycloak client role
+      middleware_automation.keycloak.keycloak_role:
+        name: my-new-kc-role
+        realm: MyCustomRealm
+        client_id: MyClient
+        state: present
+        auth_client_id: admin-cli
+        auth_keycloak_url: https://auth.example.com/auth
+        auth_realm: master
+        auth_username: USERNAME
+        auth_password: PASSWORD
+      delegate_to: localhost
+
+    - name: Delete a Keycloak role
+      middleware_automation.keycloak.keycloak_role:
+        name: my-role-for-deletion
+        state: absent
+        auth_client_id: admin-cli
+        auth_keycloak_url: https://auth.example.com/auth
+        auth_realm: master
+        auth_username: USERNAME
+        auth_password: PASSWORD
+      delegate_to: localhost
+
+    - name: Create a keycloak role with some custom attributes
+      middleware_automation.keycloak.keycloak_role:
+        auth_client_id: admin-cli
+        auth_keycloak_url: https://auth.example.com/auth
+        auth_realm: master
+        auth_username: USERNAME
+        auth_password: PASSWORD
+        name: my-new-role
+        attributes:
+            attrib1: value1
+            attrib2: value2
+            attrib3:
+                - with
+                - numerous
+                - individual
+                - list
+                - items
+      delegate_to: localhost
+
+
+
+
+.. Facts
+
+
+.. Return values
+
+Return Values
+-------------
+Common return values are documented :ref:`here <common_return_values>`, the following are the fields unique to this module:
+
+.. rst-class:: ansible-option-table
+
+.. list-table::
+  :width: 100%
+  :widths: auto
+  :header-rows: 1
+
+  * - Key
+    - Description
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-end_state"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__return-end_state:
+
+      .. rst-class:: ansible-option-title
+
+      **end_state**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-end_state" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Representation of role after module execution (sample is truncated).
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` on success
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"attributes": {}, "clientRole": true, "composite": false, "containerId": "9f03eb61-a826-4771-a9fd-930e06d2d36a", "description": "My updated client test role", "id": "561703dd-0f38-45ff-9a5a-0c978f794547", "name": "myrole"}`
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-existing"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__return-existing:
+
+      .. rst-class:: ansible-option-title
+
+      **existing**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-existing" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Representation of existing role.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` always
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"attributes": {}, "clientRole": true, "composite": false, "containerId": "9f03eb61-a826-4771-a9fd-930e06d2d36a", "description": "My client test role", "id": "561703dd-0f38-45ff-9a5a-0c978f794547", "name": "myrole"}`
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-msg"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__return-msg:
+
+      .. rst-class:: ansible-option-title
+
+      **msg**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-msg" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Message as to what action was taken.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` always
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`"Role myrole has been updated"`
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-proposed"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__return-proposed:
+
+      .. rst-class:: ansible-option-title
+
+      **proposed**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-proposed" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Representation of proposed role.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` always
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"description": "My updated test description"}`
+
+
+      .. raw:: html
+
+        </div>
+
+
+
+..  Status (Presently only deprecated)
+
+
+.. Authors
+
+Authors
+~~~~~~~
+
+- Laurent Paumier (@laurpaum)
+
+
+
+.. Extra links
+
+
+.. Parsing errors
+
diff --git a/main/_sources/plugins/keycloak_user_federation.rst.txt b/main/_sources/plugins/keycloak_user_federation.rst.txt
new file mode 100644
index 0000000..7593bbe
--- /dev/null
+++ b/main/_sources/plugins/keycloak_user_federation.rst.txt
@@ -0,0 +1,3233 @@
+
+.. Document meta
+
+:orphan:
+
+.. |antsibull-internal-nbsp| unicode:: 0xA0
+    :trim:
+
+.. role:: ansible-attribute-support-label
+.. role:: ansible-attribute-support-property
+.. role:: ansible-attribute-support-full
+.. role:: ansible-attribute-support-partial
+.. role:: ansible-attribute-support-none
+.. role:: ansible-attribute-support-na
+.. role:: ansible-option-type
+.. role:: ansible-option-elements
+.. role:: ansible-option-required
+.. role:: ansible-option-versionadded
+.. role:: ansible-option-aliases
+.. role:: ansible-option-choices
+.. role:: ansible-option-choices-default-mark
+.. role:: ansible-option-default-bold
+.. role:: ansible-option-configuration
+.. role:: ansible-option-returned-bold
+.. role:: ansible-option-sample-bold
+
+.. Anchors
+
+.. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module:
+
+.. Anchors: short name for ansible.builtin
+
+.. Anchors: aliases
+
+
+
+.. Title
+
+keycloak_user_federation -- Allows administration of Keycloak user federations via Keycloak API
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+.. Collection note
+
+.. note::
+    This module is part of the `middleware_automation.keycloak collection <https://galaxy.ansible.com/middleware_automation/keycloak>`_.
+
+    To install it, use: :code:`ansible-galaxy collection install middleware\_automation.keycloak`.
+
+    To use it in a playbook, specify: :code:`middleware_automation.keycloak.keycloak_user_federation`.
+
+.. version_added
+
+.. rst-class:: ansible-version-added
+
+New in middleware\_automation.keycloak 3.7.0
+
+.. contents::
+   :local:
+   :depth: 1
+
+.. Deprecated
+
+
+Synopsis
+--------
+
+.. Description
+
+- This module allows you to add, remove or modify Keycloak user federations via the Keycloak REST API. It requires access to the REST API via OpenID Connect; the user connecting and the client being used must have the requisite access rights. In a default Keycloak installation, admin-cli and an admin user would work, as would a separate client definition with the scope tailored to your needs and a user having the expected roles.
+- The names of module options are snake\_cased versions of the camelCase ones found in the Keycloak API and its documentation at \ https://www.keycloak.org/docs-api/20.0.2/rest-api/index.html\ .
+
+
+.. Aliases
+
+
+.. Requirements
+
+
+
+
+
+
+.. Options
+
+Parameters
+----------
+
+
+.. rst-class:: ansible-option-table
+
+.. list-table::
+  :width: 100%
+  :widths: auto
+  :header-rows: 1
+
+  * - Parameter
+    - Comments
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_client_id"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-auth_client_id:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_client_id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_client_id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      OpenID Connect \ :emphasis:`client\_id`\  to authenticate to the API with.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"admin-cli"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_client_secret"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-auth_client_secret:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_client_secret**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_client_secret" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Client Secret to use in conjunction with \ :emphasis:`auth\_client\_id`\  (if required).
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_keycloak_url"></div>
+        <div class="ansibleOptionAnchor" id="parameter-url"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-auth_keycloak_url:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-url:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_keycloak_url**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_keycloak_url" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: url`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string` / :ansible-option-required:`required`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      URL to the Keycloak instance.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_password"></div>
+        <div class="ansibleOptionAnchor" id="parameter-password"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-auth_password:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-password:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_password**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_password" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: password`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Password to authenticate for API access with.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_realm"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-auth_realm:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_realm**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_realm" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Keycloak realm name to authenticate to for API access.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-auth_username"></div>
+        <div class="ansibleOptionAnchor" id="parameter-username"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-auth_username:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-username:
+
+      .. rst-class:: ansible-option-title
+
+      **auth_username**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-auth_username" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: username`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Username to authenticate for API access with.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config:
+
+      .. rst-class:: ansible-option-title
+
+      **config**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Dict specifying the configuration options for the provider; the contents differ depending on the value of \ :emphasis:`provider\_id`\ . Examples are given below for \ :literal:`ldap`\ , \ :literal:`kerberos`\  and \ :literal:`sssd`\ . It is easiest to obtain valid config values by dumping an already-existing user federation configuration through check-mode in the \ :emphasis:`existing`\  field.
+
+      The value \ :literal:`sssd`\  has been supported since middleware\_automation.keycloak 1.0.0.
+
+
+      .. raw:: html
+
+        </div>
+    
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/allowKerberosAuthentication"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/allowkerberosauthentication:
+
+      .. rst-class:: ansible-option-title
+
+      **allowKerberosAuthentication**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/allowKerberosAuthentication" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Enable/disable HTTP authentication of users with SPNEGO/Kerberos tokens. The data about authenticated users will be provisioned from this LDAP server.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/allowPasswordAuthentication"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/allowpasswordauthentication:
+
+      .. rst-class:: ansible-option-title
+
+      **allowPasswordAuthentication**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/allowPasswordAuthentication" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Enable/disable possibility of username/password authentication against Kerberos database.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/authType"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/authtype:
+
+      .. rst-class:: ansible-option-title
+
+      **authType**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/authType" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Type of the Authentication method used during LDAP Bind operation. It is used in most of the requests sent to the LDAP server.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`"none"` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`"simple"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/batchSizeForSync"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/batchsizeforsync:
+
+      .. rst-class:: ansible-option-title
+
+      **batchSizeForSync**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/batchSizeForSync" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Count of LDAP users to be imported from LDAP to Keycloak within a single transaction.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`1000`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/bindCredential"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/bindcredential:
+
+      .. rst-class:: ansible-option-title
+
+      **bindCredential**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/bindCredential" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Password of LDAP admin.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/bindDn"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/binddn:
+
+      .. rst-class:: ansible-option-title
+
+      **bindDn**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/bindDn" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      DN of LDAP user which will be used by Keycloak to access LDAP server.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/cachePolicy"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/cachepolicy:
+
+      .. rst-class:: ansible-option-title
+
+      **cachePolicy**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/cachePolicy" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Cache Policy for this storage provider.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`"DEFAULT"` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`"EVICT\_DAILY"`
+      - :ansible-option-choices-entry:`"EVICT\_WEEKLY"`
+      - :ansible-option-choices-entry:`"MAX\_LIFESPAN"`
+      - :ansible-option-choices-entry:`"NO\_CACHE"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/changedSyncPeriod"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/changedsyncperiod:
+
+      .. rst-class:: ansible-option-title
+
+      **changedSyncPeriod**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/changedSyncPeriod" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Period for synchronization of changed or newly created LDAP users in seconds.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`-1`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionPooling"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectionpooling:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionPooling**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionPooling" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Determines if Keycloak should use connection pooling for accessing LDAP server.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingAuthentication"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectionpoolingauthentication:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionPoolingAuthentication**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionPoolingAuthentication" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      A list of space-separated authentication types of connections that may be pooled.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`"none"`
+      - :ansible-option-choices-entry:`"simple"`
+      - :ansible-option-choices-entry:`"DIGEST-MD5"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingDebug"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectionpoolingdebug:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionPoolingDebug**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionPoolingDebug" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      A string that indicates the level of debug output to produce. Example valid values are \ :literal:`fine`\  (trace connection creation and removal) and \ :literal:`all`\  (all debugging information).
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingInitSize"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectionpoolinginitsize:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionPoolingInitSize**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionPoolingInitSize" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      The number of connections per connection identity to create when initially creating a connection for the identity.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingMaxSize"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectionpoolingmaxsize:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionPoolingMaxSize**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionPoolingMaxSize" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      The maximum number of connections per connection identity that can be maintained concurrently.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingPrefSize"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectionpoolingprefsize:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionPoolingPrefSize**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionPoolingPrefSize" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      The preferred number of connections per connection identity that should be maintained concurrently.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingProtocol"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectionpoolingprotocol:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionPoolingProtocol**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionPoolingProtocol" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      A list of space-separated protocol types of connections that may be pooled. Valid types are \ :literal:`plain`\  and \ :literal:`ssl`\ .
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingTimeout"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectionpoolingtimeout:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionPoolingTimeout**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionPoolingTimeout" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      The number of milliseconds that an idle connection may remain in the pool without being closed and removed from the pool.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionTimeout"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectiontimeout:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionTimeout**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionTimeout" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      LDAP Connection Timeout in milliseconds.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/connectionUrl"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/connectionurl:
+
+      .. rst-class:: ansible-option-title
+
+      **connectionUrl**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/connectionUrl" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Connection URL to your LDAP server.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/customUserSearchFilter"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/customusersearchfilter:
+
+      .. rst-class:: ansible-option-title
+
+      **customUserSearchFilter**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/customUserSearchFilter" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Additional LDAP Filter for filtering searched users. Leave this empty if you don't need additional filter.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/debug"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/debug:
+
+      .. rst-class:: ansible-option-title
+
+      **debug**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/debug" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Enable/disable debug logging to standard output for Krb5LoginModule.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/editMode"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/editmode:
+
+      .. rst-class:: ansible-option-title
+
+      **editMode**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/editMode" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      \ :literal:`READ\_ONLY`\  is a read-only LDAP store. \ :literal:`WRITABLE`\  means data will be synced back to LDAP on demand. \ :literal:`UNSYNCED`\  means user data will be imported, but not synced back to LDAP.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`"READ\_ONLY"`
+      - :ansible-option-choices-entry:`"WRITABLE"`
+      - :ansible-option-choices-entry:`"UNSYNCED"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/enabled"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/enabled:
+
+      .. rst-class:: ansible-option-title
+
+      **enabled**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/enabled" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Enable/disable this user federation.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/evictionDay"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/evictionday:
+
+      .. rst-class:: ansible-option-title
+
+      **evictionDay**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/evictionDay" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Day of the week the entry will become invalid on.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/evictionHour"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/evictionhour:
+
+      .. rst-class:: ansible-option-title
+
+      **evictionHour**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/evictionHour" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Hour of day the entry will become invalid on.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/evictionMinute"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/evictionminute:
+
+      .. rst-class:: ansible-option-title
+
+      **evictionMinute**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/evictionMinute" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Minute of day the entry will become invalid on.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/fullSyncPeriod"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/fullsyncperiod:
+
+      .. rst-class:: ansible-option-title
+
+      **fullSyncPeriod**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/fullSyncPeriod" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Period for full synchronization in seconds.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`-1`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/importEnabled"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/importenabled:
+
+      .. rst-class:: ansible-option-title
+
+      **importEnabled**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/importEnabled" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      If \ :literal:`true`\ , LDAP users will be imported into Keycloak DB and synced by the configured sync policies.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/kerberosRealm"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/kerberosrealm:
+
+      .. rst-class:: ansible-option-title
+
+      **kerberosRealm**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/kerberosRealm" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Name of kerberos realm.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/keyTab"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/keytab:
+
+      .. rst-class:: ansible-option-title
+
+      **keyTab**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/keyTab" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Location of Kerberos KeyTab file containing the credentials of server principal. For example \ :literal:`/etc/krb5.keytab`\ .
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/maxLifespan"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/maxlifespan:
+
+      .. rst-class:: ansible-option-title
+
+      **maxLifespan**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/maxLifespan" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Max lifespan of cache entry in milliseconds.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/pagination"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/pagination:
+
+      .. rst-class:: ansible-option-title
+
+      **pagination**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/pagination" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Does the LDAP server support pagination.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/priority"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/priority:
+
+      .. rst-class:: ansible-option-title
+
+      **priority**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/priority" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Priority of provider when doing a user lookup. Lowest first.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`0`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/rdnLDAPAttribute"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/rdnldapattribute:
+
+      .. rst-class:: ansible-option-title
+
+      **rdnLDAPAttribute**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/rdnLDAPAttribute" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Name of LDAP attribute, which is used as RDN (top attribute) of typical user DN. Usually it's the same as Username LDAP attribute, however it is not required. For example for Active directory, it is common to use \ :literal:`cn`\  as RDN attribute when username attribute might be \ :literal:`sAMAccountName`\ .
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/readTimeout"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/readtimeout:
+
+      .. rst-class:: ansible-option-title
+
+      **readTimeout**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/readTimeout" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      LDAP Read Timeout in milliseconds. This timeout applies for LDAP read operations.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/searchScope"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/searchscope:
+
+      .. rst-class:: ansible-option-title
+
+      **searchScope**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/searchScope" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      For one level, the search applies only for users in the DNs specified by User DNs. For subtree, the search applies to the whole subtree. See LDAP documentation for more details.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`"1"` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`"2"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/serverPrincipal"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/serverprincipal:
+
+      .. rst-class:: ansible-option-title
+
+      **serverPrincipal**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/serverPrincipal" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Full name of server principal for HTTP service including server and domain name. For example \ :literal:`HTTP/host.foo.org@FOO.ORG`\ . Use \ :literal:`\*`\  to accept any service principal in the KeyTab file.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/startTls"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/starttls:
+
+      .. rst-class:: ansible-option-title
+
+      **startTls**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/startTls" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Encrypts the connection to LDAP using STARTTLS, which will disable connection pooling.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/syncRegistrations"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/syncregistrations:
+
+      .. rst-class:: ansible-option-title
+
+      **syncRegistrations**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/syncRegistrations" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Should newly created users be created within LDAP store? Priority effects which provider is chosen to sync the new user.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/trustEmail"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/trustemail:
+
+      .. rst-class:: ansible-option-title
+
+      **trustEmail**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/trustEmail" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      If enabled, email provided by this provider is not verified even if verification is enabled for the realm.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/updateProfileFirstLogin"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/updateprofilefirstlogin:
+
+      .. rst-class:: ansible-option-title
+
+      **updateProfileFirstLogin**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/updateProfileFirstLogin" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Update profile on first login.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/useKerberosForPasswordAuthentication"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/usekerberosforpasswordauthentication:
+
+      .. rst-class:: ansible-option-title
+
+      **useKerberosForPasswordAuthentication**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/useKerberosForPasswordAuthentication" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Use Kerberos login module for authenticate username/password against Kerberos server instead of authenticating against LDAP server with Directory Service API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/usePasswordModifyExtendedOp"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/usepasswordmodifyextendedop:
+
+      .. rst-class:: ansible-option-title
+
+      **usePasswordModifyExtendedOp**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/usePasswordModifyExtendedOp" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Use the LDAPv3 Password Modify Extended Operation (RFC-3062). The password modify extended operation usually requires that LDAP user already has password in the LDAP server. So when this is used with 'Sync Registrations', it can be good to add also 'Hardcoded LDAP attribute mapper' with randomly generated initial password.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/usernameLDAPAttribute"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/usernameldapattribute:
+
+      .. rst-class:: ansible-option-title
+
+      **usernameLDAPAttribute**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/usernameLDAPAttribute" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Name of LDAP attribute, which is mapped as Keycloak username. For many LDAP server vendors it can be \ :literal:`uid`\ . For Active directory it can be \ :literal:`sAMAccountName`\  or \ :literal:`cn`\ . The attribute should be filled for all LDAP user records you want to import from LDAP to Keycloak.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/userObjectClasses"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/userobjectclasses:
+
+      .. rst-class:: ansible-option-title
+
+      **userObjectClasses**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/userObjectClasses" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      All values of LDAP objectClass attribute for users in LDAP divided by comma. For example \ :literal:`inetOrgPerson, organizationalPerson`\ . Newly created Keycloak users will be written to LDAP with all those object classes and existing LDAP user records are found just if they contain all those object classes.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/usersDn"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/usersdn:
+
+      .. rst-class:: ansible-option-title
+
+      **usersDn**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/usersDn" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Full DN of LDAP tree where your users are. This DN is the parent of LDAP users.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/useTruststoreSpi"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/usetruststorespi:
+
+      .. rst-class:: ansible-option-title
+
+      **useTruststoreSpi**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/useTruststoreSpi" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Specifies whether LDAP connection will use the truststore SPI with the truststore configured in standalone.xml/domain.xml. \ :literal:`Always`\  means that it will always use it. \ :literal:`Never`\  means that it will not use it. \ :literal:`Only for ldaps`\  means that it will use if your connection URL use ldaps. Note even if standalone.xml/domain.xml is not configured, the default Java cacerts or certificate specified by \ :literal:`javax.net.ssl.trustStore`\  property will be used.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`"always"`
+      - :ansible-option-choices-entry-default:`"ldapsOnly"` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`"never"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/uuidLDAPAttribute"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/uuidldapattribute:
+
+      .. rst-class:: ansible-option-title
+
+      **uuidLDAPAttribute**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/uuidLDAPAttribute" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Name of LDAP attribute, which is used as unique object identifier (UUID) for objects in LDAP. For many LDAP server vendors, it is \ :literal:`entryUUID`\ ; however some are different. For example for Active directory it should be \ :literal:`objectGUID`\ . If your LDAP server does not support the notion of UUID, you can use any other attribute that is supposed to be unique among LDAP users in tree.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/validatePasswordPolicy"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/validatepasswordpolicy:
+
+      .. rst-class:: ansible-option-title
+
+      **validatePasswordPolicy**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/validatePasswordPolicy" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Determines if Keycloak should validate the password with the realm password policy before updating it.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`true`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-config/vendor"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-config/vendor:
+
+      .. rst-class:: ansible-option-title
+
+      **vendor**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-config/vendor" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      LDAP vendor (provider).
+
+      Use short name. For instance, write \ :literal:`rhds`\  for "Red Hat Directory Server".
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-connection_timeout"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-connection_timeout:
+
+      .. rst-class:: ansible-option-title
+
+      **connection_timeout**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-connection_timeout" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`integer`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 4.5.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Controls the HTTP connections timeout period (in seconds) to Keycloak API.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`10`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-http_agent"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-http_agent:
+
+      .. rst-class:: ansible-option-title
+
+      **http_agent**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-http_agent" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 5.4.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Configures the HTTP User-Agent header.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"Ansible"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-id"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-id:
+
+      .. rst-class:: ansible-option-title
+
+      **id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      The unique ID for this user federation. If left empty, the user federation will be searched by its \ :emphasis:`name`\ .
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-mappers"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-mappers:
+
+      .. rst-class:: ansible-option-title
+
+      **mappers**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-mappers" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      A list of dicts defining mappers associated with this Identity Provider.
+
+
+      .. raw:: html
+
+        </div>
+    
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-mappers/config"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-mappers/config:
+
+      .. rst-class:: ansible-option-title
+
+      **config**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-mappers/config" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Dict specifying the configuration options for the mapper; the contents differ depending on the value of \ :emphasis:`identityProviderMapper`\ .
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-mappers/id"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-mappers/id:
+
+      .. rst-class:: ansible-option-title
+
+      **id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-mappers/id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Unique ID of this mapper.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-mappers/name"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-mappers/name:
+
+      .. rst-class:: ansible-option-title
+
+      **name**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-mappers/name" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Name of the mapper. If no ID is given, the mapper will be searched by name.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-mappers/parentId"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-mappers/parentid:
+
+      .. rst-class:: ansible-option-title
+
+      **parentId**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-mappers/parentId" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Unique ID for the parent of this mapper. ID of the user federation will automatically be used if left blank.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-mappers/providerId"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-mappers/providerid:
+
+      .. rst-class:: ansible-option-title
+
+      **providerId**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-mappers/providerId" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      The mapper type for this mapper (for instance \ :literal:`user-attribute-ldap-mapper`\ ).
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-indent"></div><div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-mappers/providerType"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-mappers/providertype:
+
+      .. rst-class:: ansible-option-title
+
+      **providerType**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-mappers/providerType" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
+
+      Component type for this mapper.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"org.keycloak.storage.ldap.mappers.LDAPStorageMapper"`
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-name"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-name:
+
+      .. rst-class:: ansible-option-title
+
+      **name**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-name" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Display name of provider when linked in admin console.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-parent_id"></div>
+        <div class="ansibleOptionAnchor" id="parameter-parentId"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-parent_id:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-parentid:
+
+      .. rst-class:: ansible-option-title
+
+      **parent_id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-parent_id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: parentId`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Unique ID for the parent of this user federation. Realm ID will be automatically used if left blank.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-provider_id"></div>
+        <div class="ansibleOptionAnchor" id="parameter-providerId"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-provider_id:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-providerid:
+
+      .. rst-class:: ansible-option-title
+
+      **provider_id**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-provider_id" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: providerId`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Provider for this user federation.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`"ldap"`
+      - :ansible-option-choices-entry:`"kerberos"`
+      - :ansible-option-choices-entry:`"sssd"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-provider_type"></div>
+        <div class="ansibleOptionAnchor" id="parameter-providerType"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-provider_type:
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-providertype:
+
+      .. rst-class:: ansible-option-title
+
+      **provider_type**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-provider_type" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-aliases:`aliases: providerType`
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Component type for user federation (only supported value is \ :literal:`org.keycloak.storage.UserStorageProvider`\ ).
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"org.keycloak.storage.UserStorageProvider"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-realm"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-realm:
+
+      .. rst-class:: ansible-option-title
+
+      **realm**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-realm" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      The Keycloak realm under which this user federation resides.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-default-bold:`Default:` :ansible-option-default:`"master"`
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-state"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-state:
+
+      .. rst-class:: ansible-option-title
+
+      **state**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-state" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      State of the user federation.
+
+      On \ :literal:`present`\ , the user federation will be created if it does not yet exist, or updated with the parameters you provide.
+
+      On \ :literal:`absent`\ , the user federation will be removed if it exists.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry-default:`"present"` :ansible-option-choices-default-mark:`← (default)`
+      - :ansible-option-choices-entry:`"absent"`
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-token"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-token:
+
+      .. rst-class:: ansible-option-title
+
+      **token**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-token" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      :ansible-option-versionadded:`added in middleware\_automation.keycloak 3.0.0`
+
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Authentication token for Keycloak API.
+
+
+      .. raw:: html
+
+        </div>
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="parameter-validate_certs"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__parameter-validate_certs:
+
+      .. rst-class:: ansible-option-title
+
+      **validate_certs**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#parameter-validate_certs" title="Permalink to this option"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`boolean`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Verify TLS certificates (do not disable this in production).
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-choices:`Choices:`
+
+      - :ansible-option-choices-entry:`false`
+      - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)`
+
+
+      .. raw:: html
+
+        </div>
+
+
+.. Attributes
+
+
+.. Notes
+
+
+.. Seealso
+
+
+.. Examples
+
+Examples
+--------
+
+.. code-block:: yaml+jinja
+
+    
+      - name: Create LDAP user federation
+        middleware_automation.keycloak.keycloak_user_federation:
+          auth_keycloak_url: https://keycloak.example.com/auth
+          auth_realm: master
+          auth_username: admin
+          auth_password: password
+          realm: my-realm
+          name: my-ldap
+          state: present
+          provider_id: ldap
+          provider_type: org.keycloak.storage.UserStorageProvider
+          config:
+            priority: 0
+            enabled: true
+            cachePolicy: DEFAULT
+            batchSizeForSync: 1000
+            editMode: READ_ONLY
+            importEnabled: true
+            syncRegistrations: false
+            vendor: other
+            usernameLDAPAttribute: uid
+            rdnLDAPAttribute: uid
+            uuidLDAPAttribute: entryUUID
+            userObjectClasses: inetOrgPerson, organizationalPerson
+            connectionUrl: ldaps://ldap.example.com:636
+            usersDn: ou=Users,dc=example,dc=com
+            authType: simple
+            bindDn: cn=directory reader
+            bindCredential: password
+            searchScope: 1
+            validatePasswordPolicy: false
+            trustEmail: false
+            useTruststoreSpi: ldapsOnly
+            connectionPooling: true
+            pagination: true
+            allowKerberosAuthentication: false
+            debug: false
+            useKerberosForPasswordAuthentication: false
+          mappers:
+            - name: "full name"
+              providerId: "full-name-ldap-mapper"
+              providerType: "org.keycloak.storage.ldap.mappers.LDAPStorageMapper"
+              config:
+                ldap.full.name.attribute: cn
+                read.only: true
+                write.only: false
+
+      - name: Create Kerberos user federation
+        middleware_automation.keycloak.keycloak_user_federation:
+          auth_keycloak_url: https://keycloak.example.com/auth
+          auth_realm: master
+          auth_username: admin
+          auth_password: password
+          realm: my-realm
+          name: my-kerberos
+          state: present
+          provider_id: kerberos
+          provider_type: org.keycloak.storage.UserStorageProvider
+          config:
+            priority: 0
+            enabled: true
+            cachePolicy: DEFAULT
+            kerberosRealm: EXAMPLE.COM
+            serverPrincipal: HTTP/host.example.com@EXAMPLE.COM
+            keyTab: keytab
+            allowPasswordAuthentication: false
+            updateProfileFirstLogin: false
+
+      - name: Create sssd user federation
+        middleware_automation.keycloak.keycloak_user_federation:
+          auth_keycloak_url: https://keycloak.example.com/auth
+          auth_realm: master
+          auth_username: admin
+          auth_password: password
+          realm: my-realm
+          name: my-sssd
+          state: present
+          provider_id: sssd
+          provider_type: org.keycloak.storage.UserStorageProvider
+          config:
+            priority: 0
+            enabled: true
+            cachePolicy: DEFAULT
+
+      - name: Delete user federation
+        middleware_automation.keycloak.keycloak_user_federation:
+          auth_keycloak_url: https://keycloak.example.com/auth
+          auth_realm: master
+          auth_username: admin
+          auth_password: password
+          realm: my-realm
+          name: my-federation
+          state: absent
+
+
+
+
+
+.. Facts
+
+
+.. Return values
+
+Return Values
+-------------
+Common return values are documented :ref:`here <common_return_values>`, the following are the fields unique to this module:
+
+.. rst-class:: ansible-option-table
+
+.. list-table::
+  :width: 100%
+  :widths: auto
+  :header-rows: 1
+
+  * - Key
+    - Description
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-end_state"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__return-end_state:
+
+      .. rst-class:: ansible-option-title
+
+      **end_state**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-end_state" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Representation of user federation after module execution.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` on success
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"config": {"allowPasswordAuthentication": "false", "cachePolicy": "DEFAULT", "enabled": "true", "kerberosRealm": "EXAMPLE.COM", "keyTab": "/etc/krb5.keytab", "priority": "0", "serverPrincipal": "HTTP/host.example.com@EXAMPLE.COM", "updateProfileFirstLogin": "false"}, "id": "cf52ae4f-4471-4435-a0cf-bb620cadc122", "mappers": [], "name": "kerberos", "parentId": "myrealm", "providerId": "kerberos", "providerType": "org.keycloak.storage.UserStorageProvider"}`
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-existing"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__return-existing:
+
+      .. rst-class:: ansible-option-title
+
+      **existing**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-existing" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Representation of existing user federation.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` always
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"config": {"allowKerberosAuthentication": "false", "authType": "simple", "batchSizeForSync": "1000", "bindCredential": "\*\*\*\*\*\*\*\*\*\*", "bindDn": "cn=directory reader", "cachePolicy": "DEFAULT", "changedSyncPeriod": "-1", "connectionPooling": "true", "connectionUrl": "ldaps://ldap.example.com:636", "debug": "false", "editMode": "READ\_ONLY", "enabled": "true", "fullSyncPeriod": "-1", "importEnabled": "true", "pagination": "true", "priority": "0", "rdnLDAPAttribute": "uid", "searchScope": "1", "syncRegistrations": "false", "trustEmail": "false", "useKerberosForPasswordAuthentication": "false", "useTruststoreSpi": "ldapsOnly", "userObjectClasses": "inetOrgPerson, organizationalPerson", "usernameLDAPAttribute": "uid", "usersDn": "ou=Users,dc=example,dc=com", "uuidLDAPAttribute": "entryUUID", "validatePasswordPolicy": "false", "vendor": "other"}, "id": "01122837-9047-4ae4-8ca0-6e2e891a765f", "mappers": [{"config": {"always.read.value.from.ldap": "false", "is.mandatory.in.ldap": "false", "ldap.attribute": "mail", "read.only": "true", "user.model.attribute": "email"}, "id": "17d60ce2-2d44-4c2c-8b1f-1fba601b9a9f", "name": "email", "parentId": "01122837-9047-4ae4-8ca0-6e2e891a765f", "providerId": "user-attribute-ldap-mapper", "providerType": "org.keycloak.storage.ldap.mappers.LDAPStorageMapper"}], "name": "myfed", "parentId": "myrealm", "providerId": "ldap", "providerType": "org.keycloak.storage.UserStorageProvider"}`
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-msg"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__return-msg:
+
+      .. rst-class:: ansible-option-title
+
+      **msg**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-msg" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`string`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Message as to what action was taken.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` always
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`"No changes required to user federation 164bb483-c613-482e-80fe-7f1431308799."`
+
+
+      .. raw:: html
+
+        </div>
+
+
+  * - .. raw:: html
+
+        <div class="ansible-option-cell">
+        <div class="ansibleOptionAnchor" id="return-proposed"></div>
+
+      .. _ansible_collections.middleware_automation.keycloak.keycloak_user_federation_module__return-proposed:
+
+      .. rst-class:: ansible-option-title
+
+      **proposed**
+
+      .. raw:: html
+
+        <a class="ansibleOptionLink" href="#return-proposed" title="Permalink to this return value"></a>
+
+      .. rst-class:: ansible-option-type-line
+
+      :ansible-option-type:`dictionary`
+
+      .. raw:: html
+
+        </div>
+
+    - .. raw:: html
+
+        <div class="ansible-option-cell">
+
+      Representation of proposed user federation.
+
+
+      .. rst-class:: ansible-option-line
+
+      :ansible-option-returned-bold:`Returned:` always
+
+      .. rst-class:: ansible-option-line
+      .. rst-class:: ansible-option-sample
+
+      :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"config": {"allowKerberosAuthentication": "false", "authType": "simple", "batchSizeForSync": "1000", "bindCredential": "\*\*\*\*\*\*\*\*\*\*", "bindDn": "cn=directory reader", "cachePolicy": "DEFAULT", "connectionPooling": "true", "connectionUrl": "ldaps://ldap.example.com:636", "debug": "false", "editMode": "READ\_ONLY", "enabled": "true", "importEnabled": "true", "pagination": "true", "priority": "0", "rdnLDAPAttribute": "uid", "searchScope": "1", "syncRegistrations": "false", "trustEmail": "false", "useKerberosForPasswordAuthentication": "false", "useTruststoreSpi": "ldapsOnly", "userObjectClasses": "inetOrgPerson, organizationalPerson", "usernameLDAPAttribute": "uid", "usersDn": "ou=Users,dc=example,dc=com", "uuidLDAPAttribute": "entryUUID", "validatePasswordPolicy": "false", "vendor": "other"}, "name": "ldap", "providerId": "ldap", "providerType": "org.keycloak.storage.UserStorageProvider"}`
+
+
+      .. raw:: html
+
+        </div>
+
+
+
+..  Status (Presently only deprecated)
+
+
+.. Authors
+
+Authors
+~~~~~~~
+
+- Laurent Paumier (@laurpaum)
+
+
+
+.. Extra links
+
+
+.. Parsing errors
+
diff --git a/main/developing.html b/main/developing.html
index f697789..197cefd 100644
--- a/main/developing.html
+++ b/main/developing.html
@@ -45,6 +45,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul>
 <li class="toctree-l1"><a class="reference internal" href="README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1"><a class="reference internal" href="roles/index.html">Role Index</a></li>
 </ul>
 <p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
diff --git a/main/genindex.html b/main/genindex.html
index 32eac5f..b7ff1ea 100644
--- a/main/genindex.html
+++ b/main/genindex.html
@@ -42,6 +42,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul>
 <li class="toctree-l1"><a class="reference internal" href="README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1"><a class="reference internal" href="roles/index.html">Role Index</a></li>
 </ul>
 <p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
diff --git a/main/index.html b/main/index.html
index bcf8d2e..5f9ed47 100644
--- a/main/index.html
+++ b/main/index.html
@@ -44,6 +44,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul>
 <li class="toctree-l1"><a class="reference internal" href="README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1"><a class="reference internal" href="roles/index.html">Role Index</a></li>
 </ul>
 <p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
@@ -106,6 +107,12 @@
 <li class="toctree-l2"><a class="reference internal" href="README.html#license">License</a></li>
 </ul>
 </li>
+<li class="toctree-l1"><a class="reference internal" href="plugins/index.html">Plugin Index</a><ul>
+<li class="toctree-l2"><a class="reference internal" href="plugins/keycloak_client.html">keycloak_client – Allows administration of Keycloak clients via Keycloak API</a></li>
+<li class="toctree-l2"><a class="reference internal" href="plugins/keycloak_role.html">keycloak_role – Allows administration of Keycloak roles via Keycloak API</a></li>
+<li class="toctree-l2"><a class="reference internal" href="plugins/keycloak_user_federation.html">keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API</a></li>
+</ul>
+</li>
 <li class="toctree-l1"><a class="reference internal" href="roles/index.html">Role Index</a><ul>
 <li class="toctree-l2"><a class="reference internal" href="roles/keycloak.html">keycloak</a></li>
 <li class="toctree-l2"><a class="reference internal" href="roles/keycloak_quarkus.html">keycloak_quarkus</a></li>
diff --git a/main/objects.inv b/main/objects.inv
index d63c25f278c388618d55e22865b4825568c22075..65c4016229f0c040efcdfbd46062c1d45e7fbbd5 100644
GIT binary patch
delta 3379
zcmV-34b1Y^1DhL=iGS6d&5q-^5y$WS6b5pp8@c8-m<%?HWH*D^AUO)OMBAK}MJ-A7
z$DZ~ba?0!NlY|sWS(fd#dPY^O1_qcJeUQKZ-x5_SQKgT6`|$G*pZ@XBA6CXzf2mZt
zVt-zJObge0d#G0jSyi=o;#w5Ev+BUDRL%N9yp*-#534Vt7JuA`)z8WbbNA)bhrj;x
zY1~>^5}NwZ7`ds%>Z7V_QTldP>_+={JnU1H!#-yH`Yyviin5lXvBg1Eo$J*@)qEpr
zkJZ-QPB!L#vTe`#r`RVO^~sKXvSXht?SA}6Xotl<*>e0v(Q?fX!V1lJb&yTb={kof
zHsN5N15zjvoqv!r>nHwVib|Tc<}Zc&ZA;g#%5%`NDHn@e%>CAh3)G0%pKK_(a0Ufs
zfwfw0Iyai;mVE>PmwNy8>A|cCoah4)^F*LS+gQ9^ms(VAL&@uPDYTVaS#m2V*<sm{
zk&PMQ4btM*P8hpZo3F0<wUN7q+fIu$uXl7Tij*u+vVVb+c}jSb3_sLs*UG*z*8MC8
zw*wt-JRF<AAz2bt4nGGmQ{r|<JS1C0Q|gzN+98stkWAPrU5a(9+}N^_O(mNhF+X}h
z<^fp(M6yOT!pei_j99yfr;`2c8ZC2<i0p`nWRDU0QE0NGO2ES(Ri?K1CS<c!Yw>J}
zTf`zN^M9yVc8wz$rKQ~;sJS$bVj>};Ic~tC84nNUI6~xT_{5x6%SYF(Z-J;ek<d4Q
zWKO}2@xO=)d6e!Tv`>~5{xV7}Bu=C(k@|bi{(_&`EO)Obwd?eK7&g!%nbyZ;MdQ{M
zvhx3PO_B^9JtC78i-<_}kTxcdCBucZD0!nAcYm>{<!^nfh1+4TDzX>;DKCq>XvQ@=
zw?(aXs<VZU+N3-6h>qt0mIYWAVbO>5>y{B6)vw!zII#O$U3z(Fe|L+Ri+0`Vb$`dE
zg=t;uf@-?eld}GXEs-LnTsyl@Yi0IP+rgxjvciyTM5%=(Bs&5@N*^{OFfw@M!&Z=E
zf`1p@x^VkRX%a{Izyc{)3tk^6s0|>HQvLYpLtzSP2NpoV{>fz-0`6_Co{E@HFVv&Z
zT2}d=x1TUF&zN%l?8t~>kncNoP1Bu=fPmI0o$l3QY-$S8aMu-uk#T@afwN%=4#^U0
z-49`iSrMTyEJ(f+JSL`SICjuGAfS(j4SzR+KzQgeAfrOxJ`I(SB8A&m7pkdqKT`=L
ztS12#OGYcC)VN|4N+?~}mo|3@9G9PPv7QUoi0s)5@We%2Va1`X^FKb0%Lf`z(I-a}
znS=bC3e*H5M>zBWPU`puKfG1bgvJU#`%87XlaWUtmVn@-8^6ZSG?qI1jYh;_1Ah*z
zY+9<JMOR|WyV?$E_foallQ5BK$h-$8U<0(O$p{ZDu!6&SO279B5v+JZKQ{1hZAvX$
z0+Xu8Bv4}eC-?;~OJPj0)7%|QMDnKrjRiCo(4e!Yq0i7|=#i2am$-n8pdlMr<W{T3
zmV54E#5&H%$t-wG6sO!^h$p8VSbus~*CA>vxa;aE`*H4pLdeDv5TNwFBRaxQaDZg*
zt!)dw%m3b`2VnsONNV=H3S34-9@<)#(uPR_G%itzDNG6gzF?)!d|$NWkBNZ96POSK
zIS-~$l_<3Tvy;YZPAH4!(U|ssj%d*NG~cHd;~wdFahVIu2wQB#R%L&W)qjDo2m&XS
zic(mis=ue_HK`0@g2G85rrrpp)Gi_c$tN;<7kc7utCdx*#oRIz2C&THz}r@6Lqsl1
zI7qVZOVw=Uj+lBDsSr&d^hoTI8yL^XuGwPqSDUzIi3O}Kab|}kcVI}oV}Zb}+?jmH
zd%H6Oh+P*46R<CogAw8XRDbP=bik(23LcPR2a=%!Zsb5aaL5!l&<z_hL=EJE2E3So
zV90<OF%S(Hu;T^N;R15B&~0j2#`U=!=vm@wSiyw!!pf!anmgzl?x}1{(P?S23yrhP
zdKO^8g!ID7_0PtH>#Fb%%koQ3I4t0R%ci9oL3Dgr9Vd}m^&lD&@_*x#>NtZma3L5G
z`lDvUm<q}Sr7VFLtvv?hi`Kq<8Y%%rlBgvGTR$ol-*ab%>gddSPbKye7WAaD*k9_7
zlnGNPC<`oaDy}O^6AKd)%EZFd8J&rRmx$oRXMaC8FhB|Hv{pOUK@kh7kw`EPRH>>O
zY+`xn&i6*mf)gen1Aiz4q@dwv{+J9f9_x%4YGo889+vs)w}}Y&N!f{b8jnd&)B`^&
zJ(1tfOQa+|0KrM8Pze*d2&QX4`AOy6p76j6Cv#p;f#9VRIj2u?fMh@NT2}o<OlX_?
z*G@1jzyL{p5}QJ4>7`}X>quB4ffGwcD~MDrY^NJ{M_v{A?tdJQ5D>SHsr6@RY_1P4
zP8lEs9!yqkzIzB+tyZlvneJ|<4BscvS9*!^Zm98Fe!mvqN>s8O`8Rz-d~rPx-w(eg
z@-5%t02R9AH#la9o%PfNOYkC3PhJ!KhHr0xYhLiX8?Q;8`Q9G5+=X7;drj(`iAdl&
zmzat4n#h^?1%Ggz3ndt?NTo0o1CPRQE<FmWb?LIBS47V*RR^hdxiWQEWX`VM1F3Sc
z$~{*^W*&v$1|I^KOxUYs?h7U0HF8dZ15(-&xs5B*<~$CCl(xj9&@0mNhT~uXIDuFV
zHcWd{Y8+DLqG|CHv2RSCE-!N7#OXzG^U|hp+LlR~UVoByJ7Ef@>id(WmjumBm4c~S
zC{60erD7{85vStM%9u`e`hI==XMc|kE|W*SEbW`KjYy)Qa*%IxV^%scuOo{jDQCL!
zhJ0lvQx?o(&h%vF-B~6-7P@hp>BXEIxlBeZagR6Cg_&V?CL<P#z;AmoYaSN935!g}
znydc4FMrGZAoNCPWlq2IOVk<m8ZxG9Y3O=Ku3bUKa?SNR<70UFEJ}Pxer&ic_eTEa
zE76*lrlji287G!MvZ-9`SotHB*JRx}r9||mYAAbBp^YmgFZZHVwJcw#8Zt)2a%In(
zov8c?+X^jJMb?`$P%MXrhq$eBKTWeE>(Ci!E`NvKN33%TJC}Qv*mUpbAPcm)ypoNy
zKIV8gb`8L}96RvmcV$@O&E;3C#r9npHUQ^yY*vjzN{%g3z3|%|n>SO9j$zA8X8Q)e
z-i=Y&9HRJ0<IEk5ry9wb&bVg$=0<Q`?zghGH!Ftbv*<D{l2@byPt-V5RMNVYWH0&y
zAAgn~vuXk5vtyCMK=a*rlzr0`C!0wcBO<%9SDmJAOV5bx%Rx4s71W)Hlt|w6-~A<@
zdYn)qc_R<4(w6whdkTr<OnRzIbDl<Y<`fdmnHS49bS>%Wki0nX=UQ%sX*t;p^cWGz
zm6kj0q|@>vLM%_*u&$*g8_W%SNPg(5sedcp4%Gpu`f|pJ<&WSM@l4bh5y_R1v6xfB
zDw``~L^N0QqtNaQZc5qGot`qq#B#@SZEbDH+LHLN{BU;}<6`}EjX48Fa>(k=_>z2*
z?5Q*&MDnC-{Y!eSR$Ez%t<=WW%9%mcpli5TZW)p8&9+Lvuj#q7*ztT!0B#$(eSZ<p
zRy38UR7=>ttH^k+_3tgbivasFETU6t^VPLq*6v3WhO$eipok8cit=F9<Kel{UwVyI
zT9{T6w&j!)%b!kG?_<<C14VKul{-k+2-=gyuh3$7<*u8G>~p?Ihv3EAij8G4WZ4pA
zw_TZCrVHPV#fo>`c7b380)(mq^M8u><4a$rhW~8+_e9?s9(}VO<L%+u->c8(1l~Du
zPx58@1wUdx-wC(G=PT$Q6$2oeBU(L5w;g3qj)>T<kbE6{>I=#{;Uvcpl(8e6k`xO&
z1u~2)3E6QIZM-B~rU<P<Q5tSYo(Yi+<y=TUki0kyPM};B2uBZyQ3L5{0e>}0pgA!X
zXC~~Na<cf^m#8s&Tl<_^*7(|&sBnE-JH;0tG2U||Tc!`KLf@OpW#jv>Xc6seZoILc
zHkJzuSJ}R$eqO<CZ1KyK;l82$c13Pv+23EM`-b9~CA*Pjj|zEL;!)J9O$TJ9N)LEk
z+M}#KswO<<R{D?M|7TV|bbl^PtYst2-A**Jsl@ZC!n8E({-gir-Ep(n%V>-Lh`Lm6
z7`AHl_o%^jnsl$+4&A}sy!T@6{Isa^F54HDR)jWx3KhLW=gIOjh?5mz$Itzu$&QmR
zQC@1|(#I-S)BXPV{lBXZzJR4!@#-L(VRq_DZI9Z+#%A>>`ElWg&woGOU99&0D$Gz0
zes#LfJP^O>9E`~k{3_9<qkVO?rFoowuhns{OUTFL<HmvW`Ni&C^C!oT7Pa7Ja+(Ya
z(^)bcu>Tg?xWE1Ozj$1+d%5eaJU;+Oi$gPC)UnroU9#qUuVFkov2e0m@oUHRLuan<
zp0=3$5^?FYx#Nx7<t)bf_0uEHFS`q`Hk`U2mW9oK3F|-eow&2&c$tj-#6@A-e}(_t
J{U7|gD-7RYqFev~

delta 342
zcmV-c0jd6*8`cAmiGPKXK~BRk5JmSsg)h(|w(P1<6$C9+i(px~@hG)A_7vLzvf~<D
zkCWiUI89QZt2qD9e`AlG-Aop<>HWiuJ1?&!<$QF>vm}mpUL)5^N`yCIVIxXUT6jff
zyoV}B5_`S^1mS=$$b)06>EwDo?b4zWQ4{0T7J+Ak2zkxnqkl7eCgBy34$2f=>QRm4
zjEuKx8}jz+<J0k3sU)B>VM_%VWhA^eaTHs?8j#c&zpa<-SoYJUQ}GO#lLqdI-=(8>
zju8T-2IHH}GfncBmWOJTjL4jmEW<Qn^NxEawygXvwCtsAa|?qZwPKo4yWJ<SE`00y
zwYS1UQ87yh?oZ-m1|2zKR&?yzc<oa-NhK!++bivxo0n49ed+#=r;0u%sY9Fvf%+d<
o;}1}c#vBNn@A}h^S}b2je<=!J;j#O{xPPQr`xt-NH;xB7J&(kwEC2ui

diff --git a/main/plugins/index.html b/main/plugins/index.html
new file mode 100644
index 0000000..6f34a90
--- /dev/null
+++ b/main/plugins/index.html
@@ -0,0 +1,172 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+  <meta charset="utf-8" /><meta name="generator" content="Docutils 0.18.1: http://docutils.sourceforge.net/" />
+
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Plugin Index &mdash; Keycloak Ansible Collection  documentation</title>
+      <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
+      <link rel="stylesheet" href="../_static/css/theme.css" type="text/css" />
+      <link rel="stylesheet" href="../_static/ansible-basic-sphinx-ext.css" type="text/css" />
+  <!--[if lt IE 9]>
+    <script src="../_static/js/html5shiv.min.js"></script>
+  <![endif]-->
+  
+        <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>
+        <script data-url_root="../" id="documentation_options" src="../_static/documentation_options.js"></script>
+        <script src="../_static/doctools.js"></script>
+        <script src="../_static/sphinx_highlight.js"></script>
+    <script src="../_static/js/theme.js"></script>
+    <link rel="index" title="Index" href="../genindex.html" />
+    <link rel="search" title="Search" href="../search.html" />
+    <link rel="next" title="keycloak_client – Allows administration of Keycloak clients via Keycloak API" href="keycloak_client.html" />
+    <link rel="prev" title="Ansible Collection - middleware_automation.keycloak" href="../README.html" /> 
+</head>
+
+<body class="wy-body-for-nav"> 
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side">
+      <div class="wy-side-scroll">
+        <div class="wy-side-nav-search" >
+
+          
+          
+          <a href="../index.html" class="icon icon-home">
+            Keycloak Ansible Collection
+          </a>
+<div role="search">
+  <form id="rtd-search-form" class="wy-form" action="../search.html" method="get">
+    <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" />
+    <input type="hidden" name="check_keywords" value="yes" />
+    <input type="hidden" name="area" value="default" />
+  </form>
+</div>
+        </div><div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
+<ul class="current">
+<li class="toctree-l1"><a class="reference internal" href="../README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1 current"><a class="current reference internal" href="#">Plugin Index</a><ul>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_client.html">keycloak_client – Allows administration of Keycloak clients via Keycloak API</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_role.html">keycloak_role – Allows administration of Keycloak roles via Keycloak API</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_user_federation.html">keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API</a></li>
+</ul>
+</li>
+<li class="toctree-l1"><a class="reference internal" href="../roles/index.html">Role Index</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="../testing.html">Testing</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../developing.html">Contributor’s Guidelines</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../releasing.html">Collection Versioning Strategy</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">General</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="../CHANGELOG.html">Changelog</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">Middleware collections</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/infinispan/">Infinispan / Red Hat Data Grid</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/keycloak/">Keycloak / Red Hat Single Sign-On</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/wildfly/">Wildfly / Red Hat JBoss EAP</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/jws/">Tomcat / Red Hat JWS</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/amq/">ActiveMQ / Red Hat AMQ Broker</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/amq_streams/">Kafka / Red Hat AMQ Streams</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/redhat-csp-download/">Red Hat CSP Download</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/ansible_collections_jcliff/">JCliff</a></li>
+</ul>
+
+        </div>
+      </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap"><nav class="wy-nav-top" aria-label="Mobile navigation menu" >
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../index.html">Keycloak Ansible Collection</a>
+      </nav>
+
+      <div class="wy-nav-content">
+        <div class="rst-content">
+          <div role="navigation" aria-label="Page navigation">
+  <ul class="wy-breadcrumbs">
+      <li><a href="../index.html" class="icon icon-home" aria-label="Home"></a></li>
+      <li class="breadcrumb-item active">Plugin Index</li>
+      <li class="wy-breadcrumbs-aside">
+            <a href="../_sources/plugins/index.rst.txt" rel="nofollow"> View page source</a>
+      </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+           <div itemprop="articleBody">
+             
+  <section id="plugin-index">
+<h1>Plugin Index<a class="headerlink" href="#plugin-index" title="Permalink to this heading"></a></h1>
+<div class="toctree-wrapper compound">
+<p class="caption" role="heading"><span class="caption-text">modules plugins</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="keycloak_client.html">keycloak_client – Allows administration of Keycloak clients via Keycloak API</a><ul>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_client.html#synopsis">Synopsis</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_client.html#parameters">Parameters</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_client.html#examples">Examples</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_client.html#return-values">Return Values</a><ul>
+<li class="toctree-l3"><a class="reference internal" href="keycloak_client.html#authors">Authors</a></li>
+</ul>
+</li>
+</ul>
+</li>
+<li class="toctree-l1"><a class="reference internal" href="keycloak_role.html">keycloak_role – Allows administration of Keycloak roles via Keycloak API</a><ul>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_role.html#synopsis">Synopsis</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_role.html#parameters">Parameters</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_role.html#examples">Examples</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_role.html#return-values">Return Values</a><ul>
+<li class="toctree-l3"><a class="reference internal" href="keycloak_role.html#authors">Authors</a></li>
+</ul>
+</li>
+</ul>
+</li>
+<li class="toctree-l1"><a class="reference internal" href="keycloak_user_federation.html">keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API</a><ul>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_user_federation.html#synopsis">Synopsis</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_user_federation.html#parameters">Parameters</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_user_federation.html#examples">Examples</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_user_federation.html#return-values">Return Values</a><ul>
+<li class="toctree-l3"><a class="reference internal" href="keycloak_user_federation.html#authors">Authors</a></li>
+</ul>
+</li>
+</ul>
+</li>
+</ul>
+</div>
+</section>
+
+
+           </div>
+          </div>
+          <footer><div class="rst-footer-buttons" role="navigation" aria-label="Footer">
+        <a href="../README.html" class="btn btn-neutral float-left" title="Ansible Collection - middleware_automation.keycloak" accesskey="p" rel="prev"><span class="fa fa-arrow-circle-left" aria-hidden="true"></span> Previous</a>
+        <a href="keycloak_client.html" class="btn btn-neutral float-right" title="keycloak_client – Allows administration of Keycloak clients via Keycloak API" accesskey="n" rel="next">Next <span class="fa fa-arrow-circle-right" aria-hidden="true"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <p>&#169; Copyright 2023, Red Hat, Inc..</p>
+  </div>
+
+  Built with <a href="https://www.sphinx-doc.org/">Sphinx</a> using a
+    <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a>
+    provided by <a href="https://readthedocs.org">Read the Docs</a>.
+   
+
+</footer>
+        </div>
+      </div>
+    </section>
+  </div>
+  <script>
+      jQuery(function () {
+          SphinxRtdTheme.Navigation.enable(true);
+      });
+  </script> 
+
+</body>
+</html>
\ No newline at end of file
diff --git a/main/plugins/keycloak_client.html b/main/plugins/keycloak_client.html
new file mode 100644
index 0000000..53bde79
--- /dev/null
+++ b/main/plugins/keycloak_client.html
@@ -0,0 +1,1156 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+  <meta charset="utf-8" /><meta name="generator" content="Docutils 0.18.1: http://docutils.sourceforge.net/" />
+
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>keycloak_client – Allows administration of Keycloak clients via Keycloak API &mdash; Keycloak Ansible Collection  documentation</title>
+      <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
+      <link rel="stylesheet" href="../_static/css/theme.css" type="text/css" />
+      <link rel="stylesheet" href="../_static/ansible-basic-sphinx-ext.css" type="text/css" />
+  <!--[if lt IE 9]>
+    <script src="../_static/js/html5shiv.min.js"></script>
+  <![endif]-->
+  
+        <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>
+        <script data-url_root="../" id="documentation_options" src="../_static/documentation_options.js"></script>
+        <script src="../_static/doctools.js"></script>
+        <script src="../_static/sphinx_highlight.js"></script>
+    <script src="../_static/js/theme.js"></script>
+    <link rel="index" title="Index" href="../genindex.html" />
+    <link rel="search" title="Search" href="../search.html" />
+    <link rel="next" title="keycloak_role – Allows administration of Keycloak roles via Keycloak API" href="keycloak_role.html" />
+    <link rel="prev" title="Plugin Index" href="index.html" /> 
+</head>
+
+<body class="wy-body-for-nav"> 
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side">
+      <div class="wy-side-scroll">
+        <div class="wy-side-nav-search" >
+
+          
+          
+          <a href="../index.html" class="icon icon-home">
+            Keycloak Ansible Collection
+          </a>
+<div role="search">
+  <form id="rtd-search-form" class="wy-form" action="../search.html" method="get">
+    <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" />
+    <input type="hidden" name="check_keywords" value="yes" />
+    <input type="hidden" name="area" value="default" />
+  </form>
+</div>
+        </div><div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
+<ul class="current">
+<li class="toctree-l1"><a class="reference internal" href="../README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1 current"><a class="reference internal" href="index.html">Plugin Index</a><ul class="current">
+<li class="toctree-l2 current"><a class="current reference internal" href="#">keycloak_client – Allows administration of Keycloak clients via Keycloak API</a><ul>
+<li class="toctree-l3"><a class="reference internal" href="#synopsis">Synopsis</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#parameters">Parameters</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#examples">Examples</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#return-values">Return Values</a><ul>
+<li class="toctree-l4"><a class="reference internal" href="#authors">Authors</a></li>
+</ul>
+</li>
+</ul>
+</li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_role.html">keycloak_role – Allows administration of Keycloak roles via Keycloak API</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_user_federation.html">keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API</a></li>
+</ul>
+</li>
+<li class="toctree-l1"><a class="reference internal" href="../roles/index.html">Role Index</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="../testing.html">Testing</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../developing.html">Contributor’s Guidelines</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../releasing.html">Collection Versioning Strategy</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">General</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="../CHANGELOG.html">Changelog</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">Middleware collections</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/infinispan/">Infinispan / Red Hat Data Grid</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/keycloak/">Keycloak / Red Hat Single Sign-On</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/wildfly/">Wildfly / Red Hat JBoss EAP</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/jws/">Tomcat / Red Hat JWS</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/amq/">ActiveMQ / Red Hat AMQ Broker</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/amq_streams/">Kafka / Red Hat AMQ Streams</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/redhat-csp-download/">Red Hat CSP Download</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/ansible_collections_jcliff/">JCliff</a></li>
+</ul>
+
+        </div>
+      </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap"><nav class="wy-nav-top" aria-label="Mobile navigation menu" >
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../index.html">Keycloak Ansible Collection</a>
+      </nav>
+
+      <div class="wy-nav-content">
+        <div class="rst-content">
+          <div role="navigation" aria-label="Page navigation">
+  <ul class="wy-breadcrumbs">
+      <li><a href="../index.html" class="icon icon-home" aria-label="Home"></a></li>
+          <li class="breadcrumb-item"><a href="index.html">Plugin Index</a></li>
+      <li class="breadcrumb-item active">keycloak_client – Allows administration of Keycloak clients via Keycloak API</li>
+      <li class="wy-breadcrumbs-aside">
+            <a href="../_sources/plugins/keycloak_client.rst.txt" rel="nofollow"> View page source</a>
+      </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+           <div itemprop="articleBody">
+             
+  <span class="target" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module"></span><section id="keycloak-client-allows-administration-of-keycloak-clients-via-keycloak-api">
+<h1>keycloak_client – Allows administration of Keycloak clients via Keycloak API<a class="headerlink" href="#keycloak-client-allows-administration-of-keycloak-clients-via-keycloak-api" title="Permalink to this heading"></a></h1>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>This module is part of the <a class="reference external" href="https://galaxy.ansible.com/middleware_automation/keycloak">middleware_automation.keycloak collection</a>.</p>
+<p>To install it, use: <code class="code docutils literal notranslate"><span class="pre">ansible-galaxy</span> <span class="pre">collection</span> <span class="pre">install</span> <span class="pre">middleware_automation.keycloak</span></code>.</p>
+<p>To use it in a playbook, specify: <code class="code docutils literal notranslate"><span class="pre">middleware_automation.keycloak.keycloak_client</span></code>.</p>
+</div>
+<nav class="contents local" id="contents">
+<ul class="simple">
+<li><p><a class="reference internal" href="#synopsis" id="id105">Synopsis</a></p></li>
+<li><p><a class="reference internal" href="#parameters" id="id106">Parameters</a></p></li>
+<li><p><a class="reference internal" href="#examples" id="id107">Examples</a></p></li>
+<li><p><a class="reference internal" href="#return-values" id="id108">Return Values</a></p></li>
+</ul>
+</nav>
+<section id="synopsis">
+<h2><a class="toc-backref" href="#id105" role="doc-backlink">Synopsis</a><a class="headerlink" href="#synopsis" title="Permalink to this heading"></a></h2>
+<ul class="simple">
+<li><p>This module allows the administration of Keycloak clients via the Keycloak REST API. It requires access to the REST API via OpenID Connect; the user connecting and the client being used must have the requisite access rights. In a default Keycloak installation, admin-cli and an admin user would work, as would a separate client definition with the scope tailored to your needs and a user having the expected roles.</p></li>
+<li><p>The names of module options are snake_cased versions of the camelCase ones found in the Keycloak API and its documentation at <a class="reference external" href="https://www.keycloak.org/docs-api/8.0/rest-api/index.html">https://www.keycloak.org/docs-api/8.0/rest-api/index.html</a>. Aliases are provided so camelCased versions can be used as well.</p></li>
+<li><p>The Keycloak API does not always sanity check inputs e.g. you can set SAML-specific settings on an OpenID Connect client for instance and vice versa. Be careful. If you do not specify a setting, usually a sensible default is chosen.</p></li>
+</ul>
+</section>
+<section id="parameters">
+<h2><a class="toc-backref" href="#id106" role="doc-backlink">Parameters</a><a class="headerlink" href="#parameters" title="Permalink to this heading"></a></h2>
+<table class="ansible-option-table docutils align-default" style="width: 100%">
+<thead>
+<tr class="row-odd"><th class="head"><p>Parameter</p></th>
+<th class="head"><p>Comments</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-admin_url"></div>
+<div class="ansibleOptionAnchor" id="parameter-adminUrl"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-adminurl"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-admin-url"></span><strong>admin_url</strong></p>
+<a class="ansibleOptionLink" href="#parameter-admin_url" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: adminUrl</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>URL to the admin interface of the client. This is ‘adminUrl’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-always_display_in_console"></div>
+<div class="ansibleOptionAnchor" id="parameter-alwaysDisplayInConsole"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-alwaysdisplayinconsole"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-always-display-in-console"></span><strong>always_display_in_console</strong></p>
+<a class="ansibleOptionLink" href="#parameter-always_display_in_console" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: alwaysDisplayInConsole</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 4.7.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Whether or not to display this client in account console, even if the user does not have an active session.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id1"><span class="problematic" id="id2">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id3"><span class="problematic" id="id4">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes"><strong>attributes</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>A dict of further attributes for this client. This can contain various configuration settings; an example is given in the examples section. While an exhaustive list of permissible options is not available; possible options as of Keycloak 3.4 are listed below. The Keycloak API does not validate whether a given option is appropriate for the protocol used; if specified anyway, Keycloak will simply not use it.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/jwks.url"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-jwks-url"><strong>jwks.url</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/jwks.url" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For OpenID-Connect clients, URL where client keys in JWK are stored.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/jwt.credential.certificate"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-jwt-credential-certificate"><strong>jwt.credential.certificate</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/jwt.credential.certificate" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For OpenID-Connect clients, client certificate for validating JWT issued by client and signed by its key, base64-encoded.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/request.object.signature.alg"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-request-object-signature-alg"><strong>request.object.signature.alg</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/request.object.signature.alg" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For OpenID-Connect clients, JWA algorithm which the client needs to use when sending OIDC request object. One of <code class="docutils literal notranslate"><span class="pre">any</span></code>, <code class="docutils literal notranslate"><span class="pre">none</span></code>, <code class="docutils literal notranslate"><span class="pre">RS256</span></code>.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.authnstatement"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-authnstatement"><strong>saml.authnstatement</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.authnstatement" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For SAML clients, boolean specifying whether or not a statement containing method and timestamp should be included in the login response.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.client.signature"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-client-signature"><strong>saml.client.signature</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.client.signature" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For SAML clients, boolean specifying whether a client signature is required and validated.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.encrypt"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-encrypt"><strong>saml.encrypt</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.encrypt" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Boolean specifying whether SAML assertions should be encrypted with the client’s public key.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.force.post.binding"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-force-post-binding"><strong>saml.force.post.binding</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.force.post.binding" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For SAML clients, boolean specifying whether always to use POST binding for responses.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.onetimeuse.condition"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-onetimeuse-condition"><strong>saml.onetimeuse.condition</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.onetimeuse.condition" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For SAML clients, boolean specifying whether a OneTimeUse condition should be included in login responses.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.server.signature"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-server-signature"><strong>saml.server.signature</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.server.signature" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Boolean specifying whether SAML documents should be signed by the realm.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.server.signature.keyinfo.ext"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-server-signature-keyinfo-ext"><strong>saml.server.signature.keyinfo.ext</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.server.signature.keyinfo.ext" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For SAML clients, boolean specifying whether REDIRECT signing key lookup should be optimized through inclusion of the signing key id in the SAML Extensions element.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.signature.algorithm"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-signature-algorithm"><strong>saml.signature.algorithm</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.signature.algorithm" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Signature algorithm used to sign SAML documents. One of <code class="docutils literal notranslate"><span class="pre">RSA_SHA256</span></code>, <code class="docutils literal notranslate"><span class="pre">RSA_SHA1</span></code>, <code class="docutils literal notranslate"><span class="pre">RSA_SHA512</span></code>, or <code class="docutils literal notranslate"><span class="pre">DSA_SHA1</span></code>.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.signing.certificate"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-signing-certificate"><strong>saml.signing.certificate</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.signing.certificate" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>SAML signing key certificate, base64-encoded.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml.signing.private.key"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-signing-private-key"><strong>saml.signing.private.key</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml.signing.private.key" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>SAML signing key private key, base64-encoded.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml_assertion_consumer_url_post"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-assertion-consumer-url-post"><strong>saml_assertion_consumer_url_post</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml_assertion_consumer_url_post" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>SAML POST Binding URL for the client’s assertion consumer service (login responses).</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml_assertion_consumer_url_redirect"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-assertion-consumer-url-redirect"><strong>saml_assertion_consumer_url_redirect</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml_assertion_consumer_url_redirect" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>SAML Redirect Binding URL for the client’s assertion consumer service (login responses).</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml_force_name_id_format"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-force-name-id-format"><strong>saml_force_name_id_format</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml_force_name_id_format" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For SAML clients, Boolean specifying whether to ignore requested NameID subject format and using the configured one instead.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml_name_id_format"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-name-id-format"><strong>saml_name_id_format</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml_name_id_format" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For SAML clients, the NameID format to use (one of <code class="docutils literal notranslate"><span class="pre">username</span></code>, <code class="docutils literal notranslate"><span class="pre">email</span></code>, <code class="docutils literal notranslate"><span class="pre">transient</span></code>, or <code class="docutils literal notranslate"><span class="pre">persistent</span></code>)</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml_signature_canonicalization_method"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-signature-canonicalization-method"><strong>saml_signature_canonicalization_method</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml_signature_canonicalization_method" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>SAML signature canonicalization method. This is one of four values, namely <code class="docutils literal notranslate"><span class="pre">http://www.w3.org/2001/10/xml-exc-c14n#</span></code> for EXCLUSIVE, <code class="docutils literal notranslate"><span class="pre">http://www.w3.org/2001/10/xml-exc-c14n#WithComments</span></code> for EXCLUSIVE_WITH_COMMENTS, <code class="docutils literal notranslate"><span class="pre">http://www.w3.org/TR/2001/REC-xml-c14n-20010315</span></code> for INCLUSIVE, and <code class="docutils literal notranslate"><span class="pre">http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments</span></code> for INCLUSIVE_WITH_COMMENTS.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml_single_logout_service_url_post"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-single-logout-service-url-post"><strong>saml_single_logout_service_url_post</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml_single_logout_service_url_post" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>SAML POST binding url for the client’s single logout service.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/saml_single_logout_service_url_redirect"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-saml-single-logout-service-url-redirect"><strong>saml_single_logout_service_url_redirect</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/saml_single_logout_service_url_redirect" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>SAML redirect binding url for the client’s single logout service.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/use.jwks.url"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-use-jwks-url"><strong>use.jwks.url</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/use.jwks.url" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For OpenID-Connect clients, boolean specifying whether to use a JWKS URL to obtain client public keys.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes/user.info.response.signature.alg"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-attributes-user-info-response-signature-alg"><strong>user.info.response.signature.alg</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes/user.info.response.signature.alg" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For OpenID-Connect clients, JWA algorithm for signed UserInfo-endpoint responses. One of <code class="docutils literal notranslate"><span class="pre">RS256</span></code> or <code class="docutils literal notranslate"><span class="pre">unsigned</span></code>.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_client_id"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-auth-client-id"><strong>auth_client_id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_client_id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>OpenID Connect <em>client_id</em> to authenticate to the API with.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id5"><span class="problematic" id="id6">:ansible-option-default:`&quot;admin-cli&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_client_secret"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-auth-client-secret"><strong>auth_client_secret</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_client_secret" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Client Secret to use in conjunction with <em>auth_client_id</em> (if required).</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_keycloak_url"></div>
+<div class="ansibleOptionAnchor" id="parameter-url"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-url"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-auth-keycloak-url"></span><strong>auth_keycloak_url</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_keycloak_url" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: url</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span> / <span class="ansible-option-required">required</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>URL to the Keycloak instance.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_password"></div>
+<div class="ansibleOptionAnchor" id="parameter-password"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-password"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-auth-password"></span><strong>auth_password</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_password" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: password</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Password to authenticate for API access with.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_realm"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-auth-realm"><strong>auth_realm</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_realm" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Keycloak realm name to authenticate to for API access.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_username"></div>
+<div class="ansibleOptionAnchor" id="parameter-username"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-username"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-auth-username"></span><strong>auth_username</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_username" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: username</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Username to authenticate for API access with.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-authentication_flow_binding_overrides"></div>
+<div class="ansibleOptionAnchor" id="parameter-authenticationFlowBindingOverrides"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-authenticationflowbindingoverrides"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-authentication-flow-binding-overrides"></span><strong>authentication_flow_binding_overrides</strong></p>
+<a class="ansibleOptionLink" href="#parameter-authentication_flow_binding_overrides" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: authenticationFlowBindingOverrides</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 3.4.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Override realm authentication flow bindings.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-authorization_services_enabled"></div>
+<div class="ansibleOptionAnchor" id="parameter-authorizationServicesEnabled"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-authorizationservicesenabled"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-authorization-services-enabled"></span><strong>authorization_services_enabled</strong></p>
+<a class="ansibleOptionLink" href="#parameter-authorization_services_enabled" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: authorizationServicesEnabled</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Are authorization services enabled for this client or not (OpenID connect). This is ‘authorizationServicesEnabled’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id7"><span class="problematic" id="id8">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id9"><span class="problematic" id="id10">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-authorization_settings"></div>
+<div class="ansibleOptionAnchor" id="parameter-authorizationSettings"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-authorizationsettings"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-authorization-settings"></span><strong>authorization_settings</strong></p>
+<a class="ansibleOptionLink" href="#parameter-authorization_settings" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: authorizationSettings</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>a data structure defining the authorization settings for this client. For reference, please see the Keycloak API docs at <a class="reference external" href="https://www.keycloak.org/docs-api/8.0/rest-api/index.html#_resourceserverrepresentation">https://www.keycloak.org/docs-api/8.0/rest-api/index.html#_resourceserverrepresentation</a>. This is ‘authorizationSettings’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-base_url"></div>
+<div class="ansibleOptionAnchor" id="parameter-baseUrl"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-baseurl"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-base-url"></span><strong>base_url</strong></p>
+<a class="ansibleOptionLink" href="#parameter-base_url" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: baseUrl</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Default URL to use when the auth server needs to redirect or link back to the client This is ‘baseUrl’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-bearer_only"></div>
+<div class="ansibleOptionAnchor" id="parameter-bearerOnly"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-beareronly"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-bearer-only"></span><strong>bearer_only</strong></p>
+<a class="ansibleOptionLink" href="#parameter-bearer_only" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: bearerOnly</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The access type of this client is bearer-only. This is ‘bearerOnly’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id11"><span class="problematic" id="id12">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id13"><span class="problematic" id="id14">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-client_authenticator_type"></div>
+<div class="ansibleOptionAnchor" id="parameter-clientAuthenticatorType"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-clientauthenticatortype"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-client-authenticator-type"></span><strong>client_authenticator_type</strong></p>
+<a class="ansibleOptionLink" href="#parameter-client_authenticator_type" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: clientAuthenticatorType</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>How do clients authenticate with the auth server? Either <code class="docutils literal notranslate"><span class="pre">client-secret</span></code> or <code class="docutils literal notranslate"><span class="pre">client-jwt</span></code> can be chosen. When using <code class="docutils literal notranslate"><span class="pre">client-secret</span></code>, the module parameter <em>secret</em> can set it, while for <code class="docutils literal notranslate"><span class="pre">client-jwt</span></code>, you can use the keys <code class="docutils literal notranslate"><span class="pre">use.jwks.url</span></code>, <code class="docutils literal notranslate"><span class="pre">jwks.url</span></code>, and <code class="docutils literal notranslate"><span class="pre">jwt.credential.certificate</span></code> in the <em>attributes</em> module parameter to configure its behavior. This is ‘clientAuthenticatorType’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id15"><span class="problematic" id="id16">:ansible-option-choices-entry:`&quot;client-secret&quot;`</span></a></p></li>
+<li><p><a href="#id17"><span class="problematic" id="id18">:ansible-option-choices-entry:`&quot;client-jwt&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-client_id"></div>
+<div class="ansibleOptionAnchor" id="parameter-clientId"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-clientid"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-client-id"></span><strong>client_id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-client_id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: clientId</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Client id of client to be worked on. This is usually an alphanumeric name chosen by you. Either this or <em>id</em> is required. If you specify both, <em>id</em> takes precedence. This is ‘clientId’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-client_template"></div>
+<div class="ansibleOptionAnchor" id="parameter-clientTemplate"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-clienttemplate"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-client-template"></span><strong>client_template</strong></p>
+<a class="ansibleOptionLink" href="#parameter-client_template" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: clientTemplate</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Client template to use for this client. If it does not exist this field will silently be dropped. This is ‘clientTemplate’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-connection_timeout"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-connection-timeout"><strong>connection_timeout</strong></p>
+<a class="ansibleOptionLink" href="#parameter-connection_timeout" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 4.5.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Controls the HTTP connections timeout period (in seconds) to Keycloak API.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id19"><span class="problematic" id="id20">:ansible-option-default:`10`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-consent_required"></div>
+<div class="ansibleOptionAnchor" id="parameter-consentRequired"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-consentrequired"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-consent-required"></span><strong>consent_required</strong></p>
+<a class="ansibleOptionLink" href="#parameter-consent_required" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: consentRequired</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If enabled, users have to consent to client access. This is ‘consentRequired’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id21"><span class="problematic" id="id22">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id23"><span class="problematic" id="id24">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-default_client_scopes"></div>
+<div class="ansibleOptionAnchor" id="parameter-defaultClientScopes"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-defaultclientscopes"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-default-client-scopes"></span><strong>default_client_scopes</strong></p>
+<a class="ansibleOptionLink" href="#parameter-default_client_scopes" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: defaultClientScopes</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">list</span> / <span class="ansible-option-elements">elements=string</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 4.7.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>List of default client scopes.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-default_roles"></div>
+<div class="ansibleOptionAnchor" id="parameter-defaultRoles"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-defaultroles"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-default-roles"></span><strong>default_roles</strong></p>
+<a class="ansibleOptionLink" href="#parameter-default_roles" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: defaultRoles</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">list</span> / <span class="ansible-option-elements">elements=string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>list of default roles for this client. If the client roles referenced do not exist yet, they will be created. This is ‘defaultRoles’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-description"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-description"><strong>description</strong></p>
+<a class="ansibleOptionLink" href="#parameter-description" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Description of the client in Keycloak.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-direct_access_grants_enabled"></div>
+<div class="ansibleOptionAnchor" id="parameter-directAccessGrantsEnabled"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-directaccessgrantsenabled"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-direct-access-grants-enabled"></span><strong>direct_access_grants_enabled</strong></p>
+<a class="ansibleOptionLink" href="#parameter-direct_access_grants_enabled" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: directAccessGrantsEnabled</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Are direct access grants enabled for this client or not (OpenID connect). This is ‘directAccessGrantsEnabled’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id25"><span class="problematic" id="id26">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id27"><span class="problematic" id="id28">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-enabled"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-enabled"><strong>enabled</strong></p>
+<a class="ansibleOptionLink" href="#parameter-enabled" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Is this client enabled or not?</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id29"><span class="problematic" id="id30">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id31"><span class="problematic" id="id32">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-frontchannel_logout"></div>
+<div class="ansibleOptionAnchor" id="parameter-frontchannelLogout"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-frontchannellogout"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-frontchannel-logout"></span><strong>frontchannel_logout</strong></p>
+<a class="ansibleOptionLink" href="#parameter-frontchannel_logout" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: frontchannelLogout</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Is frontchannel logout enabled for this client or not. This is ‘frontchannelLogout’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id33"><span class="problematic" id="id34">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id35"><span class="problematic" id="id36">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-full_scope_allowed"></div>
+<div class="ansibleOptionAnchor" id="parameter-fullScopeAllowed"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-fullscopeallowed"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-full-scope-allowed"></span><strong>full_scope_allowed</strong></p>
+<a class="ansibleOptionLink" href="#parameter-full_scope_allowed" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: fullScopeAllowed</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Is the “Full Scope Allowed” feature set for this client or not. This is ‘fullScopeAllowed’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id37"><span class="problematic" id="id38">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id39"><span class="problematic" id="id40">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-http_agent"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-http-agent"><strong>http_agent</strong></p>
+<a class="ansibleOptionLink" href="#parameter-http_agent" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 5.4.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Configures the HTTP User-Agent header.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id41"><span class="problematic" id="id42">:ansible-option-default:`&quot;Ansible&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-id"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-id"><strong>id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Id of client to be worked on. This is usually an UUID. Either this or <em>client_id</em> is required. If you specify both, this takes precedence.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-implicit_flow_enabled"></div>
+<div class="ansibleOptionAnchor" id="parameter-implicitFlowEnabled"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-implicitflowenabled"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-implicit-flow-enabled"></span><strong>implicit_flow_enabled</strong></p>
+<a class="ansibleOptionLink" href="#parameter-implicit_flow_enabled" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: implicitFlowEnabled</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Enable implicit flow for this client or not (OpenID connect). This is ‘implicitFlowEnabled’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id43"><span class="problematic" id="id44">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id45"><span class="problematic" id="id46">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-name"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-name"><strong>name</strong></p>
+<a class="ansibleOptionLink" href="#parameter-name" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Name of the client (this is not the same as <em>client_id</em>).</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-node_re_registration_timeout"></div>
+<div class="ansibleOptionAnchor" id="parameter-nodeReRegistrationTimeout"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-nodereregistrationtimeout"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-node-re-registration-timeout"></span><strong>node_re_registration_timeout</strong></p>
+<a class="ansibleOptionLink" href="#parameter-node_re_registration_timeout" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: nodeReRegistrationTimeout</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Cluster node re-registration timeout for this client. This is ‘nodeReRegistrationTimeout’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-not_before"></div>
+<div class="ansibleOptionAnchor" id="parameter-notBefore"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-notbefore"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-not-before"></span><strong>not_before</strong></p>
+<a class="ansibleOptionLink" href="#parameter-not_before" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: notBefore</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Revoke any tokens issued before this date for this client (this is a UNIX timestamp). This is ‘notBefore’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-optional_client_scopes"></div>
+<div class="ansibleOptionAnchor" id="parameter-optionalClientScopes"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-optionalclientscopes"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-optional-client-scopes"></span><strong>optional_client_scopes</strong></p>
+<a class="ansibleOptionLink" href="#parameter-optional_client_scopes" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: optionalClientScopes</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">list</span> / <span class="ansible-option-elements">elements=string</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 4.7.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>List of optional client scopes.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-protocol"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocol"><strong>protocol</strong></p>
+<a class="ansibleOptionLink" href="#parameter-protocol" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Type of client (either <code class="docutils literal notranslate"><span class="pre">openid-connect</span></code> or <code class="docutils literal notranslate"><span class="pre">saml</span></code>.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id47"><span class="problematic" id="id48">:ansible-option-choices-entry:`&quot;openid-connect&quot;`</span></a></p></li>
+<li><p><a href="#id49"><span class="problematic" id="id50">:ansible-option-choices-entry:`&quot;saml&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-protocol_mappers"></div>
+<div class="ansibleOptionAnchor" id="parameter-protocolMappers"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocolmappers"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocol-mappers"></span><strong>protocol_mappers</strong></p>
+<a class="ansibleOptionLink" href="#parameter-protocol_mappers" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: protocolMappers</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">list</span> / <span class="ansible-option-elements">elements=dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>a list of dicts defining protocol mappers for this client. This is ‘protocolMappers’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-protocol_mappers/config"></div>
+<div class="ansibleOptionAnchor" id="parameter-protocolMappers/config"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocolmappers-config"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocol-mappers-config"></span><strong>config</strong></p>
+<a class="ansibleOptionLink" href="#parameter-protocol_mappers/config" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Dict specifying the configuration options for the protocol mapper; the contents differ depending on the value of <em>protocolMapper</em> and are not documented other than by the source of the mappers and its parent class(es). An example is given below. It is easiest to obtain valid config values by dumping an already-existing protocol mapper configuration through check-mode in the <em>existing</em> field.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-protocol_mappers/consentRequired"></div>
+<div class="ansibleOptionAnchor" id="parameter-protocolMappers/consentRequired"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocolmappers-consentrequired"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocol-mappers-consentrequired"></span><strong>consentRequired</strong></p>
+<a class="ansibleOptionLink" href="#parameter-protocol_mappers/consentRequired" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Specifies whether a user needs to provide consent to a client for this mapper to be active.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id51"><span class="problematic" id="id52">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id53"><span class="problematic" id="id54">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-protocol_mappers/consentText"></div>
+<div class="ansibleOptionAnchor" id="parameter-protocolMappers/consentText"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocolmappers-consenttext"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocol-mappers-consenttext"></span><strong>consentText</strong></p>
+<a class="ansibleOptionLink" href="#parameter-protocol_mappers/consentText" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The human-readable name of the consent the user is presented to accept.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-protocol_mappers/id"></div>
+<div class="ansibleOptionAnchor" id="parameter-protocolMappers/id"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocolmappers-id"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocol-mappers-id"></span><strong>id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-protocol_mappers/id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Usually a UUID specifying the internal ID of this protocol mapper instance.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-protocol_mappers/name"></div>
+<div class="ansibleOptionAnchor" id="parameter-protocolMappers/name"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocolmappers-name"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocol-mappers-name"></span><strong>name</strong></p>
+<a class="ansibleOptionLink" href="#parameter-protocol_mappers/name" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The name of this protocol mapper.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-protocol_mappers/protocol"></div>
+<div class="ansibleOptionAnchor" id="parameter-protocolMappers/protocol"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocolmappers-protocol"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocol-mappers-protocol"></span><strong>protocol</strong></p>
+<a class="ansibleOptionLink" href="#parameter-protocol_mappers/protocol" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>This is either <code class="docutils literal notranslate"><span class="pre">openid-connect</span></code> or <code class="docutils literal notranslate"><span class="pre">saml</span></code>, this specifies for which protocol this protocol mapper. is active.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id55"><span class="problematic" id="id56">:ansible-option-choices-entry:`&quot;openid-connect&quot;`</span></a></p></li>
+<li><p><a href="#id57"><span class="problematic" id="id58">:ansible-option-choices-entry:`&quot;saml&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-protocol_mappers/protocolMapper"></div>
+<div class="ansibleOptionAnchor" id="parameter-protocolMappers/protocolMapper"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocolmappers-protocolmapper"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-protocol-mappers-protocolmapper"></span><strong>protocolMapper</strong></p>
+<a class="ansibleOptionLink" href="#parameter-protocol_mappers/protocolMapper" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The Keycloak-internal name of the type of this protocol-mapper. While an exhaustive list is impossible to provide since this may be extended through SPIs by the user of Keycloak, by default Keycloak as of 3.4 ships with at least</p>
+<p><code class="docutils literal notranslate"><span class="pre">docker-v2-allow-all-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-address-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-full-name-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-group-membership-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-hardcoded-claim-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-hardcoded-role-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-role-name-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-script-based-protocol-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-sha256-pairwise-sub-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-usermodel-attribute-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-usermodel-client-role-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-usermodel-property-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-usermodel-realm-role-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">oidc-usersessionmodel-note-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">saml-group-membership-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">saml-hardcode-attribute-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">saml-hardcode-role-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">saml-role-list-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">saml-role-name-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">saml-user-attribute-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">saml-user-property-mapper</span></code></p>
+<p><code class="docutils literal notranslate"><span class="pre">saml-user-session-note-mapper</span></code></p>
+<p>An exhaustive list of available mappers on your installation can be obtained on the admin console by going to Server Info -&gt; Providers and looking under ‘protocol-mapper’.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-public_client"></div>
+<div class="ansibleOptionAnchor" id="parameter-publicClient"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-publicclient"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-public-client"></span><strong>public_client</strong></p>
+<a class="ansibleOptionLink" href="#parameter-public_client" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: publicClient</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Is the access type for this client public or not. This is ‘publicClient’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id59"><span class="problematic" id="id60">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id61"><span class="problematic" id="id62">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-realm"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-realm"><strong>realm</strong></p>
+<a class="ansibleOptionLink" href="#parameter-realm" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The realm to create the client in.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id63"><span class="problematic" id="id64">:ansible-option-default:`&quot;master&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-redirect_uris"></div>
+<div class="ansibleOptionAnchor" id="parameter-redirectUris"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-redirecturis"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-redirect-uris"></span><strong>redirect_uris</strong></p>
+<a class="ansibleOptionLink" href="#parameter-redirect_uris" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: redirectUris</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">list</span> / <span class="ansible-option-elements">elements=string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Acceptable redirect URIs for this client. This is ‘redirectUris’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-registered_nodes"></div>
+<div class="ansibleOptionAnchor" id="parameter-registeredNodes"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-registerednodes"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-registered-nodes"></span><strong>registered_nodes</strong></p>
+<a class="ansibleOptionLink" href="#parameter-registered_nodes" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: registeredNodes</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>dict of registered cluster nodes (with <code class="docutils literal notranslate"><span class="pre">nodename</span></code> as the key and last registration time as the value). This is ‘registeredNodes’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-registration_access_token"></div>
+<div class="ansibleOptionAnchor" id="parameter-registrationAccessToken"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-registrationaccesstoken"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-registration-access-token"></span><strong>registration_access_token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-registration_access_token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: registrationAccessToken</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The registration access token provides access for clients to the client registration service. This is ‘registrationAccessToken’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-root_url"></div>
+<div class="ansibleOptionAnchor" id="parameter-rootUrl"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-rooturl"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-root-url"></span><strong>root_url</strong></p>
+<a class="ansibleOptionLink" href="#parameter-root_url" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: rootUrl</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Root URL appended to relative URLs for this client. This is ‘rootUrl’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-secret"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-secret"><strong>secret</strong></p>
+<a class="ansibleOptionLink" href="#parameter-secret" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>When using <em>client_authenticator_type</em> <code class="docutils literal notranslate"><span class="pre">client-secret</span></code> (the default), you can specify a secret here (otherwise one will be generated if it does not exit). If changing this secret, the module will not register a change currently (but the changed secret will be saved).</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-service_accounts_enabled"></div>
+<div class="ansibleOptionAnchor" id="parameter-serviceAccountsEnabled"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-serviceaccountsenabled"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-service-accounts-enabled"></span><strong>service_accounts_enabled</strong></p>
+<a class="ansibleOptionLink" href="#parameter-service_accounts_enabled" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: serviceAccountsEnabled</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Are service accounts enabled for this client or not (OpenID connect). This is ‘serviceAccountsEnabled’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id65"><span class="problematic" id="id66">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id67"><span class="problematic" id="id68">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-standard_flow_enabled"></div>
+<div class="ansibleOptionAnchor" id="parameter-standardFlowEnabled"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-standardflowenabled"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-standard-flow-enabled"></span><strong>standard_flow_enabled</strong></p>
+<a class="ansibleOptionLink" href="#parameter-standard_flow_enabled" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: standardFlowEnabled</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Enable standard flow for this client or not (OpenID connect). This is ‘standardFlowEnabled’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id69"><span class="problematic" id="id70">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id71"><span class="problematic" id="id72">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-state"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-state"><strong>state</strong></p>
+<a class="ansibleOptionLink" href="#parameter-state" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>State of the client</p>
+<p>On <code class="docutils literal notranslate"><span class="pre">present</span></code>, the client will be created (or updated if it exists already).</p>
+<p>On <code class="docutils literal notranslate"><span class="pre">absent</span></code>, the client will be removed if it exists</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id73"><span class="problematic" id="id74">:ansible-option-choices-entry-default:`&quot;present&quot;`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id75"><span class="problematic" id="id76">:ansible-option-choices-entry:`&quot;absent&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-surrogate_auth_required"></div>
+<div class="ansibleOptionAnchor" id="parameter-surrogateAuthRequired"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-surrogateauthrequired"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-surrogate-auth-required"></span><strong>surrogate_auth_required</strong></p>
+<a class="ansibleOptionLink" href="#parameter-surrogate_auth_required" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: surrogateAuthRequired</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Whether or not surrogate auth is required. This is ‘surrogateAuthRequired’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id77"><span class="problematic" id="id78">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id79"><span class="problematic" id="id80">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-token"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-token"><strong>token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 3.0.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Authentication token for Keycloak API.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-use_template_config"></div>
+<div class="ansibleOptionAnchor" id="parameter-useTemplateConfig"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-usetemplateconfig"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-use-template-config"></span><strong>use_template_config</strong></p>
+<a class="ansibleOptionLink" href="#parameter-use_template_config" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: useTemplateConfig</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Whether or not to use configuration from the <em>client_template</em>. This is ‘useTemplateConfig’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id81"><span class="problematic" id="id82">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id83"><span class="problematic" id="id84">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-use_template_mappers"></div>
+<div class="ansibleOptionAnchor" id="parameter-useTemplateMappers"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-usetemplatemappers"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-use-template-mappers"></span><strong>use_template_mappers</strong></p>
+<a class="ansibleOptionLink" href="#parameter-use_template_mappers" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: useTemplateMappers</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Whether or not to use mapper configuration from the <em>client_template</em>. This is ‘useTemplateMappers’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id85"><span class="problematic" id="id86">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id87"><span class="problematic" id="id88">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-use_template_scope"></div>
+<div class="ansibleOptionAnchor" id="parameter-useTemplateScope"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-usetemplatescope"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-use-template-scope"></span><strong>use_template_scope</strong></p>
+<a class="ansibleOptionLink" href="#parameter-use_template_scope" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: useTemplateScope</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Whether or not to use scope configuration from the <em>client_template</em>. This is ‘useTemplateScope’ in the Keycloak REST API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id89"><span class="problematic" id="id90">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id91"><span class="problematic" id="id92">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-validate_certs"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-validate-certs"><strong>validate_certs</strong></p>
+<a class="ansibleOptionLink" href="#parameter-validate_certs" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Verify TLS certificates (do not disable this in production).</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id93"><span class="problematic" id="id94">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id95"><span class="problematic" id="id96">:ansible-option-choices-entry-default:`true`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-web_origins"></div>
+<div class="ansibleOptionAnchor" id="parameter-webOrigins"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-weborigins"><span id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-parameter-web-origins"></span><strong>web_origins</strong></p>
+<a class="ansibleOptionLink" href="#parameter-web_origins" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: webOrigins</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">list</span> / <span class="ansible-option-elements">elements=string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>List of allowed CORS origins. This is ‘webOrigins’ in the Keycloak REST API.</p>
+</div></td>
+</tr>
+</tbody>
+</table>
+</section>
+<section id="examples">
+<h2><a class="toc-backref" href="#id107" role="doc-backlink">Examples</a><a class="headerlink" href="#examples" title="Permalink to this heading"></a></h2>
+<div class="highlight-yaml+jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create or update Keycloak client (minimal example), authentication with credentials</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_client</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://auth.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">USERNAME</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PASSWORD</span>
+<span class="w">    </span><span class="nt">client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">test</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">present</span>
+<span class="w">  </span><span class="nt">delegate_to</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create or update Keycloak client (minimal example), authentication with token</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_client</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">auth_client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin-cli</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://auth.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">token</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">TOKEN</span>
+<span class="w">    </span><span class="nt">client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">test</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">present</span>
+<span class="w">  </span><span class="nt">delegate_to</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Delete a Keycloak client</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_client</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">auth_client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin-cli</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://auth.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">USERNAME</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PASSWORD</span>
+<span class="w">    </span><span class="nt">client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">test</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">absent</span>
+<span class="w">  </span><span class="nt">delegate_to</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create or update a Keycloak client (with all the bells and whistles)</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_client</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">auth_client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin-cli</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://auth.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">USERNAME</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PASSWORD</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">present</span>
+<span class="w">    </span><span class="nt">realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">test</span>
+<span class="w">    </span><span class="nt">id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">d8b127a3-31f6-44c8-a7e4-4ab9a3e78d95</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">this_is_a_test</span>
+<span class="w">    </span><span class="nt">description</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Description of this wonderful client</span>
+<span class="w">    </span><span class="nt">root_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://www.example.com/</span>
+<span class="w">    </span><span class="nt">admin_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://www.example.com/admin_url</span>
+<span class="w">    </span><span class="nt">base_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">basepath</span>
+<span class="w">    </span><span class="nt">enabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">    </span><span class="nt">client_authenticator_type</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">client-secret</span>
+<span class="w">    </span><span class="nt">secret</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">REALLYWELLKEPTSECRET</span>
+<span class="w">    </span><span class="nt">redirect_uris</span><span class="p">:</span>
+<span class="w">      </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://www.example.com/*</span>
+<span class="w">      </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">http://localhost:8888/</span>
+<span class="w">    </span><span class="nt">web_origins</span><span class="p">:</span>
+<span class="w">      </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://www.example.com/*</span>
+<span class="w">    </span><span class="nt">not_before</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1507825725</span>
+<span class="w">    </span><span class="nt">bearer_only</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">consent_required</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">standard_flow_enabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">    </span><span class="nt">implicit_flow_enabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">direct_access_grants_enabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">service_accounts_enabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">authorization_services_enabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">public_client</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">frontchannel_logout</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">protocol</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">openid-connect</span>
+<span class="w">    </span><span class="nt">full_scope_allowed</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">node_re_registration_timeout</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">-1</span>
+<span class="w">    </span><span class="nt">client_template</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">test</span>
+<span class="w">    </span><span class="nt">use_template_config</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">use_template_scope</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">use_template_mappers</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">always_display_in_console</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">    </span><span class="nt">registered_nodes</span><span class="p">:</span>
+<span class="w">      </span><span class="nt">node01.example.com</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1507828202</span>
+<span class="w">    </span><span class="nt">registration_access_token</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">eyJWT_TOKEN</span>
+<span class="w">    </span><span class="nt">surrogate_auth_required</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">default_roles</span><span class="p">:</span>
+<span class="w">      </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">test01</span>
+<span class="w">      </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">test02</span>
+<span class="w">    </span><span class="nt">authentication_flow_binding_overrides</span><span class="p">:</span>
+<span class="w">        </span><span class="nt">browser</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">4c90336b-bf1d-4b87-916d-3677ba4e5fbb</span>
+<span class="w">    </span><span class="nt">protocol_mappers</span><span class="p">:</span>
+<span class="w">      </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">config</span><span class="p">:</span>
+<span class="w">          </span><span class="nt">access.token.claim</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">          </span><span class="nt">claim.name</span><span class="p">:</span><span class="w"> </span><span class="s">&quot;family_name&quot;</span>
+<span class="w">          </span><span class="nt">id.token.claim</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">          </span><span class="nt">jsonType.label</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">String</span>
+<span class="w">          </span><span class="nt">user.attribute</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">lastName</span>
+<span class="w">          </span><span class="nt">userinfo.token.claim</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">        </span><span class="nt">consentRequired</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">        </span><span class="nt">consentText</span><span class="p">:</span><span class="w"> </span><span class="s">&quot;${familyName}&quot;</span>
+<span class="w">        </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">family name</span>
+<span class="w">        </span><span class="nt">protocol</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">openid-connect</span>
+<span class="w">        </span><span class="nt">protocolMapper</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">oidc-usermodel-property-mapper</span>
+<span class="w">      </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">config</span><span class="p">:</span>
+<span class="w">          </span><span class="nt">attribute.name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Role</span>
+<span class="w">          </span><span class="nt">attribute.nameformat</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Basic</span>
+<span class="w">          </span><span class="nt">single</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">        </span><span class="nt">consentRequired</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">        </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">role list</span>
+<span class="w">        </span><span class="nt">protocol</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">saml</span>
+<span class="w">        </span><span class="nt">protocolMapper</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">saml-role-list-mapper</span>
+<span class="w">    </span><span class="nt">attributes</span><span class="p">:</span>
+<span class="w">      </span><span class="nt">saml.authnstatement</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">saml.client.signature</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">saml.force.post.binding</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">saml.server.signature</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">saml.signature.algorithm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">RSA_SHA256</span>
+<span class="w">      </span><span class="nt">saml.signing.certificate</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">CERTIFICATEHERE</span>
+<span class="w">      </span><span class="nt">saml.signing.private.key</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PRIVATEKEYHERE</span>
+<span class="w">      </span><span class="nt">saml_force_name_id_format</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">      </span><span class="nt">saml_name_id_format</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">username</span>
+<span class="w">      </span><span class="nt">saml_signature_canonicalization_method</span><span class="p">:</span><span class="w"> </span><span class="s">&quot;http://www.w3.org/2001/10/xml-exc-c14n#&quot;</span>
+<span class="w">      </span><span class="nt">user.info.response.signature.alg</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">RS256</span>
+<span class="w">      </span><span class="nt">request.object.signature.alg</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">RS256</span>
+<span class="w">      </span><span class="nt">use.jwks.url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">jwks.url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">JWKS_URL_FOR_CLIENT_AUTH_JWT</span>
+<span class="w">      </span><span class="nt">jwt.credential.certificate</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">JWT_CREDENTIAL_CERTIFICATE_FOR_CLIENT_AUTH</span>
+<span class="w">  </span><span class="nt">delegate_to</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+</pre></div>
+</div>
+</section>
+<section id="return-values">
+<h2><a class="toc-backref" href="#id108" role="doc-backlink">Return Values</a><a class="headerlink" href="#return-values" title="Permalink to this heading"></a></h2>
+<p>Common return values are documented <a class="reference external" href="https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values" title="(in Ansible v7)"><span class="xref std std-ref">here</span></a>, the following are the fields unique to this module:</p>
+<table class="ansible-option-table docutils align-default" style="width: 100%">
+<thead>
+<tr class="row-odd"><th class="head"><p>Key</p></th>
+<th class="head"><p>Description</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-end_state"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-return-end-state"><strong>end_state</strong></p>
+<a class="ansibleOptionLink" href="#return-end_state" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Representation of client after module execution (sample is truncated).</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> on success</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id97"><span class="problematic" id="id98">:ansible-rv-sample-value:`{&quot;adminUrl&quot;: &quot;http://www.example.com/admin\_url&quot;, &quot;attributes&quot;: {&quot;request.object.signature.alg&quot;: &quot;RS256&quot;}}`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-existing"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-return-existing"><strong>existing</strong></p>
+<a class="ansibleOptionLink" href="#return-existing" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Representation of existing client (sample is truncated).</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> always</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id99"><span class="problematic" id="id100">:ansible-rv-sample-value:`{&quot;adminUrl&quot;: &quot;http://www.example.com/admin\_url&quot;, &quot;attributes&quot;: {&quot;request.object.signature.alg&quot;: &quot;RS256&quot;}}`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-msg"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-return-msg"><strong>msg</strong></p>
+<a class="ansibleOptionLink" href="#return-msg" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Message as to what action was taken.</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> always</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id101"><span class="problematic" id="id102">:ansible-rv-sample-value:`&quot;Client testclient has been updated&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-proposed"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-client-module-return-proposed"><strong>proposed</strong></p>
+<a class="ansibleOptionLink" href="#return-proposed" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Representation of proposed client.</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> always</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id103"><span class="problematic" id="id104">:ansible-rv-sample-value:`{&quot;clientId&quot;: &quot;test&quot;}`</span></a></p>
+</div></td>
+</tr>
+</tbody>
+</table>
+<section id="authors">
+<h3>Authors<a class="headerlink" href="#authors" title="Permalink to this heading"></a></h3>
+<ul class="simple">
+<li><p>Eike Frost (&#64;eikef)</p></li>
+</ul>
+</section>
+</section>
+</section>
+
+
+           </div>
+          </div>
+          <footer><div class="rst-footer-buttons" role="navigation" aria-label="Footer">
+        <a href="index.html" class="btn btn-neutral float-left" title="Plugin Index" accesskey="p" rel="prev"><span class="fa fa-arrow-circle-left" aria-hidden="true"></span> Previous</a>
+        <a href="keycloak_role.html" class="btn btn-neutral float-right" title="keycloak_role – Allows administration of Keycloak roles via Keycloak API" accesskey="n" rel="next">Next <span class="fa fa-arrow-circle-right" aria-hidden="true"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <p>&#169; Copyright 2023, Red Hat, Inc..</p>
+  </div>
+
+  Built with <a href="https://www.sphinx-doc.org/">Sphinx</a> using a
+    <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a>
+    provided by <a href="https://readthedocs.org">Read the Docs</a>.
+   
+
+</footer>
+        </div>
+      </div>
+    </section>
+  </div>
+  <script>
+      jQuery(function () {
+          SphinxRtdTheme.Navigation.enable(true);
+      });
+  </script> 
+
+</body>
+</html>
\ No newline at end of file
diff --git a/main/plugins/keycloak_role.html b/main/plugins/keycloak_role.html
new file mode 100644
index 0000000..b4f0301
--- /dev/null
+++ b/main/plugins/keycloak_role.html
@@ -0,0 +1,446 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+  <meta charset="utf-8" /><meta name="generator" content="Docutils 0.18.1: http://docutils.sourceforge.net/" />
+
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>keycloak_role – Allows administration of Keycloak roles via Keycloak API &mdash; Keycloak Ansible Collection  documentation</title>
+      <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
+      <link rel="stylesheet" href="../_static/css/theme.css" type="text/css" />
+      <link rel="stylesheet" href="../_static/ansible-basic-sphinx-ext.css" type="text/css" />
+  <!--[if lt IE 9]>
+    <script src="../_static/js/html5shiv.min.js"></script>
+  <![endif]-->
+  
+        <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>
+        <script data-url_root="../" id="documentation_options" src="../_static/documentation_options.js"></script>
+        <script src="../_static/doctools.js"></script>
+        <script src="../_static/sphinx_highlight.js"></script>
+    <script src="../_static/js/theme.js"></script>
+    <link rel="index" title="Index" href="../genindex.html" />
+    <link rel="search" title="Search" href="../search.html" />
+    <link rel="next" title="keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API" href="keycloak_user_federation.html" />
+    <link rel="prev" title="keycloak_client – Allows administration of Keycloak clients via Keycloak API" href="keycloak_client.html" /> 
+</head>
+
+<body class="wy-body-for-nav"> 
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side">
+      <div class="wy-side-scroll">
+        <div class="wy-side-nav-search" >
+
+          
+          
+          <a href="../index.html" class="icon icon-home">
+            Keycloak Ansible Collection
+          </a>
+<div role="search">
+  <form id="rtd-search-form" class="wy-form" action="../search.html" method="get">
+    <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" />
+    <input type="hidden" name="check_keywords" value="yes" />
+    <input type="hidden" name="area" value="default" />
+  </form>
+</div>
+        </div><div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
+<ul class="current">
+<li class="toctree-l1"><a class="reference internal" href="../README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1 current"><a class="reference internal" href="index.html">Plugin Index</a><ul class="current">
+<li class="toctree-l2"><a class="reference internal" href="keycloak_client.html">keycloak_client – Allows administration of Keycloak clients via Keycloak API</a></li>
+<li class="toctree-l2 current"><a class="current reference internal" href="#">keycloak_role – Allows administration of Keycloak roles via Keycloak API</a><ul>
+<li class="toctree-l3"><a class="reference internal" href="#synopsis">Synopsis</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#parameters">Parameters</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#examples">Examples</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#return-values">Return Values</a><ul>
+<li class="toctree-l4"><a class="reference internal" href="#authors">Authors</a></li>
+</ul>
+</li>
+</ul>
+</li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_user_federation.html">keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API</a></li>
+</ul>
+</li>
+<li class="toctree-l1"><a class="reference internal" href="../roles/index.html">Role Index</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="../testing.html">Testing</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../developing.html">Contributor’s Guidelines</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../releasing.html">Collection Versioning Strategy</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">General</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="../CHANGELOG.html">Changelog</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">Middleware collections</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/infinispan/">Infinispan / Red Hat Data Grid</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/keycloak/">Keycloak / Red Hat Single Sign-On</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/wildfly/">Wildfly / Red Hat JBoss EAP</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/jws/">Tomcat / Red Hat JWS</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/amq/">ActiveMQ / Red Hat AMQ Broker</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/amq_streams/">Kafka / Red Hat AMQ Streams</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/redhat-csp-download/">Red Hat CSP Download</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/ansible_collections_jcliff/">JCliff</a></li>
+</ul>
+
+        </div>
+      </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap"><nav class="wy-nav-top" aria-label="Mobile navigation menu" >
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../index.html">Keycloak Ansible Collection</a>
+      </nav>
+
+      <div class="wy-nav-content">
+        <div class="rst-content">
+          <div role="navigation" aria-label="Page navigation">
+  <ul class="wy-breadcrumbs">
+      <li><a href="../index.html" class="icon icon-home" aria-label="Home"></a></li>
+          <li class="breadcrumb-item"><a href="index.html">Plugin Index</a></li>
+      <li class="breadcrumb-item active">keycloak_role – Allows administration of Keycloak roles via Keycloak API</li>
+      <li class="wy-breadcrumbs-aside">
+            <a href="../_sources/plugins/keycloak_role.rst.txt" rel="nofollow"> View page source</a>
+      </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+           <div itemprop="articleBody">
+             
+  <span class="target" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module"></span><section id="keycloak-role-allows-administration-of-keycloak-roles-via-keycloak-api">
+<h1>keycloak_role – Allows administration of Keycloak roles via Keycloak API<a class="headerlink" href="#keycloak-role-allows-administration-of-keycloak-roles-via-keycloak-api" title="Permalink to this heading"></a></h1>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>This module is part of the <a class="reference external" href="https://galaxy.ansible.com/middleware_automation/keycloak">middleware_automation.keycloak collection</a>.</p>
+<p>To install it, use: <code class="code docutils literal notranslate"><span class="pre">ansible-galaxy</span> <span class="pre">collection</span> <span class="pre">install</span> <span class="pre">middleware_automation.keycloak</span></code>.</p>
+<p>To use it in a playbook, specify: <code class="code docutils literal notranslate"><span class="pre">middleware_automation.keycloak.keycloak_role</span></code>.</p>
+</div>
+<p class="ansible-version-added">New in middleware_automation.keycloak 3.4.0</p>
+<nav class="contents local" id="contents">
+<ul class="simple">
+<li><p><a class="reference internal" href="#synopsis" id="id25">Synopsis</a></p></li>
+<li><p><a class="reference internal" href="#parameters" id="id26">Parameters</a></p></li>
+<li><p><a class="reference internal" href="#examples" id="id27">Examples</a></p></li>
+<li><p><a class="reference internal" href="#return-values" id="id28">Return Values</a></p></li>
+</ul>
+</nav>
+<section id="synopsis">
+<h2><a class="toc-backref" href="#id25" role="doc-backlink">Synopsis</a><a class="headerlink" href="#synopsis" title="Permalink to this heading"></a></h2>
+<ul class="simple">
+<li><p>This module allows you to add, remove or modify Keycloak roles via the Keycloak REST API. It requires access to the REST API via OpenID Connect; the user connecting and the client being used must have the requisite access rights. In a default Keycloak installation, admin-cli and an admin user would work, as would a separate client definition with the scope tailored to your needs and a user having the expected roles.</p></li>
+<li><p>The names of module options are snake_cased versions of the camelCase ones found in the Keycloak API and its documentation at <a class="reference external" href="https://www.keycloak.org/docs-api/8.0/rest-api/index.html">https://www.keycloak.org/docs-api/8.0/rest-api/index.html</a>.</p></li>
+<li><p>Attributes are multi-valued in the Keycloak API. All attributes are lists of individual values and will be returned that way by this module. You may pass single values for attributes when calling the module, and this will be translated into a list suitable for the API.</p></li>
+</ul>
+</section>
+<section id="parameters">
+<h2><a class="toc-backref" href="#id26" role="doc-backlink">Parameters</a><a class="headerlink" href="#parameters" title="Permalink to this heading"></a></h2>
+<table class="ansible-option-table docutils align-default" style="width: 100%">
+<thead>
+<tr class="row-odd"><th class="head"><p>Parameter</p></th>
+<th class="head"><p>Comments</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-attributes"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-attributes"><strong>attributes</strong></p>
+<a class="ansibleOptionLink" href="#parameter-attributes" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>A dict of key/value pairs to set as custom attributes for the role.</p>
+<p>Values may be single values (e.g. a string) or a list of strings.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_client_id"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-auth-client-id"><strong>auth_client_id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_client_id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>OpenID Connect <em>client_id</em> to authenticate to the API with.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id1"><span class="problematic" id="id2">:ansible-option-default:`&quot;admin-cli&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_client_secret"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-auth-client-secret"><strong>auth_client_secret</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_client_secret" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Client Secret to use in conjunction with <em>auth_client_id</em> (if required).</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_keycloak_url"></div>
+<div class="ansibleOptionAnchor" id="parameter-url"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-url"><span id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-auth-keycloak-url"></span><strong>auth_keycloak_url</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_keycloak_url" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: url</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span> / <span class="ansible-option-required">required</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>URL to the Keycloak instance.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_password"></div>
+<div class="ansibleOptionAnchor" id="parameter-password"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-password"><span id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-auth-password"></span><strong>auth_password</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_password" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: password</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Password to authenticate for API access with.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_realm"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-auth-realm"><strong>auth_realm</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_realm" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Keycloak realm name to authenticate to for API access.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_username"></div>
+<div class="ansibleOptionAnchor" id="parameter-username"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-username"><span id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-auth-username"></span><strong>auth_username</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_username" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: username</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Username to authenticate for API access with.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-client_id"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-client-id"><strong>client_id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-client_id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>If the role is a client role, the client id under which it resides.</p>
+<p>If this parameter is absent, the role is considered a realm role.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-connection_timeout"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-connection-timeout"><strong>connection_timeout</strong></p>
+<a class="ansibleOptionLink" href="#parameter-connection_timeout" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 4.5.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Controls the HTTP connections timeout period (in seconds) to Keycloak API.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id3"><span class="problematic" id="id4">:ansible-option-default:`10`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-description"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-description"><strong>description</strong></p>
+<a class="ansibleOptionLink" href="#parameter-description" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The role description.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-http_agent"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-http-agent"><strong>http_agent</strong></p>
+<a class="ansibleOptionLink" href="#parameter-http_agent" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 5.4.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Configures the HTTP User-Agent header.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id5"><span class="problematic" id="id6">:ansible-option-default:`&quot;Ansible&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-name"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-name"><strong>name</strong></p>
+<a class="ansibleOptionLink" href="#parameter-name" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span> / <span class="ansible-option-required">required</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Name of the role.</p>
+<p>This parameter is required.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-realm"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-realm"><strong>realm</strong></p>
+<a class="ansibleOptionLink" href="#parameter-realm" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Keycloak realm under which this role resides.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id7"><span class="problematic" id="id8">:ansible-option-default:`&quot;master&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-state"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-state"><strong>state</strong></p>
+<a class="ansibleOptionLink" href="#parameter-state" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>State of the role.</p>
+<p>On <code class="docutils literal notranslate"><span class="pre">present</span></code>, the role will be created if it does not yet exist, or updated with the parameters you provide.</p>
+<p>On <code class="docutils literal notranslate"><span class="pre">absent</span></code>, the role will be removed if it exists.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id9"><span class="problematic" id="id10">:ansible-option-choices-entry-default:`&quot;present&quot;`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id11"><span class="problematic" id="id12">:ansible-option-choices-entry:`&quot;absent&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-token"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-token"><strong>token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 3.0.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Authentication token for Keycloak API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-validate_certs"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-parameter-validate-certs"><strong>validate_certs</strong></p>
+<a class="ansibleOptionLink" href="#parameter-validate_certs" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Verify TLS certificates (do not disable this in production).</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id13"><span class="problematic" id="id14">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id15"><span class="problematic" id="id16">:ansible-option-choices-entry-default:`true`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+</ul>
+</div></td>
+</tr>
+</tbody>
+</table>
+</section>
+<section id="examples">
+<h2><a class="toc-backref" href="#id27" role="doc-backlink">Examples</a><a class="headerlink" href="#examples" title="Permalink to this heading"></a></h2>
+<div class="highlight-yaml+jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create a Keycloak realm role, authentication with credentials</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_role</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-new-kc-role</span>
+<span class="w">    </span><span class="nt">realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">MyCustomRealm</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">present</span>
+<span class="w">    </span><span class="nt">auth_client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin-cli</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://auth.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">USERNAME</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PASSWORD</span>
+<span class="w">  </span><span class="nt">delegate_to</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create a Keycloak realm role, authentication with token</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_role</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-new-kc-role</span>
+<span class="w">    </span><span class="nt">realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">MyCustomRealm</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">present</span>
+<span class="w">    </span><span class="nt">auth_client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin-cli</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://auth.example.com/auth</span>
+<span class="w">    </span><span class="nt">token</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">TOKEN</span>
+<span class="w">  </span><span class="nt">delegate_to</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create a Keycloak client role</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_role</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-new-kc-role</span>
+<span class="w">    </span><span class="nt">realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">MyCustomRealm</span>
+<span class="w">    </span><span class="nt">client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">MyClient</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">present</span>
+<span class="w">    </span><span class="nt">auth_client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin-cli</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://auth.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">USERNAME</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PASSWORD</span>
+<span class="w">  </span><span class="nt">delegate_to</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Delete a Keycloak role</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_role</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-role-for-deletion</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">absent</span>
+<span class="w">    </span><span class="nt">auth_client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin-cli</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://auth.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">USERNAME</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PASSWORD</span>
+<span class="w">  </span><span class="nt">delegate_to</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create a keycloak role with some custom attributes</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_role</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">auth_client_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin-cli</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://auth.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">USERNAME</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">PASSWORD</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-new-role</span>
+<span class="w">    </span><span class="nt">attributes</span><span class="p">:</span>
+<span class="w">        </span><span class="nt">attrib1</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">value1</span>
+<span class="w">        </span><span class="nt">attrib2</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">value2</span>
+<span class="w">        </span><span class="nt">attrib3</span><span class="p">:</span>
+<span class="w">            </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">with</span>
+<span class="w">            </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">numerous</span>
+<span class="w">            </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">individual</span>
+<span class="w">            </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">list</span>
+<span class="w">            </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">items</span>
+<span class="w">  </span><span class="nt">delegate_to</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">localhost</span>
+</pre></div>
+</div>
+</section>
+<section id="return-values">
+<h2><a class="toc-backref" href="#id28" role="doc-backlink">Return Values</a><a class="headerlink" href="#return-values" title="Permalink to this heading"></a></h2>
+<p>Common return values are documented <a class="reference external" href="https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values" title="(in Ansible v7)"><span class="xref std std-ref">here</span></a>, the following are the fields unique to this module:</p>
+<table class="ansible-option-table docutils align-default" style="width: 100%">
+<thead>
+<tr class="row-odd"><th class="head"><p>Key</p></th>
+<th class="head"><p>Description</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-end_state"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-return-end-state"><strong>end_state</strong></p>
+<a class="ansibleOptionLink" href="#return-end_state" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Representation of role after module execution (sample is truncated).</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> on success</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id17"><span class="problematic" id="id18">:ansible-rv-sample-value:`{&quot;attributes&quot;: {}, &quot;clientRole&quot;: true, &quot;composite&quot;: false, &quot;containerId&quot;: &quot;9f03eb61-a826-4771-a9fd-930e06d2d36a&quot;, &quot;description&quot;: &quot;My updated client test role&quot;, &quot;id&quot;: &quot;561703dd-0f38-45ff-9a5a-0c978f794547&quot;, &quot;name&quot;: &quot;myrole&quot;}`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-existing"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-return-existing"><strong>existing</strong></p>
+<a class="ansibleOptionLink" href="#return-existing" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Representation of existing role.</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> always</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id19"><span class="problematic" id="id20">:ansible-rv-sample-value:`{&quot;attributes&quot;: {}, &quot;clientRole&quot;: true, &quot;composite&quot;: false, &quot;containerId&quot;: &quot;9f03eb61-a826-4771-a9fd-930e06d2d36a&quot;, &quot;description&quot;: &quot;My client test role&quot;, &quot;id&quot;: &quot;561703dd-0f38-45ff-9a5a-0c978f794547&quot;, &quot;name&quot;: &quot;myrole&quot;}`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-msg"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-return-msg"><strong>msg</strong></p>
+<a class="ansibleOptionLink" href="#return-msg" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Message as to what action was taken.</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> always</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id21"><span class="problematic" id="id22">:ansible-rv-sample-value:`&quot;Role myrole has been updated&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-proposed"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-role-module-return-proposed"><strong>proposed</strong></p>
+<a class="ansibleOptionLink" href="#return-proposed" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Representation of proposed role.</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> always</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id23"><span class="problematic" id="id24">:ansible-rv-sample-value:`{&quot;description&quot;: &quot;My updated test description&quot;}`</span></a></p>
+</div></td>
+</tr>
+</tbody>
+</table>
+<section id="authors">
+<h3>Authors<a class="headerlink" href="#authors" title="Permalink to this heading"></a></h3>
+<ul class="simple">
+<li><p>Laurent Paumier (&#64;laurpaum)</p></li>
+</ul>
+</section>
+</section>
+</section>
+
+
+           </div>
+          </div>
+          <footer><div class="rst-footer-buttons" role="navigation" aria-label="Footer">
+        <a href="keycloak_client.html" class="btn btn-neutral float-left" title="keycloak_client – Allows administration of Keycloak clients via Keycloak API" accesskey="p" rel="prev"><span class="fa fa-arrow-circle-left" aria-hidden="true"></span> Previous</a>
+        <a href="keycloak_user_federation.html" class="btn btn-neutral float-right" title="keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API" accesskey="n" rel="next">Next <span class="fa fa-arrow-circle-right" aria-hidden="true"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <p>&#169; Copyright 2023, Red Hat, Inc..</p>
+  </div>
+
+  Built with <a href="https://www.sphinx-doc.org/">Sphinx</a> using a
+    <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a>
+    provided by <a href="https://readthedocs.org">Read the Docs</a>.
+   
+
+</footer>
+        </div>
+      </div>
+    </section>
+  </div>
+  <script>
+      jQuery(function () {
+          SphinxRtdTheme.Navigation.enable(true);
+      });
+  </script> 
+
+</body>
+</html>
\ No newline at end of file
diff --git a/main/plugins/keycloak_user_federation.html b/main/plugins/keycloak_user_federation.html
new file mode 100644
index 0000000..c658de0
--- /dev/null
+++ b/main/plugins/keycloak_user_federation.html
@@ -0,0 +1,1003 @@
+<!DOCTYPE html>
+<html class="writer-html5" lang="en" >
+<head>
+  <meta charset="utf-8" /><meta name="generator" content="Docutils 0.18.1: http://docutils.sourceforge.net/" />
+
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API &mdash; Keycloak Ansible Collection  documentation</title>
+      <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
+      <link rel="stylesheet" href="../_static/css/theme.css" type="text/css" />
+      <link rel="stylesheet" href="../_static/ansible-basic-sphinx-ext.css" type="text/css" />
+  <!--[if lt IE 9]>
+    <script src="../_static/js/html5shiv.min.js"></script>
+  <![endif]-->
+  
+        <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>
+        <script data-url_root="../" id="documentation_options" src="../_static/documentation_options.js"></script>
+        <script src="../_static/doctools.js"></script>
+        <script src="../_static/sphinx_highlight.js"></script>
+    <script src="../_static/js/theme.js"></script>
+    <link rel="index" title="Index" href="../genindex.html" />
+    <link rel="search" title="Search" href="../search.html" />
+    <link rel="next" title="Role Index" href="../roles/index.html" />
+    <link rel="prev" title="keycloak_role – Allows administration of Keycloak roles via Keycloak API" href="keycloak_role.html" /> 
+</head>
+
+<body class="wy-body-for-nav"> 
+  <div class="wy-grid-for-nav">
+    <nav data-toggle="wy-nav-shift" class="wy-nav-side">
+      <div class="wy-side-scroll">
+        <div class="wy-side-nav-search" >
+
+          
+          
+          <a href="../index.html" class="icon icon-home">
+            Keycloak Ansible Collection
+          </a>
+<div role="search">
+  <form id="rtd-search-form" class="wy-form" action="../search.html" method="get">
+    <input type="text" name="q" placeholder="Search docs" aria-label="Search docs" />
+    <input type="hidden" name="check_keywords" value="yes" />
+    <input type="hidden" name="area" value="default" />
+  </form>
+</div>
+        </div><div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
+              <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
+<ul class="current">
+<li class="toctree-l1"><a class="reference internal" href="../README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1 current"><a class="reference internal" href="index.html">Plugin Index</a><ul class="current">
+<li class="toctree-l2"><a class="reference internal" href="keycloak_client.html">keycloak_client – Allows administration of Keycloak clients via Keycloak API</a></li>
+<li class="toctree-l2"><a class="reference internal" href="keycloak_role.html">keycloak_role – Allows administration of Keycloak roles via Keycloak API</a></li>
+<li class="toctree-l2 current"><a class="current reference internal" href="#">keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API</a><ul>
+<li class="toctree-l3"><a class="reference internal" href="#synopsis">Synopsis</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#parameters">Parameters</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#examples">Examples</a></li>
+<li class="toctree-l3"><a class="reference internal" href="#return-values">Return Values</a><ul>
+<li class="toctree-l4"><a class="reference internal" href="#authors">Authors</a></li>
+</ul>
+</li>
+</ul>
+</li>
+</ul>
+</li>
+<li class="toctree-l1"><a class="reference internal" href="../roles/index.html">Role Index</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="../testing.html">Testing</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../developing.html">Contributor’s Guidelines</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../releasing.html">Collection Versioning Strategy</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">General</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="../CHANGELOG.html">Changelog</a></li>
+</ul>
+<p class="caption" role="heading"><span class="caption-text">Middleware collections</span></p>
+<ul>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/infinispan/">Infinispan / Red Hat Data Grid</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/keycloak/">Keycloak / Red Hat Single Sign-On</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/wildfly/">Wildfly / Red Hat JBoss EAP</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/jws/">Tomcat / Red Hat JWS</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/amq/">ActiveMQ / Red Hat AMQ Broker</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/amq_streams/">Kafka / Red Hat AMQ Streams</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/redhat-csp-download/">Red Hat CSP Download</a></li>
+<li class="toctree-l1"><a class="reference external" href="https://ansible-middleware.github.io/ansible_collections_jcliff/">JCliff</a></li>
+</ul>
+
+        </div>
+      </div>
+    </nav>
+
+    <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap"><nav class="wy-nav-top" aria-label="Mobile navigation menu" >
+          <i data-toggle="wy-nav-top" class="fa fa-bars"></i>
+          <a href="../index.html">Keycloak Ansible Collection</a>
+      </nav>
+
+      <div class="wy-nav-content">
+        <div class="rst-content">
+          <div role="navigation" aria-label="Page navigation">
+  <ul class="wy-breadcrumbs">
+      <li><a href="../index.html" class="icon icon-home" aria-label="Home"></a></li>
+          <li class="breadcrumb-item"><a href="index.html">Plugin Index</a></li>
+      <li class="breadcrumb-item active">keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API</li>
+      <li class="wy-breadcrumbs-aside">
+            <a href="../_sources/plugins/keycloak_user_federation.rst.txt" rel="nofollow"> View page source</a>
+      </li>
+  </ul>
+  <hr/>
+</div>
+          <div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
+           <div itemprop="articleBody">
+             
+  <span class="target" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module"></span><section id="keycloak-user-federation-allows-administration-of-keycloak-user-federations-via-keycloak-api">
+<h1>keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API<a class="headerlink" href="#keycloak-user-federation-allows-administration-of-keycloak-user-federations-via-keycloak-api" title="Permalink to this heading"></a></h1>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>This module is part of the <a class="reference external" href="https://galaxy.ansible.com/middleware_automation/keycloak">middleware_automation.keycloak collection</a>.</p>
+<p>To install it, use: <code class="code docutils literal notranslate"><span class="pre">ansible-galaxy</span> <span class="pre">collection</span> <span class="pre">install</span> <span class="pre">middleware_automation.keycloak</span></code>.</p>
+<p>To use it in a playbook, specify: <code class="code docutils literal notranslate"><span class="pre">middleware_automation.keycloak.keycloak_user_federation</span></code>.</p>
+</div>
+<p class="ansible-version-added">New in middleware_automation.keycloak 3.7.0</p>
+<nav class="contents local" id="contents">
+<ul class="simple">
+<li><p><a class="reference internal" href="#synopsis" id="id135">Synopsis</a></p></li>
+<li><p><a class="reference internal" href="#parameters" id="id136">Parameters</a></p></li>
+<li><p><a class="reference internal" href="#examples" id="id137">Examples</a></p></li>
+<li><p><a class="reference internal" href="#return-values" id="id138">Return Values</a></p></li>
+</ul>
+</nav>
+<section id="synopsis">
+<h2><a class="toc-backref" href="#id135" role="doc-backlink">Synopsis</a><a class="headerlink" href="#synopsis" title="Permalink to this heading"></a></h2>
+<ul class="simple">
+<li><p>This module allows you to add, remove or modify Keycloak user federations via the Keycloak REST API. It requires access to the REST API via OpenID Connect; the user connecting and the client being used must have the requisite access rights. In a default Keycloak installation, admin-cli and an admin user would work, as would a separate client definition with the scope tailored to your needs and a user having the expected roles.</p></li>
+<li><p>The names of module options are snake_cased versions of the camelCase ones found in the Keycloak API and its documentation at <a class="reference external" href="https://www.keycloak.org/docs-api/20.0.2/rest-api/index.html">https://www.keycloak.org/docs-api/20.0.2/rest-api/index.html</a>.</p></li>
+</ul>
+</section>
+<section id="parameters">
+<h2><a class="toc-backref" href="#id136" role="doc-backlink">Parameters</a><a class="headerlink" href="#parameters" title="Permalink to this heading"></a></h2>
+<table class="ansible-option-table docutils align-default" style="width: 100%">
+<thead>
+<tr class="row-odd"><th class="head"><p>Parameter</p></th>
+<th class="head"><p>Comments</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_client_id"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-auth-client-id"><strong>auth_client_id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_client_id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>OpenID Connect <em>client_id</em> to authenticate to the API with.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id1"><span class="problematic" id="id2">:ansible-option-default:`&quot;admin-cli&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_client_secret"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-auth-client-secret"><strong>auth_client_secret</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_client_secret" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Client Secret to use in conjunction with <em>auth_client_id</em> (if required).</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_keycloak_url"></div>
+<div class="ansibleOptionAnchor" id="parameter-url"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-url"><span id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-auth-keycloak-url"></span><strong>auth_keycloak_url</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_keycloak_url" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: url</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span> / <span class="ansible-option-required">required</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>URL to the Keycloak instance.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_password"></div>
+<div class="ansibleOptionAnchor" id="parameter-password"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-password"><span id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-auth-password"></span><strong>auth_password</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_password" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: password</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Password to authenticate for API access with.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_realm"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-auth-realm"><strong>auth_realm</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_realm" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Keycloak realm name to authenticate to for API access.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-auth_username"></div>
+<div class="ansibleOptionAnchor" id="parameter-username"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-username"><span id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-auth-username"></span><strong>auth_username</strong></p>
+<a class="ansibleOptionLink" href="#parameter-auth_username" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: username</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Username to authenticate for API access with.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config"><strong>config</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Dict specifying the configuration options for the provider; the contents differ depending on the value of <em>provider_id</em>. Examples are given below for <code class="docutils literal notranslate"><span class="pre">ldap</span></code>, <code class="docutils literal notranslate"><span class="pre">kerberos</span></code> and <code class="docutils literal notranslate"><span class="pre">sssd</span></code>. It is easiest to obtain valid config values by dumping an already-existing user federation configuration through check-mode in the <em>existing</em> field.</p>
+<p>The value <code class="docutils literal notranslate"><span class="pre">sssd</span></code> has been supported since middleware_automation.keycloak 1.0.0.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/allowKerberosAuthentication"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-allowkerberosauthentication"><strong>allowKerberosAuthentication</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/allowKerberosAuthentication" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Enable/disable HTTP authentication of users with SPNEGO/Kerberos tokens. The data about authenticated users will be provisioned from this LDAP server.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id3"><span class="problematic" id="id4">:ansible-option-choices-entry-default:`false`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id5"><span class="problematic" id="id6">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/allowPasswordAuthentication"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-allowpasswordauthentication"><strong>allowPasswordAuthentication</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/allowPasswordAuthentication" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Enable/disable possibility of username/password authentication against Kerberos database.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id7"><span class="problematic" id="id8">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id9"><span class="problematic" id="id10">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/authType"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-authtype"><strong>authType</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/authType" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Type of the Authentication method used during LDAP Bind operation. It is used in most of the requests sent to the LDAP server.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id11"><span class="problematic" id="id12">:ansible-option-choices-entry-default:`&quot;none&quot;`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id13"><span class="problematic" id="id14">:ansible-option-choices-entry:`&quot;simple&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/batchSizeForSync"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-batchsizeforsync"><strong>batchSizeForSync</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/batchSizeForSync" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Count of LDAP users to be imported from LDAP to Keycloak within a single transaction.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id15"><span class="problematic" id="id16">:ansible-option-default:`1000`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/bindCredential"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-bindcredential"><strong>bindCredential</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/bindCredential" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Password of LDAP admin.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/bindDn"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-binddn"><strong>bindDn</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/bindDn" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>DN of LDAP user which will be used by Keycloak to access LDAP server.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/cachePolicy"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-cachepolicy"><strong>cachePolicy</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/cachePolicy" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Cache Policy for this storage provider.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id17"><span class="problematic" id="id18">:ansible-option-choices-entry-default:`&quot;DEFAULT&quot;`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id19"><span class="problematic" id="id20">:ansible-option-choices-entry:`&quot;EVICT\_DAILY&quot;`</span></a></p></li>
+<li><p><a href="#id21"><span class="problematic" id="id22">:ansible-option-choices-entry:`&quot;EVICT\_WEEKLY&quot;`</span></a></p></li>
+<li><p><a href="#id23"><span class="problematic" id="id24">:ansible-option-choices-entry:`&quot;MAX\_LIFESPAN&quot;`</span></a></p></li>
+<li><p><a href="#id25"><span class="problematic" id="id26">:ansible-option-choices-entry:`&quot;NO\_CACHE&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/changedSyncPeriod"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-changedsyncperiod"><strong>changedSyncPeriod</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/changedSyncPeriod" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Period for synchronization of changed or newly created LDAP users in seconds.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id27"><span class="problematic" id="id28">:ansible-option-default:`-1`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionPooling"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectionpooling"><strong>connectionPooling</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionPooling" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Determines if Keycloak should use connection pooling for accessing LDAP server.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id29"><span class="problematic" id="id30">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id31"><span class="problematic" id="id32">:ansible-option-choices-entry-default:`true`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingAuthentication"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectionpoolingauthentication"><strong>connectionPoolingAuthentication</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionPoolingAuthentication" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>A list of space-separated authentication types of connections that may be pooled.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id33"><span class="problematic" id="id34">:ansible-option-choices-entry:`&quot;none&quot;`</span></a></p></li>
+<li><p><a href="#id35"><span class="problematic" id="id36">:ansible-option-choices-entry:`&quot;simple&quot;`</span></a></p></li>
+<li><p><a href="#id37"><span class="problematic" id="id38">:ansible-option-choices-entry:`&quot;DIGEST-MD5&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingDebug"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectionpoolingdebug"><strong>connectionPoolingDebug</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionPoolingDebug" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>A string that indicates the level of debug output to produce. Example valid values are <code class="docutils literal notranslate"><span class="pre">fine</span></code> (trace connection creation and removal) and <code class="docutils literal notranslate"><span class="pre">all</span></code> (all debugging information).</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingInitSize"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectionpoolinginitsize"><strong>connectionPoolingInitSize</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionPoolingInitSize" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The number of connections per connection identity to create when initially creating a connection for the identity.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingMaxSize"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectionpoolingmaxsize"><strong>connectionPoolingMaxSize</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionPoolingMaxSize" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The maximum number of connections per connection identity that can be maintained concurrently.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingPrefSize"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectionpoolingprefsize"><strong>connectionPoolingPrefSize</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionPoolingPrefSize" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The preferred number of connections per connection identity that should be maintained concurrently.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingProtocol"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectionpoolingprotocol"><strong>connectionPoolingProtocol</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionPoolingProtocol" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>A list of space-separated protocol types of connections that may be pooled. Valid types are <code class="docutils literal notranslate"><span class="pre">plain</span></code> and <code class="docutils literal notranslate"><span class="pre">ssl</span></code>.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionPoolingTimeout"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectionpoolingtimeout"><strong>connectionPoolingTimeout</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionPoolingTimeout" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The number of milliseconds that an idle connection may remain in the pool without being closed and removed from the pool.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionTimeout"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectiontimeout"><strong>connectionTimeout</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionTimeout" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>LDAP Connection Timeout in milliseconds.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/connectionUrl"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-connectionurl"><strong>connectionUrl</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/connectionUrl" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Connection URL to your LDAP server.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/customUserSearchFilter"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-customusersearchfilter"><strong>customUserSearchFilter</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/customUserSearchFilter" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Additional LDAP Filter for filtering searched users. Leave this empty if you don’t need additional filter.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/debug"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-debug"><strong>debug</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/debug" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Enable/disable debug logging to standard output for Krb5LoginModule.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id39"><span class="problematic" id="id40">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id41"><span class="problematic" id="id42">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/editMode"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-editmode"><strong>editMode</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/editMode" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p><code class="docutils literal notranslate"><span class="pre">READ_ONLY</span></code> is a read-only LDAP store. <code class="docutils literal notranslate"><span class="pre">WRITABLE</span></code> means data will be synced back to LDAP on demand. <code class="docutils literal notranslate"><span class="pre">UNSYNCED</span></code> means user data will be imported, but not synced back to LDAP.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id43"><span class="problematic" id="id44">:ansible-option-choices-entry:`&quot;READ\_ONLY&quot;`</span></a></p></li>
+<li><p><a href="#id45"><span class="problematic" id="id46">:ansible-option-choices-entry:`&quot;WRITABLE&quot;`</span></a></p></li>
+<li><p><a href="#id47"><span class="problematic" id="id48">:ansible-option-choices-entry:`&quot;UNSYNCED&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/enabled"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-enabled"><strong>enabled</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/enabled" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Enable/disable this user federation.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id49"><span class="problematic" id="id50">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id51"><span class="problematic" id="id52">:ansible-option-choices-entry-default:`true`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/evictionDay"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-evictionday"><strong>evictionDay</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/evictionDay" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Day of the week the entry will become invalid on.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/evictionHour"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-evictionhour"><strong>evictionHour</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/evictionHour" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Hour of day the entry will become invalid on.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/evictionMinute"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-evictionminute"><strong>evictionMinute</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/evictionMinute" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Minute of day the entry will become invalid on.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/fullSyncPeriod"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-fullsyncperiod"><strong>fullSyncPeriod</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/fullSyncPeriod" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Period for full synchronization in seconds.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id53"><span class="problematic" id="id54">:ansible-option-default:`-1`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/importEnabled"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-importenabled"><strong>importEnabled</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/importEnabled" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>If <code class="docutils literal notranslate"><span class="pre">true</span></code>, LDAP users will be imported into Keycloak DB and synced by the configured sync policies.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id55"><span class="problematic" id="id56">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id57"><span class="problematic" id="id58">:ansible-option-choices-entry-default:`true`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/kerberosRealm"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-kerberosrealm"><strong>kerberosRealm</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/kerberosRealm" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Name of kerberos realm.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/keyTab"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-keytab"><strong>keyTab</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/keyTab" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Location of Kerberos KeyTab file containing the credentials of server principal. For example <code class="docutils literal notranslate"><span class="pre">/etc/krb5.keytab</span></code>.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/maxLifespan"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-maxlifespan"><strong>maxLifespan</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/maxLifespan" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Max lifespan of cache entry in milliseconds.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/pagination"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-pagination"><strong>pagination</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/pagination" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Does the LDAP server support pagination.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id59"><span class="problematic" id="id60">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id61"><span class="problematic" id="id62">:ansible-option-choices-entry-default:`true`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/priority"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-priority"><strong>priority</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/priority" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Priority of provider when doing a user lookup. Lowest first.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id63"><span class="problematic" id="id64">:ansible-option-default:`0`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/rdnLDAPAttribute"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-rdnldapattribute"><strong>rdnLDAPAttribute</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/rdnLDAPAttribute" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Name of LDAP attribute, which is used as RDN (top attribute) of typical user DN. Usually it’s the same as Username LDAP attribute, however it is not required. For example for Active directory, it is common to use <code class="docutils literal notranslate"><span class="pre">cn</span></code> as RDN attribute when username attribute might be <code class="docutils literal notranslate"><span class="pre">sAMAccountName</span></code>.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/readTimeout"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-readtimeout"><strong>readTimeout</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/readTimeout" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>LDAP Read Timeout in milliseconds. This timeout applies for LDAP read operations.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/searchScope"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-searchscope"><strong>searchScope</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/searchScope" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>For one level, the search applies only for users in the DNs specified by User DNs. For subtree, the search applies to the whole subtree. See LDAP documentation for more details.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id65"><span class="problematic" id="id66">:ansible-option-choices-entry-default:`&quot;1&quot;`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id67"><span class="problematic" id="id68">:ansible-option-choices-entry:`&quot;2&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/serverPrincipal"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-serverprincipal"><strong>serverPrincipal</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/serverPrincipal" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Full name of server principal for HTTP service including server and domain name. For example <code class="docutils literal notranslate"><span class="pre">HTTP/host.foo.org&#64;FOO.ORG</span></code>. Use <code class="docutils literal notranslate"><span class="pre">*</span></code> to accept any service principal in the KeyTab file.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/startTls"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-starttls"><strong>startTls</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/startTls" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Encrypts the connection to LDAP using STARTTLS, which will disable connection pooling.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id69"><span class="problematic" id="id70">:ansible-option-choices-entry-default:`false`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id71"><span class="problematic" id="id72">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/syncRegistrations"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-syncregistrations"><strong>syncRegistrations</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/syncRegistrations" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Should newly created users be created within LDAP store? Priority effects which provider is chosen to sync the new user.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id73"><span class="problematic" id="id74">:ansible-option-choices-entry-default:`false`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id75"><span class="problematic" id="id76">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/trustEmail"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-trustemail"><strong>trustEmail</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/trustEmail" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>If enabled, email provided by this provider is not verified even if verification is enabled for the realm.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id77"><span class="problematic" id="id78">:ansible-option-choices-entry-default:`false`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id79"><span class="problematic" id="id80">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/updateProfileFirstLogin"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-updateprofilefirstlogin"><strong>updateProfileFirstLogin</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/updateProfileFirstLogin" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Update profile on first login.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id81"><span class="problematic" id="id82">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id83"><span class="problematic" id="id84">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/useKerberosForPasswordAuthentication"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-usekerberosforpasswordauthentication"><strong>useKerberosForPasswordAuthentication</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/useKerberosForPasswordAuthentication" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Use Kerberos login module for authenticate username/password against Kerberos server instead of authenticating against LDAP server with Directory Service API.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id85"><span class="problematic" id="id86">:ansible-option-choices-entry-default:`false`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id87"><span class="problematic" id="id88">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/usePasswordModifyExtendedOp"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-usepasswordmodifyextendedop"><strong>usePasswordModifyExtendedOp</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/usePasswordModifyExtendedOp" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Use the LDAPv3 Password Modify Extended Operation (RFC-3062). The password modify extended operation usually requires that LDAP user already has password in the LDAP server. So when this is used with ‘Sync Registrations’, it can be good to add also ‘Hardcoded LDAP attribute mapper’ with randomly generated initial password.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id89"><span class="problematic" id="id90">:ansible-option-choices-entry-default:`false`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id91"><span class="problematic" id="id92">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/usernameLDAPAttribute"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-usernameldapattribute"><strong>usernameLDAPAttribute</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/usernameLDAPAttribute" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Name of LDAP attribute, which is mapped as Keycloak username. For many LDAP server vendors it can be <code class="docutils literal notranslate"><span class="pre">uid</span></code>. For Active directory it can be <code class="docutils literal notranslate"><span class="pre">sAMAccountName</span></code> or <code class="docutils literal notranslate"><span class="pre">cn</span></code>. The attribute should be filled for all LDAP user records you want to import from LDAP to Keycloak.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/userObjectClasses"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-userobjectclasses"><strong>userObjectClasses</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/userObjectClasses" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>All values of LDAP objectClass attribute for users in LDAP divided by comma. For example <code class="docutils literal notranslate"><span class="pre">inetOrgPerson,</span> <span class="pre">organizationalPerson</span></code>. Newly created Keycloak users will be written to LDAP with all those object classes and existing LDAP user records are found just if they contain all those object classes.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/usersDn"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-usersdn"><strong>usersDn</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/usersDn" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Full DN of LDAP tree where your users are. This DN is the parent of LDAP users.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/useTruststoreSpi"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-usetruststorespi"><strong>useTruststoreSpi</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/useTruststoreSpi" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Specifies whether LDAP connection will use the truststore SPI with the truststore configured in standalone.xml/domain.xml. <code class="docutils literal notranslate"><span class="pre">Always</span></code> means that it will always use it. <code class="docutils literal notranslate"><span class="pre">Never</span></code> means that it will not use it. <code class="docutils literal notranslate"><span class="pre">Only</span> <span class="pre">for</span> <span class="pre">ldaps</span></code> means that it will use if your connection URL use ldaps. Note even if standalone.xml/domain.xml is not configured, the default Java cacerts or certificate specified by <code class="docutils literal notranslate"><span class="pre">javax.net.ssl.trustStore</span></code> property will be used.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id93"><span class="problematic" id="id94">:ansible-option-choices-entry:`&quot;always&quot;`</span></a></p></li>
+<li><p><a href="#id95"><span class="problematic" id="id96">:ansible-option-choices-entry-default:`&quot;ldapsOnly&quot;`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id97"><span class="problematic" id="id98">:ansible-option-choices-entry:`&quot;never&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/uuidLDAPAttribute"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-uuidldapattribute"><strong>uuidLDAPAttribute</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/uuidLDAPAttribute" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Name of LDAP attribute, which is used as unique object identifier (UUID) for objects in LDAP. For many LDAP server vendors, it is <code class="docutils literal notranslate"><span class="pre">entryUUID</span></code>; however some are different. For example for Active directory it should be <code class="docutils literal notranslate"><span class="pre">objectGUID</span></code>. If your LDAP server does not support the notion of UUID, you can use any other attribute that is supposed to be unique among LDAP users in tree.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/validatePasswordPolicy"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-validatepasswordpolicy"><strong>validatePasswordPolicy</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/validatePasswordPolicy" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Determines if Keycloak should validate the password with the realm password policy before updating it.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id99"><span class="problematic" id="id100">:ansible-option-choices-entry-default:`false`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id101"><span class="problematic" id="id102">:ansible-option-choices-entry:`true`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-config/vendor"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-config-vendor"><strong>vendor</strong></p>
+<a class="ansibleOptionLink" href="#parameter-config/vendor" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>LDAP vendor (provider).</p>
+<p>Use short name. For instance, write <code class="docutils literal notranslate"><span class="pre">rhds</span></code> for “Red Hat Directory Server”.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-connection_timeout"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-connection-timeout"><strong>connection_timeout</strong></p>
+<a class="ansibleOptionLink" href="#parameter-connection_timeout" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">integer</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 4.5.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Controls the HTTP connections timeout period (in seconds) to Keycloak API.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id103"><span class="problematic" id="id104">:ansible-option-default:`10`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-http_agent"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-http-agent"><strong>http_agent</strong></p>
+<a class="ansibleOptionLink" href="#parameter-http_agent" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 5.4.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Configures the HTTP User-Agent header.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id105"><span class="problematic" id="id106">:ansible-option-default:`&quot;Ansible&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-id"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-id"><strong>id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The unique ID for this user federation. If left empty, the user federation will be searched by its <em>name</em>.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-mappers"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-mappers"><strong>mappers</strong></p>
+<a class="ansibleOptionLink" href="#parameter-mappers" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">list</span> / <span class="ansible-option-elements">elements=dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>A list of dicts defining mappers associated with this Identity Provider.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-mappers/config"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-mappers-config"><strong>config</strong></p>
+<a class="ansibleOptionLink" href="#parameter-mappers/config" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Dict specifying the configuration options for the mapper; the contents differ depending on the value of <em>identityProviderMapper</em>.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-mappers/id"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-mappers-id"><strong>id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-mappers/id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Unique ID of this mapper.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-mappers/name"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-mappers-name"><strong>name</strong></p>
+<a class="ansibleOptionLink" href="#parameter-mappers/name" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Name of the mapper. If no ID is given, the mapper will be searched by name.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-mappers/parentId"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-mappers-parentid"><strong>parentId</strong></p>
+<a class="ansibleOptionLink" href="#parameter-mappers/parentId" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Unique ID for the parent of this mapper. ID of the user federation will automatically be used if left blank.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-mappers/providerId"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-mappers-providerid"><strong>providerId</strong></p>
+<a class="ansibleOptionLink" href="#parameter-mappers/providerId" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The mapper type for this mapper (for instance <code class="docutils literal notranslate"><span class="pre">user-attribute-ldap-mapper</span></code>).</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-mappers/providerType"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-mappers-providertype"><strong>providerType</strong></p>
+<a class="ansibleOptionLink" href="#parameter-mappers/providerType" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Component type for this mapper.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id107"><span class="problematic" id="id108">:ansible-option-default:`&quot;org.keycloak.storage.ldap.mappers.LDAPStorageMapper&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-name"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-name"><strong>name</strong></p>
+<a class="ansibleOptionLink" href="#parameter-name" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Display name of provider when linked in admin console.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-parent_id"></div>
+<div class="ansibleOptionAnchor" id="parameter-parentId"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-parentid"><span id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-parent-id"></span><strong>parent_id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-parent_id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: parentId</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Unique ID for the parent of this user federation. Realm ID will be automatically used if left blank.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-provider_id"></div>
+<div class="ansibleOptionAnchor" id="parameter-providerId"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-providerid"><span id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-provider-id"></span><strong>provider_id</strong></p>
+<a class="ansibleOptionLink" href="#parameter-provider_id" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: providerId</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Provider for this user federation.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id109"><span class="problematic" id="id110">:ansible-option-choices-entry:`&quot;ldap&quot;`</span></a></p></li>
+<li><p><a href="#id111"><span class="problematic" id="id112">:ansible-option-choices-entry:`&quot;kerberos&quot;`</span></a></p></li>
+<li><p><a href="#id113"><span class="problematic" id="id114">:ansible-option-choices-entry:`&quot;sssd&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-provider_type"></div>
+<div class="ansibleOptionAnchor" id="parameter-providerType"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-providertype"><span id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-provider-type"></span><strong>provider_type</strong></p>
+<a class="ansibleOptionLink" href="#parameter-provider_type" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: providerType</span></p>
+<p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Component type for user federation (only supported value is <code class="docutils literal notranslate"><span class="pre">org.keycloak.storage.UserStorageProvider</span></code>).</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id115"><span class="problematic" id="id116">:ansible-option-default:`&quot;org.keycloak.storage.UserStorageProvider&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-realm"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-realm"><strong>realm</strong></p>
+<a class="ansibleOptionLink" href="#parameter-realm" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>The Keycloak realm under which this user federation resides.</p>
+<p class="ansible-option-line"><span class="ansible-option-default-bold">Default:</span> <a href="#id117"><span class="problematic" id="id118">:ansible-option-default:`&quot;master&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-state"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-state"><strong>state</strong></p>
+<a class="ansibleOptionLink" href="#parameter-state" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>State of the user federation.</p>
+<p>On <code class="docutils literal notranslate"><span class="pre">present</span></code>, the user federation will be created if it does not yet exist, or updated with the parameters you provide.</p>
+<p>On <code class="docutils literal notranslate"><span class="pre">absent</span></code>, the user federation will be removed if it exists.</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id119"><span class="problematic" id="id120">:ansible-option-choices-entry-default:`&quot;present&quot;`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><a href="#id121"><span class="problematic" id="id122">:ansible-option-choices-entry:`&quot;absent&quot;`</span></a></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-token"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-token"><strong>token</strong></p>
+<a class="ansibleOptionLink" href="#parameter-token" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+<p><span class="ansible-option-versionadded">added in middleware_automation.keycloak 3.0.0</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Authentication token for Keycloak API.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-validate_certs"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-parameter-validate-certs"><strong>validate_certs</strong></p>
+<a class="ansibleOptionLink" href="#parameter-validate_certs" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Verify TLS certificates (do not disable this in production).</p>
+<p class="ansible-option-line"><span class="ansible-option-choices">Choices:</span></p>
+<ul class="simple">
+<li><p><a href="#id123"><span class="problematic" id="id124">:ansible-option-choices-entry:`false`</span></a></p></li>
+<li><p><a href="#id125"><span class="problematic" id="id126">:ansible-option-choices-entry-default:`true`</span></a> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+</ul>
+</div></td>
+</tr>
+</tbody>
+</table>
+</section>
+<section id="examples">
+<h2><a class="toc-backref" href="#id137" role="doc-backlink">Examples</a><a class="headerlink" href="#examples" title="Permalink to this heading"></a></h2>
+<div class="highlight-yaml+jinja notranslate"><div class="highlight"><pre><span></span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create LDAP user federation</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_user_federation</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://keycloak.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">password</span>
+<span class="w">    </span><span class="nt">realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-realm</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-ldap</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">present</span>
+<span class="w">    </span><span class="nt">provider_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ldap</span>
+<span class="w">    </span><span class="nt">provider_type</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">org.keycloak.storage.UserStorageProvider</span>
+<span class="w">    </span><span class="nt">config</span><span class="p">:</span>
+<span class="w">      </span><span class="nt">priority</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">0</span>
+<span class="w">      </span><span class="nt">enabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">cachePolicy</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">DEFAULT</span>
+<span class="w">      </span><span class="nt">batchSizeForSync</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1000</span>
+<span class="w">      </span><span class="nt">editMode</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">READ_ONLY</span>
+<span class="w">      </span><span class="nt">importEnabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">syncRegistrations</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">      </span><span class="nt">vendor</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">other</span>
+<span class="w">      </span><span class="nt">usernameLDAPAttribute</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">uid</span>
+<span class="w">      </span><span class="nt">rdnLDAPAttribute</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">uid</span>
+<span class="w">      </span><span class="nt">uuidLDAPAttribute</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">entryUUID</span>
+<span class="w">      </span><span class="nt">userObjectClasses</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">inetOrgPerson, organizationalPerson</span>
+<span class="w">      </span><span class="nt">connectionUrl</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ldaps://ldap.example.com:636</span>
+<span class="w">      </span><span class="nt">usersDn</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ou=Users,dc=example,dc=com</span>
+<span class="w">      </span><span class="nt">authType</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">simple</span>
+<span class="w">      </span><span class="nt">bindDn</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">cn=directory reader</span>
+<span class="w">      </span><span class="nt">bindCredential</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">password</span>
+<span class="w">      </span><span class="nt">searchScope</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1</span>
+<span class="w">      </span><span class="nt">validatePasswordPolicy</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">      </span><span class="nt">trustEmail</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">      </span><span class="nt">useTruststoreSpi</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ldapsOnly</span>
+<span class="w">      </span><span class="nt">connectionPooling</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">pagination</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">allowKerberosAuthentication</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">      </span><span class="nt">debug</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">      </span><span class="nt">useKerberosForPasswordAuthentication</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">    </span><span class="nt">mappers</span><span class="p">:</span>
+<span class="w">      </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="s">&quot;full</span><span class="nv"> </span><span class="s">name&quot;</span>
+<span class="w">        </span><span class="nt">providerId</span><span class="p">:</span><span class="w"> </span><span class="s">&quot;full-name-ldap-mapper&quot;</span>
+<span class="w">        </span><span class="nt">providerType</span><span class="p">:</span><span class="w"> </span><span class="s">&quot;org.keycloak.storage.ldap.mappers.LDAPStorageMapper&quot;</span>
+<span class="w">        </span><span class="nt">config</span><span class="p">:</span>
+<span class="w">          </span><span class="nt">ldap.full.name.attribute</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">cn</span>
+<span class="w">          </span><span class="nt">read.only</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">          </span><span class="nt">write.only</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create Kerberos user federation</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_user_federation</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://keycloak.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">password</span>
+<span class="w">    </span><span class="nt">realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-realm</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-kerberos</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">present</span>
+<span class="w">    </span><span class="nt">provider_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">kerberos</span>
+<span class="w">    </span><span class="nt">provider_type</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">org.keycloak.storage.UserStorageProvider</span>
+<span class="w">    </span><span class="nt">config</span><span class="p">:</span>
+<span class="w">      </span><span class="nt">priority</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">0</span>
+<span class="w">      </span><span class="nt">enabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">cachePolicy</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">DEFAULT</span>
+<span class="w">      </span><span class="nt">kerberosRealm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">EXAMPLE.COM</span>
+<span class="w">      </span><span class="nt">serverPrincipal</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">HTTP/host.example.com@EXAMPLE.COM</span>
+<span class="w">      </span><span class="nt">keyTab</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">keytab</span>
+<span class="w">      </span><span class="nt">allowPasswordAuthentication</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+<span class="w">      </span><span class="nt">updateProfileFirstLogin</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span>
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Create sssd user federation</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_user_federation</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://keycloak.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">password</span>
+<span class="w">    </span><span class="nt">realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-realm</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-sssd</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">present</span>
+<span class="w">    </span><span class="nt">provider_id</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">sssd</span>
+<span class="w">    </span><span class="nt">provider_type</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">org.keycloak.storage.UserStorageProvider</span>
+<span class="w">    </span><span class="nt">config</span><span class="p">:</span>
+<span class="w">      </span><span class="nt">priority</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">0</span>
+<span class="w">      </span><span class="nt">enabled</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span>
+<span class="w">      </span><span class="nt">cachePolicy</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">DEFAULT</span>
+
+<span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Delete user federation</span>
+<span class="w">  </span><span class="nt">middleware_automation.keycloak.keycloak_user_federation</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">auth_keycloak_url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://keycloak.example.com/auth</span>
+<span class="w">    </span><span class="nt">auth_realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">master</span>
+<span class="w">    </span><span class="nt">auth_username</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">admin</span>
+<span class="w">    </span><span class="nt">auth_password</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">password</span>
+<span class="w">    </span><span class="nt">realm</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-realm</span>
+<span class="w">    </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-federation</span>
+<span class="w">    </span><span class="nt">state</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">absent</span>
+</pre></div>
+</div>
+</section>
+<section id="return-values">
+<h2><a class="toc-backref" href="#id138" role="doc-backlink">Return Values</a><a class="headerlink" href="#return-values" title="Permalink to this heading"></a></h2>
+<p>Common return values are documented <a class="reference external" href="https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values" title="(in Ansible v7)"><span class="xref std std-ref">here</span></a>, the following are the fields unique to this module:</p>
+<table class="ansible-option-table docutils align-default" style="width: 100%">
+<thead>
+<tr class="row-odd"><th class="head"><p>Key</p></th>
+<th class="head"><p>Description</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-end_state"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-return-end-state"><strong>end_state</strong></p>
+<a class="ansibleOptionLink" href="#return-end_state" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Representation of user federation after module execution.</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> on success</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id127"><span class="problematic" id="id128">:ansible-rv-sample-value:`{&quot;config&quot;: {&quot;allowPasswordAuthentication&quot;: &quot;false&quot;, &quot;cachePolicy&quot;: &quot;DEFAULT&quot;, &quot;enabled&quot;: &quot;true&quot;, &quot;kerberosRealm&quot;: &quot;EXAMPLE.COM&quot;, &quot;keyTab&quot;: &quot;/etc/krb5.keytab&quot;, &quot;priority&quot;: &quot;0&quot;, &quot;serverPrincipal&quot;: &quot;HTTP/host.example.com&#64;EXAMPLE.COM&quot;, &quot;updateProfileFirstLogin&quot;: &quot;false&quot;}, &quot;id&quot;: &quot;cf52ae4f-4471-4435-a0cf-bb620cadc122&quot;, &quot;mappers&quot;: [], &quot;name&quot;: &quot;kerberos&quot;, &quot;parentId&quot;: &quot;myrealm&quot;, &quot;providerId&quot;: &quot;kerberos&quot;, &quot;providerType&quot;: &quot;org.keycloak.storage.UserStorageProvider&quot;}`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-existing"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-return-existing"><strong>existing</strong></p>
+<a class="ansibleOptionLink" href="#return-existing" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Representation of existing user federation.</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> always</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id129"><span class="problematic" id="id130">:ansible-rv-sample-value:`{&quot;config&quot;: {&quot;allowKerberosAuthentication&quot;: &quot;false&quot;, &quot;authType&quot;: &quot;simple&quot;, &quot;batchSizeForSync&quot;: &quot;1000&quot;, &quot;bindCredential&quot;: &quot;\*\*\*\*\*\*\*\*\*\*&quot;, &quot;bindDn&quot;: &quot;cn=directory reader&quot;, &quot;cachePolicy&quot;: &quot;DEFAULT&quot;, &quot;changedSyncPeriod&quot;: &quot;-1&quot;, &quot;connectionPooling&quot;: &quot;true&quot;, &quot;connectionUrl&quot;: &quot;ldaps://ldap.example.com:636&quot;, &quot;debug&quot;: &quot;false&quot;, &quot;editMode&quot;: &quot;READ\_ONLY&quot;, &quot;enabled&quot;: &quot;true&quot;, &quot;fullSyncPeriod&quot;: &quot;-1&quot;, &quot;importEnabled&quot;: &quot;true&quot;, &quot;pagination&quot;: &quot;true&quot;, &quot;priority&quot;: &quot;0&quot;, &quot;rdnLDAPAttribute&quot;: &quot;uid&quot;, &quot;searchScope&quot;: &quot;1&quot;, &quot;syncRegistrations&quot;: &quot;false&quot;, &quot;trustEmail&quot;: &quot;false&quot;, &quot;useKerberosForPasswordAuthentication&quot;: &quot;false&quot;, &quot;useTruststoreSpi&quot;: &quot;ldapsOnly&quot;, &quot;userObjectClasses&quot;: &quot;inetOrgPerson, organizationalPerson&quot;, &quot;usernameLDAPAttribute&quot;: &quot;uid&quot;, &quot;usersDn&quot;: &quot;ou=Users,dc=example,dc=com&quot;, &quot;uuidLDAPAttribute&quot;: &quot;entryUUID&quot;, &quot;validatePasswordPolicy&quot;: &quot;false&quot;, &quot;vendor&quot;: &quot;other&quot;}, &quot;id&quot;: &quot;01122837-9047-4ae4-8ca0-6e2e891a765f&quot;, &quot;mappers&quot;: [{&quot;config&quot;: {&quot;always.read.value.from.ldap&quot;: &quot;false&quot;, &quot;is.mandatory.in.ldap&quot;: &quot;false&quot;, &quot;ldap.attribute&quot;: &quot;mail&quot;, &quot;read.only&quot;: &quot;true&quot;, &quot;user.model.attribute&quot;: &quot;email&quot;}, &quot;id&quot;: &quot;17d60ce2-2d44-4c2c-8b1f-1fba601b9a9f&quot;, &quot;name&quot;: &quot;email&quot;, &quot;parentId&quot;: &quot;01122837-9047-4ae4-8ca0-6e2e891a765f&quot;, &quot;providerId&quot;: &quot;user-attribute-ldap-mapper&quot;, &quot;providerType&quot;: &quot;org.keycloak.storage.ldap.mappers.LDAPStorageMapper&quot;}], &quot;name&quot;: &quot;myfed&quot;, &quot;parentId&quot;: &quot;myrealm&quot;, &quot;providerId&quot;: &quot;ldap&quot;, &quot;providerType&quot;: &quot;org.keycloak.storage.UserStorageProvider&quot;}`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-msg"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-return-msg"><strong>msg</strong></p>
+<a class="ansibleOptionLink" href="#return-msg" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Message as to what action was taken.</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> always</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id131"><span class="problematic" id="id132">:ansible-rv-sample-value:`&quot;No changes required to user federation 164bb483-c613-482e-80fe-7f1431308799.&quot;`</span></a></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="return-proposed"></div><p class="ansible-option-title" id="ansible-collections-middleware-automation-keycloak-keycloak-user-federation-module-return-proposed"><strong>proposed</strong></p>
+<a class="ansibleOptionLink" href="#return-proposed" title="Permalink to this return value"></a><p class="ansible-option-type-line"><span class="ansible-option-type">dictionary</span></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Representation of proposed user federation.</p>
+<p class="ansible-option-line"><span class="ansible-option-returned-bold">Returned:</span> always</p>
+<p class="ansible-option-line ansible-option-sample"><span class="ansible-option-sample-bold">Sample:</span> <a href="#id133"><span class="problematic" id="id134">:ansible-rv-sample-value:`{&quot;config&quot;: {&quot;allowKerberosAuthentication&quot;: &quot;false&quot;, &quot;authType&quot;: &quot;simple&quot;, &quot;batchSizeForSync&quot;: &quot;1000&quot;, &quot;bindCredential&quot;: &quot;\*\*\*\*\*\*\*\*\*\*&quot;, &quot;bindDn&quot;: &quot;cn=directory reader&quot;, &quot;cachePolicy&quot;: &quot;DEFAULT&quot;, &quot;connectionPooling&quot;: &quot;true&quot;, &quot;connectionUrl&quot;: &quot;ldaps://ldap.example.com:636&quot;, &quot;debug&quot;: &quot;false&quot;, &quot;editMode&quot;: &quot;READ\_ONLY&quot;, &quot;enabled&quot;: &quot;true&quot;, &quot;importEnabled&quot;: &quot;true&quot;, &quot;pagination&quot;: &quot;true&quot;, &quot;priority&quot;: &quot;0&quot;, &quot;rdnLDAPAttribute&quot;: &quot;uid&quot;, &quot;searchScope&quot;: &quot;1&quot;, &quot;syncRegistrations&quot;: &quot;false&quot;, &quot;trustEmail&quot;: &quot;false&quot;, &quot;useKerberosForPasswordAuthentication&quot;: &quot;false&quot;, &quot;useTruststoreSpi&quot;: &quot;ldapsOnly&quot;, &quot;userObjectClasses&quot;: &quot;inetOrgPerson, organizationalPerson&quot;, &quot;usernameLDAPAttribute&quot;: &quot;uid&quot;, &quot;usersDn&quot;: &quot;ou=Users,dc=example,dc=com&quot;, &quot;uuidLDAPAttribute&quot;: &quot;entryUUID&quot;, &quot;validatePasswordPolicy&quot;: &quot;false&quot;, &quot;vendor&quot;: &quot;other&quot;}, &quot;name&quot;: &quot;ldap&quot;, &quot;providerId&quot;: &quot;ldap&quot;, &quot;providerType&quot;: &quot;org.keycloak.storage.UserStorageProvider&quot;}`</span></a></p>
+</div></td>
+</tr>
+</tbody>
+</table>
+<section id="authors">
+<h3>Authors<a class="headerlink" href="#authors" title="Permalink to this heading"></a></h3>
+<ul class="simple">
+<li><p>Laurent Paumier (&#64;laurpaum)</p></li>
+</ul>
+</section>
+</section>
+</section>
+
+
+           </div>
+          </div>
+          <footer><div class="rst-footer-buttons" role="navigation" aria-label="Footer">
+        <a href="keycloak_role.html" class="btn btn-neutral float-left" title="keycloak_role – Allows administration of Keycloak roles via Keycloak API" accesskey="p" rel="prev"><span class="fa fa-arrow-circle-left" aria-hidden="true"></span> Previous</a>
+        <a href="../roles/index.html" class="btn btn-neutral float-right" title="Role Index" accesskey="n" rel="next">Next <span class="fa fa-arrow-circle-right" aria-hidden="true"></span></a>
+    </div>
+
+  <hr/>
+
+  <div role="contentinfo">
+    <p>&#169; Copyright 2023, Red Hat, Inc..</p>
+  </div>
+
+  Built with <a href="https://www.sphinx-doc.org/">Sphinx</a> using a
+    <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a>
+    provided by <a href="https://readthedocs.org">Read the Docs</a>.
+   
+
+</footer>
+        </div>
+      </div>
+    </section>
+  </div>
+  <script>
+      jQuery(function () {
+          SphinxRtdTheme.Navigation.enable(true);
+      });
+  </script> 
+
+</body>
+</html>
\ No newline at end of file
diff --git a/main/releasing.html b/main/releasing.html
index cf79bea..ad2e288 100644
--- a/main/releasing.html
+++ b/main/releasing.html
@@ -45,6 +45,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul>
 <li class="toctree-l1"><a class="reference internal" href="README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1"><a class="reference internal" href="roles/index.html">Role Index</a></li>
 </ul>
 <p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
diff --git a/main/roles/index.html b/main/roles/index.html
index ad759a7..2388ace 100644
--- a/main/roles/index.html
+++ b/main/roles/index.html
@@ -20,7 +20,7 @@
     <link rel="index" title="Index" href="../genindex.html" />
     <link rel="search" title="Search" href="../search.html" />
     <link rel="next" title="keycloak" href="keycloak.html" />
-    <link rel="prev" title="Ansible Collection - middleware_automation.keycloak" href="../README.html" /> 
+    <link rel="prev" title="keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API" href="../plugins/keycloak_user_federation.html" /> 
 </head>
 
 <body class="wy-body-for-nav"> 
@@ -45,6 +45,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul class="current">
 <li class="toctree-l1"><a class="reference internal" href="../README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1 current"><a class="current reference internal" href="#">Role Index</a><ul>
 <li class="toctree-l2"><a class="reference internal" href="keycloak.html">keycloak</a></li>
 <li class="toctree-l2"><a class="reference internal" href="keycloak_quarkus.html">keycloak_quarkus</a></li>
@@ -138,7 +139,7 @@
            </div>
           </div>
           <footer><div class="rst-footer-buttons" role="navigation" aria-label="Footer">
-        <a href="../README.html" class="btn btn-neutral float-left" title="Ansible Collection - middleware_automation.keycloak" accesskey="p" rel="prev"><span class="fa fa-arrow-circle-left" aria-hidden="true"></span> Previous</a>
+        <a href="../plugins/keycloak_user_federation.html" class="btn btn-neutral float-left" title="keycloak_user_federation – Allows administration of Keycloak user federations via Keycloak API" accesskey="p" rel="prev"><span class="fa fa-arrow-circle-left" aria-hidden="true"></span> Previous</a>
         <a href="keycloak.html" class="btn btn-neutral float-right" title="keycloak" accesskey="n" rel="next">Next <span class="fa fa-arrow-circle-right" aria-hidden="true"></span></a>
     </div>
 
diff --git a/main/roles/keycloak.html b/main/roles/keycloak.html
index eac2920..65723fc 100644
--- a/main/roles/keycloak.html
+++ b/main/roles/keycloak.html
@@ -45,6 +45,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul class="current">
 <li class="toctree-l1"><a class="reference internal" href="../README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1 current"><a class="reference internal" href="index.html">Role Index</a><ul class="current">
 <li class="toctree-l2 current"><a class="current reference internal" href="#">keycloak</a><ul>
 <li class="toctree-l3"><a class="reference internal" href="#requirements">Requirements</a></li>
diff --git a/main/roles/keycloak_quarkus.html b/main/roles/keycloak_quarkus.html
index e66c75c..36cf046 100644
--- a/main/roles/keycloak_quarkus.html
+++ b/main/roles/keycloak_quarkus.html
@@ -45,6 +45,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul class="current">
 <li class="toctree-l1"><a class="reference internal" href="../README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1 current"><a class="reference internal" href="index.html">Role Index</a><ul class="current">
 <li class="toctree-l2"><a class="reference internal" href="keycloak.html">keycloak</a></li>
 <li class="toctree-l2 current"><a class="current reference internal" href="#">keycloak_quarkus</a><ul>
diff --git a/main/roles/keycloak_realm.html b/main/roles/keycloak_realm.html
index 367399d..7ad50fe 100644
--- a/main/roles/keycloak_realm.html
+++ b/main/roles/keycloak_realm.html
@@ -45,6 +45,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul class="current">
 <li class="toctree-l1"><a class="reference internal" href="../README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="../plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1 current"><a class="reference internal" href="index.html">Role Index</a><ul class="current">
 <li class="toctree-l2"><a class="reference internal" href="keycloak.html">keycloak</a></li>
 <li class="toctree-l2"><a class="reference internal" href="keycloak_quarkus.html">keycloak_quarkus</a></li>
diff --git a/main/search.html b/main/search.html
index 31424e4..2b0dd6a 100644
--- a/main/search.html
+++ b/main/search.html
@@ -45,6 +45,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul>
 <li class="toctree-l1"><a class="reference internal" href="README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1"><a class="reference internal" href="roles/index.html">Role Index</a></li>
 </ul>
 <p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>
diff --git a/main/searchindex.js b/main/searchindex.js
index 2384452..33d966e 100644
--- a/main/searchindex.js
+++ b/main/searchindex.js
@@ -1 +1 @@
-Search.setIndex({"docnames": ["CHANGELOG", "README", "developing", "index", "releasing", "roles/index", "roles/keycloak", "roles/keycloak_quarkus", "roles/keycloak_realm", "testing"], "filenames": ["CHANGELOG.rst", "README.md", "developing.md", "index.rst", "releasing.md", "roles/index.rst", "roles/keycloak.md", "roles/keycloak_quarkus.md", "roles/keycloak_realm.md", "testing.md"], "titles": ["middleware_automation.keycloak Release Notes", "Ansible Collection - middleware_automation.keycloak", "Contributor\u2019s Guidelines", "Welcome to Keycloak Collection documentation", "Collection Versioning Strategy", "Role Index", "keycloak", "keycloak_quarkus", "keycloak_realm", "Testing"], "terms": {"thi": [0, 1, 4, 6], "changelog": [0, 3], "describ": [0, 1], "after": [0, 4, 9], "version": [0, 3, 5, 7], "provid": [0, 1, 8, 9], "config": [0, 8], "multipl": [0, 1], "modclust": [0, 6], "proxi": [0, 6, 7], "60": 0, "quarku": [0, 1, 7], "fix": [0, 3], "cach": [0, 1, 6, 7, 9], "file": [0, 1, 2, 6, 7], "path": [0, 1, 2, 6, 7, 8], "conf": [0, 7], "j2": 0, "templat": [0, 6], "53": 0, "updat": [0, 1, 4], "18": [0, 6], "sso": [0, 1, 6], "46": 0, "variabl": [0, 1, 2, 5], "keycloak_no_log": 0, "control": [0, 6], "ansibl": [0, 2, 3, 4, 6, 9], "no_log": 0, "paramet": [0, 4], "debug": 0, "purpos": 0, "47": 0, "overrid": [0, 2], "servic": [0, 1, 6, 7, 8], "start": [0, 2, 7], "retri": 0, "delai": 0, "51": 0, "keycloak_quarku": [0, 1, 3, 5], "enabl": [0, 6, 7], "develop": [0, 4, 7], "mode": [0, 7], "45": 0, "renam": 0, "from": [0, 2, 3, 6], "infinispan_": 0, "prefix": 0, "keycloak_infinispan_": 0, "42": 0, "var": [0, 2, 6, 8], "log": [0, 7], "symlink": 0, "directori": [0, 1, 2, 6, 7, 9], "44": 0, "us": [0, 1, 2, 6, 7, 8], "absolut": 0, "certif": [0, 6, 7], "39": 0, "becom": 0, "task": [0, 1, 2, 6, 8], "otherwis": 0, "fail": 0, "38": 0, "add": 0, "select": [0, 6], "java": [0, 6, 7], "systemd": [0, 9], "unit": 0, "34": 0, "set": [0, 1, 6, 7, 8], "logfil": 0, "correctli": 0, "under": [0, 2], "home": [0, 7], "35": 0, "option": [0, 6, 7, 8], "32": 0, "new": [0, 3], "role": [0, 2, 3, 9], "instal": [0, 3, 6, 7, 9], "17": [0, 1, 7], "29": 0, "keycloak_config_override_templ": [0, 6], "pass": [0, 6, 7], "custom": [0, 6], "xml": [0, 6], "30": [0, 6], "make": [0, 1, 4, 6, 8], "sure": 0, "jvm": [0, 6, 7], "31": 0, "keycloak_admin_password": [0, 1, 6, 8], "default": [0, 2, 4, 5], "assert": 0, "wa": [0, 3], "26": 0, "simplifi": 0, "depend": [0, 1, 5, 9], "logic": 0, "reduc": 0, "plai": [0, 2], "execut": [0, 1], "time": [0, 4], "19": 0, "keycloak_frontend_url": [0, 6], "accord": 0, "other": [0, 2, 9], "25": 0, "enhanc": 0, "bug": [0, 3], "document": 0, "appli": [0, 6], "latest": [0, 6], "cumul": [0, 6], "patch": [0, 4, 5], "rh": [0, 1, 6], "automat": [0, 6, 9], "when": [0, 1, 2, 4, 6], "keycloak_rhsso_apply_patch": [0, 6], "i": [0, 1, 3, 6, 7, 8, 9], "true": [0, 1, 6, 7, 8], "cluster": [0, 1, 6, 7, 9], "now": 0, "perform": [0, 6, 7], "databas": [0, 6, 7], "initi": 0, "first": [0, 4], "node": [0, 6], "avoid": [0, 2], "lock": 0, "issu": [0, 1], "stabl": 0, "collect": [0, 6, 8, 9], "red": [1, 3, 6, 8], "hat": [1, 3, 6, 8], "singl": [1, 3, 6, 8], "sign": [1, 3, 6, 8], "On": [1, 3, 6, 8], "ha": 1, "been": 1, "test": [1, 3, 4], "against": 1, "follow": [1, 2, 4, 6, 8, 9], "2": [1, 2, 3, 4, 6, 7, 8, 9], "9": [1, 6, 7, 9], "10": 1, "plugin": [1, 3], "modul": [1, 4], "within": [1, 3], "mai": [1, 4], "onli": [1, 4, 6], "specif": [1, 2, 7], "A": [1, 3, 9], "contain": [1, 2, 4, 8], "metadata": [1, 4], "identifi": 1, "befor": 1, "you": 1, "need": [1, 2, 4], "cli": [1, 6, 7, 8], "can": 1, "also": 1, "requir": [1, 2, 4, 5, 7, 8, 9], "yml": [1, 2, 9], "via": [1, 6], "r": [1, 6, 9], "format": [1, 4, 5, 7], "name": [1, 2, 4, 6, 7, 8], "The": [1, 4, 6, 7, 8, 9], "python": [1, 9], "packag": [1, 6, 7], "present": 1, "host": [1, 6, 8], "netaddr": [1, 6], "pip": [1, 6, 9], "txt": [1, 6, 9], "keycloak_realm": [1, 3, 5], "realm": [1, 6, 7, 8], "user": [1, 2, 4, 6, 7, 8], "feder": [1, 8], "": [1, 3, 7], "client": [1, 6, 7, 8], "an": [1, 3, 6, 7, 8], "variant": 1, "0": [1, 3, 4, 6, 7, 8], "upstream": 1, "base": [1, 6], "defin": [1, 2], "rhsso": 1, "both": 1, "differ": 1, "section": [1, 4], "For": [1, 8], "full": 1, "detail": 1, "refer": [1, 8], "readm": [1, 4], "zip": [1, 6, 7], "archiv": [1, 6, 7], "avail": [1, 4, 8, 9], "repositori": [1, 9], "root": [1, 6, 7], "keycloak_offline_instal": [1, 6], "allow": [1, 4, 8], "skip": 1, "download": [1, 3, 6, 7], "match": 1, "so": 1, "ar": [1, 2, 4, 6, 8, 9], "provis": 1, "And": 1, "keycloak_rhsso_en": [1, 6], "x": 1, "y": 1, "z": 1, "server": [1, 6, 7], "dist": 1, "fals": [1, 6, 7, 8], "sso_download_url": 1, "http": [1, 4, 6, 7, 8, 9], "intern": [1, 2], "privat": [1, 7], "net": 1, "keycloak_download_url": [1, 6], "ansible_host": 1, "e": [1, 2, 7], "rhn": [1, 6], "cred": 1, "changem": [1, 8], "password": [1, 6, 7, 8], "administr": [1, 6, 7, 8], "consol": [1, 6, 7, 8], "account": [1, 6, 7, 8], "inventori": [1, 4, 9], "below": [1, 4], "deploi": 1, "localhost": [1, 6, 7, 8, 9], "ansible_connect": [1, 9], "creat": [1, 4, 8, 9], "v1": [1, 3], "beta": 1, "releas": [1, 3, 6, 7, 9], "technic": 1, "preview": 1, "If": [1, 7], "have": [1, 2, 6], "ani": [1, 3], "question": 1, "relat": 1, "pleas": [1, 4], "don": [1, 2], "t": [1, 2, 7], "hesit": 1, "contact": 1, "u": 1, "middlewar": [1, 9], "core": [1, 9], "redhat": 1, "com": [1, 6, 7, 9], "open": [1, 6], "github": [1, 4, 6, 7, 9], "apach": [1, 6, 7, 8], "v2": 1, "later": 1, "see": [1, 4], "view": 1, "text": 1, "all": [2, 4, 9], "yaml": 2, "extens": [2, 4], "space": 2, "around": 2, "jinja": 2, "over": 2, "should": [2, 4, 6, 7, 8], "lowercas": 2, "keep": 2, "self": 2, "includ": [2, 4, 6, 8, 9], "possibl": 2, "do": 2, "noth": 2, "more": [2, 7], "than": 2, "list": [2, 6, 7, 8], "except": 2, "where": 2, "pre_task": 2, "post_task": 2, "separ": [2, 7], "valid": 2, "ie": 2, "underscor": 2, "g": 2, "my_rol": 2, "my_playbook": 2, "dash": 2, "my": 2, "trail": 2, "slash": 2, "my_path": 2, "foo": 2, "concaten": 2, "same": 2, "convent": 2, "bar": 2, "indent": 2, "each": [2, 4], "v": 2, "interpol": 2, "chang": [2, 3, 9], "overridden": 2, "go": 2, "those": 2, "would": [2, 4], "like": 2, "argument": 2, "meta": 2, "argument_spec": 2, "playbook": [2, 3, 4, 5], "focus": 2, "compat": [2, 3], "autom": [2, 3], "platform": 2, "middleware_autom": [3, 6, 8, 9], "usag": 3, "configur": [3, 6, 7, 8], "support": [3, 4, 8], "licens": [3, 5], "index": 3, "continu": 3, "integr": 3, "contributor": 3, "guidelin": 3, "strategi": 3, "content": 3, "ad": 3, "exist": [3, 6, 7], "featur": 3, "backward": 3, "secur": 3, "break": [3, 9], "remov": [3, 6, 7], "typograph": 3, "error": 3, "modifi": 3, "devel": 3, "1": [3, 4, 6, 7], "7": [3, 6], "6": [3, 6], "5": [3, 6, 9], "4": [3, 6, 7], "3": [3, 6, 9], "infinispan": [3, 6, 7, 9], "data": [3, 7], "grid": 3, "wildfli": [3, 9], "jboss": [3, 6], "eap": [3, 6], "tomcat": 3, "jw": 3, "activemq": 3, "amq": 3, "broker": 3, "kafka": 3, "stream": 3, "csp": 3, "jcliff": 3, "maintain": 4, "semant": 4, "semver": 4, "org": [4, 6, 7, 8], "exampl": [4, 5], "given": 4, "number": 4, "major": 4, "minor": 4, "increment": 4, "incompat": 4, "api": 4, "scenario": 4, "function": [4, 9], "manner": 4, "matrix": 4, "deprec": [4, 6], "strict": 4, "addit": [4, 6, 7], "label": 4, "pre": [4, 6, 7], "build": 4, "gener": 4, "hub": 4, "shall": 4, "note": [4, 6], "By": 4, "newli": 4, "begin": 4, "smaller": 4, "therefor": 4, "explicitli": 4, "state": 4, "assum": 4, "current": 4, "readi": 4, "indic": 4, "made": 4, "while": 4, "we": [4, 8], "prior": 4, "next": 4, "doe": 4, "nor": 4, "elimin": 4, "dedic": 4, "introduc": 4, "limit": 4, "argspec": 4, "either": [4, 8], "structur": 4, "shape": 4, "inbound": 4, "return": 4, "payload": 4, "filter": 4, "connect": [4, 6, 7], "cfg": 4, "entri": [4, 7], "outcom": 4, "previou": 4, "delet": 4, "how": 4, "correct": [4, 9], "consid": 4, "abov": 4, "increas": 4, "revis": 4, "trigger": 4, "annot": 4, "git": [4, 9], "tag": 4, "publish": 4, "built": 4, "artifact": 4, "galaxi": [4, 9], "page": 4, "keycloak": [5, 7, 8, 9], "author": 5, "inform": 5, "python3": 6, "librari": 6, "yum": 6, "dnf": 6, "8": 6, "redhat_csp_download": 6, "date": 6, "ga": 6, "septemb": 6, "20": 6, "2021": 6, "15": 6, "june": 6, "2022": 6, "cp": 6, "januari": 6, "novemb": 6, "11": [6, 7], "descript": [6, 7, 8], "keycloak_ha_en": 6, "auto": [6, 7], "backend": [6, 7], "remot": [6, 7, 9], "keycloak_db_en": 6, "els": [6, 7], "keycloak_admin_us": [6, 8], "admin": [6, 7, 8], "keycloak_bind_address": 6, "address": [6, 7], "bind": [6, 7], "port": [6, 7, 8], "keycloak_management_port_bind_address": 6, "manag": [6, 7, 8], "127": 6, "keycloak_host": [6, 8], "hostnam": [6, 7, 8], "keycloak_http_port": [6, 7, 8], "8080": [6, 7, 8], "keycloak_https_port": [6, 8], "tl": [6, 7, 8], "8443": [6, 7, 8], "keycloak_ajp_port": 6, "ajp": [6, 7], "8009": [6, 7], "keycloak_jgroups_port": 6, "jgroup": [6, 7], "tcp": [6, 7], "7600": [6, 7], "keycloak_management_http_port": [6, 7, 8], "9990": [6, 8], "keycloak_management_https_port": 6, "9993": 6, "keycloak_prefer_ipv4": 6, "prefer": 6, "ipv4": 6, "stack": 6, "keycloak_config_standalone_xml": 6, "filenam": [6, 7], "keycloak_service_us": 6, "posix": [6, 7], "usernam": [6, 7, 8], "keycloak_service_group": 6, "group": [6, 7], "keycloak_service_pidfil": 6, "pid": [6, 7], "run": [6, 7, 9], "keycloak_jvm_packag": 6, "rhel": [6, 7, 9], "runtim": [6, 7], "openjdk": [6, 7], "headless": [6, 7], "keycloak_java_hom": 6, "java_hom": [6, 7], "jre": [6, 7], "leav": [6, 7], "empti": [6, 7], "specifi": [6, 7], "rpm": [6, 7], "none": [6, 7], "keycloak_java_opt": 6, "xms1024m": [6, 7], "xmx2048m": [6, 7], "offlin": [6, 7], "url": [6, 7, 8], "keycloak_vers": 6, "keycloak_dest": 6, "opt": [6, 7], "keycloak_arch": 6, "keycloak_configure_firewalld": 6, "ensur": [6, 7, 9], "firewalld": [6, 7], "miscellan": [6, 7], "legaci": 6, "keycloak_download_url_9x": 6, "keycloak_installdir": 6, "keycloak_jboss_hom": 6, "work": [6, 7], "keycloak_rhsso_installdir": 6, "keycloak_config_dir": 6, "standalon": 6, "keycloak_config_path_to_standalone_xml": 6, "keycloak_auth_realm": [6, 8], "rest": [6, 7, 8], "authent": [6, 7, 8], "master": [6, 7, 8], "keycloak_auth_cli": [6, 7, 8], "call": [6, 7, 8], "keycloak_force_instal": [6, 7], "keycloak_url": [6, 7, 8], "keycloak_management_url": [6, 7, 8], "minimum": 6, "12": 6, "charact": 6, "frontend": 6, "endpoint": [6, 7], "keycloak_modcluster_en": 6, "subsystem": 6, "keycloak_modcluster_url": 6, "revers": [6, 7], "keycloak_modcluster_port": 6, "6666": 6, "dict": 6, "keycloak_jdbc_engin": 6, "engin": [6, 7], "db": 6, "postgr": [6, 7], "mariadb": [6, 7], "keycloak_infinispan_url": 6, "11122": 6, "keycloak_infinispan_us": 6, "supervisor": [6, 7], "keycloak_infinispan_pass": 6, "keycloak_infinispan_sasl_mechan": 6, "type": [6, 8], "scram": [6, 7], "sha": [6, 7], "512": [6, 7], "keycloak_infinispan_use_ssl": 6, "hotrod": 6, "commun": 6, "keycloak_infinispan_trust_store_path": 6, "truststor": 6, "etc": [6, 7], "pki": [6, 7], "cacert": [6, 7], "keycloak_infinispan_trust_store_password": 6, "changeit": [6, 7], "keycloak_jdbc_url": 6, "jdbc": [6, 7], "postgresql": [6, 7], "5432": [6, 7], "keycloak_jdbc_driver_vers": 6, "driver": [6, 7], "1212": [6, 7], "keycloak_db_us": 6, "keycloak_db_pass": 6, "remembertochangem": 6, "include_rol": [6, 8], "16": 6, "guido": [6, 7, 8], "grazioli": [6, 7, 8], "romain": [6, 8], "peliss": [6, 8], "pavan": 6, "kumar": 6, "motaparthi": 6, "keycloak_quarkus_vers": 7, "keycloak_quarkus_ha_en": 7, "keycloak_quarkus_db_en": 7, "keycloak_quarkus_admin_us": 7, "keycloak_quarkus_bind_address": 7, "keycloak_quarkus_host": 7, "keycloak_quarkus_http_port": 7, "keycloak_quarkus_https_port": 7, "keycloak_quarkus_ajp_port": 7, "keycloak_quarkus_jgroups_port": 7, "keycloak_quarkus_service_us": 7, "keycloak_quarkus_service_group": 7, "keycloak_quarkus_service_pidfil": 7, "keycloak_quarkus_jvm_packag": 7, "keycloak_quarkus_java_hom": 7, "keycloak_quarkus_java_opt": 7, "keycloak_quarkus_frontend_url": 7, "public": [7, 8], "auth": [7, 8], "keycloak_quarkus_http_relative_path": 7, "context": [7, 8], "keycloak_quarkus_http_en": 7, "listen": 7, "keycloak_quarkus_https_en": 7, "keycloak_quarkus_key_fil": 7, "kei": 7, "pem": 7, "keycloak_quarkus_cert_fil": 7, "chain": 7, "crt": 7, "keycloak_quarkus_jdbc_engin": 7, "postr": 7, "keycloak_quarkus_db_us": 7, "keycloak_quarkus_db_pass": 7, "keycloak_quarkus_jdbc_url": 7, "keycloak_quarkus_jdbc_driver_vers": 7, "keycloak_quarkus_ispn_us": 7, "keycloak_quarkus_ispn_pass": 7, "keycloak_quarkus_ispn_url": 7, "keycloak_quarkus_ispn_sasl_mechan": 7, "mechan": 7, "keycloak_quarkus_ispn_use_ssl": 7, "whether": 7, "keycloak_quarkus_ispn_trust_store_path": 7, "trust": 7, "keycloak_quarkus_ispn_trust_store_password": 7, "keystor": 7, "keycloak_quarkus_offline_instal": 7, "keycloak_quarkus_download_url": 7, "keycloak_quarkus_dest": 7, "keycloak_quarkus_arch": 7, "keycloak_quarkus_configure_firewalld": 7, "keycloak_quarkus_metrics_en": 7, "metric": 7, "keycloak_quarkus_health_en": 7, "expos": 7, "health": 7, "check": 7, "keycloak_quarkus_installdir": 7, "keycloak_quarkus_hom": 7, "keycloak_quarkus_config_dir": 7, "keycloak_quarkus_master_realm": 7, "keycloak_quarkus_log": 7, "one": 7, "handler": 7, "comma": 7, "keycloak_quarkus_log_level": 7, "level": 7, "categori": 7, "individu": 7, "info": 7, "keycloak_quarkus_log_fil": 7, "rel": 7, "keycloak_quarkus_log_format": 7, "d": 7, "yyyi": 7, "mm": 7, "dd": 7, "hh": 7, "ss": 7, "sss": 7, "5p": 7, "c": 7, "n": 7, "keycloak_quarkus_proxy_mod": 7, "forward": 7, "behind": 7, "edg": 7, "keycloak_quarkus_start_dev": 7, "dev": 7, "keycloak_quarkus_admin_pass": 7, "ye": 7, "keycloak_context": 8, "main": 8, "keycloak_client_publ": 8, "keycloak_client_web_origin": 8, "web": 8, "origin": 8, "keycloak_cli": 8, "declar": 8, "keycloak_client_default_rol": 8, "keycloak_client_us": 8, "map": 8, "keycloak_user_feder": 8, "which": [8, 9], "provider_id": 8, "provider_typ": 8, "storag": 8, "userstorageprovid": 8, "dictionari": 8, "valu": 8, "mapper": 8, "doc": 8, "id": 8, "client_id": 8, "public_cli": 8, "confidenti": 8, "web_origin": 8, "firstnam": 8, "lastnam": 8, "email": 8, "client_rol": 8, "comprehens": 8, "testrealm": 8, "molecul": 9, "setup": 9, "cover": 9, "verifi": 9, "idempot": 9, "In": 9, "order": 9, "local": 9, "clone": 9, "yamllint": 9, "docker": 9, "flake8": 9, "lint": 9, "voluptu": 9, "demo": 9, "aggreg": 9, "rebuilt": 9, "everi": 9, "non": 9, "consist": 9, "behaviour": 9, "flang": 9, "deploy": 9, "crossdc": 9, "multi": 9, "region": 9, "sampl": 9, "system": 9, "step": 9, "environ": 9, "cd": 9, "dep": 9, "cat": 9, "eof": 9}, "objects": {}, "objtypes": {}, "objnames": {}, "titleterms": {"middleware_autom": [0, 1], "keycloak": [0, 1, 3, 6], "releas": [0, 4], "note": 0, "topic": 0, "v1": 0, "2": 0, "0": 0, "devel": 0, "major": 0, "chang": [0, 4], "1": 0, "bugfix": 0, "minor": 0, "break": [0, 4], "port": 0, "guid": 0, "7": 0, "6": 0, "5": 0, "4": 0, "3": 0, "summari": 0, "ansibl": 1, "collect": [1, 3, 4], "version": [1, 4, 6], "compat": [1, 4], "instal": 1, "from": [1, 4], "galaxi": 1, "includ": 1, "role": [1, 4, 5, 6, 7, 8], "usag": 1, "playbook": [1, 6, 8, 9], "control": 1, "node": 1, "local": 1, "sourc": 1, "altern": 1, "like": 1, "corpor": 1, "nexu": 1, "artifactori": 1, "proxi": 1, "etc": 1, "exampl": [1, 6, 8], "command": 1, "configur": 1, "config": 1, "support": 1, "licens": [1, 6, 7, 8], "contributor": 2, "": 2, "guidelin": 2, "welcom": 3, "document": [3, 4], "user": 3, "develop": 3, "gener": 3, "middlewar": 3, "strategi": 4, "new": 4, "content": 4, "i": 4, "ad": 4, "an": 4, "exist": 4, "featur": 4, "plugin": 4, "within": 4, "backward": 4, "bug": 4, "fix": 4, "secur": 4, "ani": 4, "remov": 4, "A": 4, "typograph": 4, "error": 4, "wa": 4, "modifi": 4, "autom": 4, "index": 5, "requir": 6, "depend": 6, "patch": 6, "default": [6, 7, 8], "variabl": [6, 7, 8], "author": [6, 7, 8], "inform": [6, 7, 8], "keycloak_quarku": 7, "keycloak_realm": 8, "format": 8, "test": 9, "continu": 9, "integr": 9}, "envversion": {"sphinx.domains.c": 2, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 8, "sphinx.domains.index": 1, "sphinx.domains.javascript": 2, "sphinx.domains.math": 2, "sphinx.domains.python": 3, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx.ext.intersphinx": 1, "sphinx": 57}, "alltitles": {"middleware_automation.keycloak Release Notes": [[0, "middleware-automation-keycloak-release-notes"]], "Topics": [[0, "topics"]], "v1.2.0-devel": [[0, "v1-2-0-devel"]], "Major Changes": [[0, "major-changes"], [0, "id19"], [0, "id30"]], "v1.1.1": [[0, "v1-1-1"]], "Bugfixes": [[0, "bugfixes"], [0, "id8"], [0, "id12"], [0, "id14"], [0, "id23"], [0, "id28"]], "v1.1.0": [[0, "v1-1-0"]], "Minor Changes": [[0, "minor-changes"], [0, "id17"], [0, "id21"], [0, "id25"], [0, "id32"]], "Breaking Changes / Porting Guide": [[0, "breaking-changes-porting-guide"], [0, "id10"]], "v1.0.7": [[0, "v1-0-7"]], "v1.0.6": [[0, "v1-0-6"]], "v1.0.5": [[0, "v1-0-5"]], "v1.0.4": [[0, "v1-0-4"]], "v1.0.3": [[0, "v1-0-3"]], "v1.0.2": [[0, "v1-0-2"]], "v1.0.1": [[0, "v1-0-1"]], "Release Summary": [[0, "release-summary"], [0, "id34"]], "v1.0.0": [[0, "v1-0-0"]], "Ansible Collection - middleware_automation.keycloak": [[1, "ansible-collection-middleware-automation-keycloak"]], "Ansible version compatibility": [[1, "ansible-version-compatibility"]], "Installation": [[1, "installation"]], "Installing the Collection from Ansible Galaxy": [[1, "installing-the-collection-from-ansible-galaxy"]], "Included roles": [[1, "included-roles"]], "Usage": [[1, "usage"]], "Install Playbook": [[1, "install-playbook"]], "Install from controller node (local source)": [[1, "install-from-controller-node-local-source"]], "Install from alternate sources (like corporate Nexus, artifactory, proxy, etc)": [[1, "install-from-alternate-sources-like-corporate-nexus-artifactory-proxy-etc"]], "Example installation command": [[1, "example-installation-command"]], "Configuration": [[1, "configuration"]], "Config Playbook": [[1, "config-playbook"]], "Example configuration command": [[1, "example-configuration-command"]], "Support": [[1, "support"]], "License": [[1, "license"], [6, "license"], [7, "license"], [8, "license"]], "Contributor\u2019s Guidelines": [[2, "contributor-s-guidelines"]], "Welcome to Keycloak Collection documentation": [[3, "welcome-to-keycloak-collection-documentation"]], "User documentation": [[3, null]], "Developer documentation": [[3, null]], "General": [[3, null]], "Middleware collections": [[3, null]], "Collection Versioning Strategy": [[4, "collection-versioning-strategy"]], "New content is added to an existing collection": [[4, "new-content-is-added-to-an-existing-collection"]], "New feature to existing plugin or role within a collection (backwards compatible)": [[4, "new-feature-to-existing-plugin-or-role-within-a-collection-backwards-compatible"]], "Bug fix or security fix to existing content within a collection": [[4, "bug-fix-or-security-fix-to-existing-content-within-a-collection"]], "Breaking change to any content within a collection": [[4, "breaking-change-to-any-content-within-a-collection"]], "Content removed from a collection": [[4, "content-removed-from-a-collection"]], "A typographical error was fixed in the documentation for a collection": [[4, "a-typographical-error-was-fixed-in-the-documentation-for-a-collection"]], "Documentation added/removed/modified within a collection": [[4, "documentation-added-removed-modified-within-a-collection"]], "Release automation": [[4, "release-automation"]], "Role Index": [[5, "role-index"]], "keycloak": [[6, "keycloak"]], "Requirements": [[6, "requirements"]], "Dependencies": [[6, "dependencies"]], "Versions": [[6, "versions"]], "Patching": [[6, "patching"]], "Role Defaults": [[6, "role-defaults"], [7, "role-defaults"], [8, "role-defaults"]], "Role Variables": [[6, "role-variables"], [7, "role-variables"], [8, "role-variables"]], "Example Playbook": [[6, "example-playbook"], [8, "example-playbook"]], "Author Information": [[6, "author-information"], [7, "author-information"], [8, "author-information"]], "keycloak_quarkus": [[7, "keycloak-quarkus"]], "keycloak_realm": [[8, "keycloak-realm"]], "Variable formats": [[8, "variable-formats"]], "Testing": [[9, "testing"]], "Continuous integration": [[9, "continuous-integration"]], "Integration testing": [[9, "integration-testing"]], "Test playbooks": [[9, "test-playbooks"]]}, "indexentries": {}})
\ No newline at end of file
+Search.setIndex({"docnames": ["CHANGELOG", "README", "developing", "index", "plugins/index", "plugins/keycloak_client", "plugins/keycloak_role", "plugins/keycloak_user_federation", "releasing", "roles/index", "roles/keycloak", "roles/keycloak_quarkus", "roles/keycloak_realm", "testing"], "filenames": ["CHANGELOG.rst", "README.md", "developing.md", "index.rst", "plugins/index.rst", "plugins/keycloak_client.rst", "plugins/keycloak_role.rst", "plugins/keycloak_user_federation.rst", "releasing.md", "roles/index.rst", "roles/keycloak.md", "roles/keycloak_quarkus.md", "roles/keycloak_realm.md", "testing.md"], "titles": ["middleware_automation.keycloak Release Notes", "Ansible Collection - middleware_automation.keycloak", "Contributor\u2019s Guidelines", "Welcome to Keycloak Collection documentation", "Plugin Index", "keycloak_client \u2013 Allows administration of Keycloak clients via Keycloak API", "keycloak_role \u2013 Allows administration of Keycloak roles via Keycloak API", "keycloak_user_federation \u2013 Allows administration of Keycloak user federations via Keycloak API", "Collection Versioning Strategy", "Role Index", "keycloak", "keycloak_quarkus", "keycloak_realm", "Testing"], "terms": {"thi": [0, 1, 5, 6, 7, 8, 10], "changelog": [0, 3], "describ": [0, 1], "after": [0, 5, 6, 7, 8, 13], "version": [0, 3, 5, 6, 7, 9, 11], "provid": [0, 1, 5, 6, 7, 12, 13], "config": [0, 5, 7, 12], "multipl": [0, 1], "modclust": [0, 10], "proxi": [0, 10, 11], "60": 0, "drop": [0, 5], "commun": [0, 10], "gener": [0, 5, 7, 8], "from": [0, 2, 3, 5, 7, 10], "depend": [0, 1, 5, 7, 9, 13], "61": 0, "quarku": [0, 1, 11], "fix": [0, 3], "cach": [0, 1, 7, 10, 11, 13], "file": [0, 1, 2, 7, 10, 11], "path": [0, 1, 2, 10, 11, 12], "conf": [0, 11], "j2": 0, "templat": [0, 5, 10], "53": 0, "updat": [0, 1, 5, 6, 7, 8], "18": [0, 10], "sso": [0, 1, 10], "46": 0, "variabl": [0, 1, 2, 9], "keycloak_no_log": 0, "control": [0, 5, 6, 7, 10], "ansibl": [0, 2, 3, 5, 6, 7, 8, 10, 13], "no_log": 0, "paramet": [0, 4, 8], "debug": [0, 7], "purpos": 0, "47": 0, "overrid": [0, 2, 5], "servic": [0, 1, 5, 7, 10, 11, 12], "start": [0, 2, 11], "retri": 0, "delai": 0, "51": 0, "keycloak_quarku": [0, 1, 3, 9], "enabl": [0, 5, 7, 10, 11], "develop": [0, 8, 11], "mode": [0, 5, 7, 11], "45": 0, "renam": 0, "infinispan_": 0, "prefix": 0, "keycloak_infinispan_": 0, "42": 0, "var": [0, 2, 10, 12], "log": [0, 7, 11], "symlink": 0, "directori": [0, 1, 2, 7, 10, 11, 13], "44": 0, "us": [0, 1, 2, 5, 6, 7, 10, 11, 12], "absolut": 0, "certif": [0, 5, 6, 7, 10, 11], "39": 0, "becom": [0, 7], "task": [0, 1, 2, 10, 12], "otherwis": [0, 5], "fail": 0, "38": 0, "add": [0, 6, 7], "select": [0, 10], "java": [0, 7, 10, 11], "systemd": [0, 13], "unit": 0, "34": 0, "set": [0, 1, 5, 6, 10, 11, 12], "logfil": 0, "correctli": 0, "under": [0, 2, 5, 6, 7], "home": [0, 11], "35": 0, "option": [0, 5, 6, 7, 10, 11, 12], "32": 0, "new": [0, 3, 6, 7], "role": [0, 2, 3, 4, 5, 7, 13], "instal": [0, 3, 5, 6, 7, 10, 11, 13], "17": [0, 1, 11], "29": 0, "keycloak_config_override_templ": [0, 10], "pass": [0, 6, 10, 11], "custom": [0, 6, 10], "xml": [0, 5, 7, 10], "30": [0, 10], "make": [0, 1, 8, 10, 12], "sure": 0, "jvm": [0, 10, 11], "31": 0, "keycloak_admin_password": [0, 1, 10, 12], "default": [0, 2, 5, 6, 7, 8, 9], "assert": [0, 5], "wa": [0, 3, 5, 6, 7], "26": 0, "simplifi": 0, "logic": 0, "reduc": 0, "plai": [0, 2], "execut": [0, 1, 5, 6, 7], "time": [0, 5, 8], "19": 0, "keycloak_frontend_url": [0, 10], "accord": 0, "other": [0, 2, 5, 7, 13], "25": 0, "enhanc": 0, "bug": [0, 3], "document": [0, 5, 6, 7], "appli": [0, 7, 10], "latest": [0, 10], "cumul": [0, 10], "patch": [0, 8, 9], "rh": [0, 1, 10], "automat": [0, 7, 10, 13], "when": [0, 1, 2, 5, 6, 7, 8, 10], "keycloak_rhsso_apply_patch": [0, 10], "i": [0, 1, 3, 5, 6, 7, 10, 11, 12, 13], "true": [0, 1, 5, 6, 7, 10, 11, 12], "cluster": [0, 1, 5, 10, 11, 13], "now": 0, "perform": [0, 10, 11], "databas": [0, 7, 10, 11], "initi": [0, 7], "first": [0, 7, 8], "node": [0, 5, 10], "avoid": [0, 2], "lock": 0, "issu": [0, 1, 5], "stabl": 0, "collect": [0, 5, 6, 7, 10, 12, 13], "red": [1, 3, 7, 10, 12], "hat": [1, 3, 7, 10, 12], "singl": [1, 3, 5, 6, 7, 10, 12], "sign": [1, 3, 5, 10, 12], "On": [1, 3, 5, 6, 7, 10, 12], "ha": [1, 5, 6, 7], "been": [1, 5, 6, 7], "test": [1, 3, 5, 6, 8], "against": [1, 7], "follow": [1, 2, 5, 6, 7, 8, 10, 12, 13], "2": [1, 2, 3, 7, 8, 10, 11, 12, 13], "9": [1, 10, 11, 13], "10": [1, 5, 6, 7], "plugin": [1, 3], "modul": [1, 5, 6, 7, 8], "within": [1, 3, 7], "mai": [1, 5, 6, 7, 8], "onli": [1, 5, 7, 8, 10], "specif": [1, 2, 5, 11], "A": [1, 3, 5, 6, 7, 13], "contain": [1, 2, 5, 7, 8, 12], "metadata": [1, 8], "identifi": [1, 7], "befor": [1, 5, 7], "you": [1, 5, 6, 7], "need": [1, 2, 5, 6, 7, 8], "cli": [1, 5, 6, 7, 10, 11, 12], "can": [1, 5, 7], "also": [1, 7], "requir": [1, 2, 5, 6, 7, 8, 9, 11, 12, 13], "yml": [1, 2, 13], "via": [1, 3, 4, 10], "r": [1, 10, 13], "format": [1, 5, 8, 9, 11], "name": [1, 2, 5, 6, 7, 8, 10, 11, 12], "The": [1, 5, 6, 7, 8, 10, 11, 12, 13], "python": [1, 13], "packag": [1, 10, 11], "present": [1, 5, 6, 7], "host": [1, 7, 10, 12], "netaddr": [1, 10], "pip": [1, 10, 13], "txt": [1, 10, 13], "keycloak_realm": [1, 3, 9], "realm": [1, 5, 6, 7, 10, 11, 12], "user": [1, 2, 4, 5, 6, 8, 10, 11, 12], "feder": [1, 3, 4, 12], "": [1, 3, 5, 7, 11], "client": [1, 3, 4, 6, 7, 10, 11, 12], "an": [1, 3, 5, 6, 7, 10, 11, 12], "variant": 1, "0": [1, 3, 5, 6, 7, 8, 10, 11, 12], "upstream": 1, "base": [1, 5, 10], "defin": [1, 2, 5, 7], "rhsso": 1, "both": [1, 5], "differ": [1, 5, 7], "section": [1, 5, 8], "For": [1, 5, 7, 12], "full": [1, 5, 7], "detail": [1, 7], "refer": [1, 5, 12], "readm": [1, 8], "zip": [1, 10, 11], "archiv": [1, 10, 11], "avail": [1, 5, 8, 12, 13], "repositori": [1, 13], "root": [1, 5, 10, 11], "keycloak_offline_instal": [1, 10], "allow": [1, 3, 4, 8, 12], "skip": 1, "download": [1, 3, 10, 11], "match": 1, "so": [1, 5, 7], "ar": [1, 2, 5, 6, 7, 8, 10, 12, 13], "provis": [1, 7], "And": 1, "keycloak_rhsso_en": [1, 10], "x": 1, "y": 1, "z": 1, "server": [1, 5, 7, 10, 11], "dist": 1, "fals": [1, 5, 6, 7, 10, 11, 12], "sso_download_url": 1, "http": [1, 5, 6, 7, 8, 10, 11, 12, 13], "intern": [1, 2, 5], "privat": [1, 5, 11], "net": [1, 7], "keycloak_download_url": [1, 10], "ansible_host": 1, "e": [1, 2, 5, 6, 11], "rhn": [1, 10], "cred": 1, "changem": [1, 12], "password": [1, 5, 6, 7, 10, 11, 12], "administr": [1, 3, 4, 10, 11, 12], "consol": [1, 5, 7, 10, 11, 12], "account": [1, 5, 10, 11, 12], "inventori": [1, 8, 13], "below": [1, 5, 7, 8], "deploi": 1, "localhost": [1, 5, 6, 10, 11, 12, 13], "ansible_connect": [1, 13], "creat": [1, 5, 6, 7, 8, 12, 13], "v1": [1, 3], "beta": 1, "releas": [1, 3, 10, 11, 13], "technic": 1, "preview": 1, "If": [1, 5, 6, 7, 11], "have": [1, 2, 5, 6, 7, 10], "ani": [1, 3, 5, 7], "question": 1, "relat": 1, "pleas": [1, 5, 8], "don": [1, 2, 7], "t": [1, 2, 7, 11], "hesit": 1, "contact": 1, "u": 1, "middlewar": [1, 13], "core": [1, 13], "redhat": 1, "com": [1, 5, 6, 7, 10, 11, 13], "open": [1, 10], "github": [1, 8, 10, 11, 13], "apach": [1, 10, 11, 12], "v2": [1, 5], "later": 1, "see": [1, 5, 7, 8], "view": 1, "text": 1, "all": [2, 5, 6, 7, 8, 13], "yaml": 2, "extens": [2, 5, 8], "space": [2, 7], "around": 2, "jinja": 2, "over": 2, "should": [2, 5, 7, 8, 10, 11, 12], "lowercas": 2, "keep": 2, "self": 2, "includ": [2, 5, 7, 8, 10, 12, 13], "possibl": [2, 5, 7], "do": [2, 5, 6, 7], "noth": 2, "more": [2, 7, 11], "than": [2, 5], "list": [2, 5, 6, 7, 10, 11, 12], "except": 2, "where": [2, 5, 7], "pre_task": 2, "post_task": 2, "separ": [2, 5, 6, 7, 11], "valid": [2, 5, 7], "ie": 2, "underscor": 2, "g": [2, 5, 6], "my_rol": 2, "my_playbook": 2, "dash": 2, "my": [2, 6, 7], "trail": 2, "slash": 2, "my_path": 2, "foo": [2, 7], "concaten": 2, "same": [2, 5, 7], "convent": 2, "bar": 2, "indent": 2, "each": [2, 8], "v": 2, "interpol": 2, "chang": [2, 3, 5, 7, 13], "overridden": 2, "go": [2, 5], "those": [2, 7], "would": [2, 5, 6, 7, 8], "like": 2, "argument": 2, "meta": 2, "argument_spec": 2, "playbook": [2, 3, 5, 6, 7, 8, 9], "focus": 2, "compat": [2, 3], "autom": [2, 3], "platform": 2, "middleware_autom": [3, 5, 6, 7, 10, 12, 13], "usag": 3, "configur": [3, 5, 6, 7, 10, 11, 12], "support": [3, 7, 8, 12], "licens": [3, 9], "index": [3, 5, 6, 7], "keycloak_cli": [3, 4, 12], "api": [3, 4, 8], "keycloak_rol": [3, 4], "keycloak_user_feder": [3, 4, 12], "continu": 3, "integr": 3, "contributor": 3, "guidelin": 3, "strategi": 3, "content": [3, 5, 7], "ad": [3, 5, 6, 7], "exist": [3, 5, 6, 7, 10, 11], "featur": [3, 5], "backward": 3, "secur": 3, "break": [3, 13], "remov": [3, 5, 6, 7, 10, 11], "typograph": 3, "error": 3, "modifi": [3, 6, 7], "devel": 3, "1": [3, 5, 7, 8, 10, 11], "7": [3, 5, 7, 10], "6": [3, 10], "5": [3, 5, 6, 7, 10, 13], "4": [3, 5, 6, 7, 10, 11], "3": [3, 5, 6, 7, 10, 13], "infinispan": [3, 10, 11, 13], "data": [3, 5, 7, 11], "grid": 3, "wildfli": [3, 13], "jboss": [3, 10], "eap": [3, 10], "tomcat": 3, "jw": 3, "activemq": 3, "amq": 3, "broker": 3, "kafka": 3, "stream": 3, "csp": 3, "jcliff": 3, "keycloak": [4, 9, 11, 12, 13], "synopsi": 4, "exampl": [4, 8, 9], "return": [4, 8], "valu": [4, 12], "author": [4, 9], "part": [5, 6, 7], "To": [5, 6, 7], "galaxi": [5, 6, 7, 8, 13], "specifi": [5, 6, 7, 10, 11], "rest": [5, 6, 7, 10, 11, 12], "It": [5, 6, 7], "access": [5, 6, 7], "openid": [5, 6, 7], "connect": [5, 6, 7, 8, 10, 11], "being": [5, 6, 7], "must": [5, 6, 7], "requisit": [5, 6, 7], "right": [5, 6, 7], "In": [5, 6, 7, 13], "admin": [5, 6, 7, 10, 11, 12], "work": [5, 6, 7, 10, 11], "definit": [5, 6, 7], "scope": [5, 6, 7], "tailor": [5, 6, 7], "your": [5, 6, 7], "expect": [5, 6, 7], "snake_cas": [5, 6, 7], "camelcas": [5, 6, 7], "ones": [5, 6, 7], "found": [5, 6, 7], "its": [5, 6, 7], "www": [5, 6, 7], "org": [5, 6, 7, 8, 10, 11, 12], "doc": [5, 6, 7, 12], "8": [5, 6, 10], "html": [5, 6, 7], "alias": [5, 6, 7], "well": 5, "doe": [5, 6, 7, 8], "alwai": [5, 6, 7], "saniti": 5, "check": [5, 7, 11], "input": 5, "saml": 5, "instanc": [5, 6, 7], "vice": 5, "versa": 5, "Be": 5, "care": 5, "usual": [5, 7], "sensibl": 5, "chosen": [5, 7], "comment": [5, 6, 7], "admin_url": 5, "adminurl": 5, "string": [5, 6, 7], "url": [5, 6, 7, 10, 11, 12], "interfac": 5, "always_display_in_consol": 5, "alwaysdisplayinconsol": 5, "boolean": [5, 6, 7], "whether": [5, 7, 11], "displai": [5, 7], "even": [5, 7], "activ": [5, 7], "session": 5, "choic": [5, 6, 7], "entri": [5, 6, 7, 8, 11], "attribut": [5, 6, 7], "dictionari": [5, 6, 7, 12], "dict": [5, 6, 7, 10], "further": 5, "variou": 5, "given": [5, 7, 8], "while": [5, 8], "exhaust": 5, "permiss": 5, "appropri": 5, "protocol": [5, 7], "anywai": 5, "simpli": 5, "jwk": 5, "kei": [5, 6, 7, 11], "store": [5, 7], "jwt": 5, "credenti": [5, 6, 7], "base64": 5, "encod": 5, "request": [5, 7], "object": [5, 7], "signatur": 5, "alg": 5, "jwa": 5, "algorithm": 5, "which": [5, 6, 7, 12, 13], "send": 5, "oidc": 5, "One": 5, "none": [5, 7, 10, 11], "rs256": 5, "authnstat": 5, "statement": 5, "method": [5, 7], "timestamp": 5, "login": [5, 7], "respons": 5, "encrypt": [5, 7], "public": [5, 11, 12], "forc": 5, "post": 5, "bind": [5, 7, 10, 11], "onetimeus": 5, "condit": 5, "keyinfo": 5, "ext": 5, "redirect": 5, "lookup": [5, 7], "optim": 5, "through": [5, 7], "inclus": 5, "id": [5, 6, 7, 12], "element": [5, 7], "rsa_sha256": 5, "rsa_sha1": 5, "rsa_sha512": 5, "dsa_sha1": 5, "saml_assertion_consumer_url_post": 5, "consum": 5, "saml_assertion_consumer_url_redirect": 5, "saml_force_name_id_format": 5, "ignor": 5, "nameid": 5, "subject": 5, "one": [5, 7, 11], "instead": [5, 7], "saml_name_id_format": 5, "usernam": [5, 6, 7, 10, 11, 12], "email": [5, 7, 12], "transient": 5, "persist": 5, "saml_signature_canonicalization_method": 5, "canonic": 5, "four": 5, "w3": 5, "2001": 5, "exc": 5, "c14n": 5, "exclus": 5, "withcom": 5, "exclusive_with_com": 5, "tr": 5, "rec": 5, "20010315": 5, "inclusive_with_com": 5, "saml_single_logout_service_url_post": 5, "logout": 5, "saml_single_logout_service_url_redirect": 5, "obtain": [5, 7], "info": [5, 11], "userinfo": 5, "endpoint": [5, 10, 11], "unsign": 5, "auth_client_id": [5, 6, 7], "client_id": [5, 6, 7, 12], "authent": [5, 6, 7, 10, 11, 12], "auth_client_secret": [5, 6, 7], "secret": [5, 6, 7], "conjunct": [5, 6, 7], "auth_keycloak_url": [5, 6, 7], "auth_password": [5, 6, 7], "auth_realm": [5, 6, 7], "auth_usernam": [5, 6, 7], "authentication_flow_binding_overrid": 5, "authenticationflowbindingoverrid": 5, "flow": 5, "authorization_services_en": 5, "authorizationservicesen": 5, "authorization_set": 5, "authorizationset": 5, "structur": [5, 8], "_resourceserverrepresent": 5, "base_url": 5, "baseurl": 5, "auth": [5, 6, 7, 11, 12], "link": [5, 7], "back": [5, 7], "bearer_onli": 5, "beareronli": 5, "type": [5, 7, 10, 12], "bearer": 5, "client_authenticator_typ": 5, "clientauthenticatortyp": 5, "how": [5, 8], "either": [5, 8, 12], "behavior": 5, "clientid": 5, "alphanumer": 5, "take": 5, "preced": 5, "client_templ": 5, "clienttempl": 5, "field": [5, 6, 7], "silent": 5, "connection_timeout": [5, 6, 7], "integ": [5, 6, 7], "timeout": [5, 6, 7], "period": [5, 6, 7], "second": [5, 6, 7], "consent_requir": 5, "consentrequir": 5, "consent": 5, "default_client_scop": 5, "defaultclientscop": 5, "default_rol": 5, "defaultrol": 5, "referenc": 5, "yet": [5, 6, 7], "thei": [5, 7], "descript": [5, 6, 7, 10, 11, 12], "direct_access_grants_en": 5, "directaccessgrantsen": 5, "direct": 5, "grant": 5, "frontchannel_logout": 5, "frontchannellogout": 5, "frontchannel": 5, "full_scope_allow": 5, "fullscopeallow": 5, "http_agent": [5, 6, 7], "agent": [5, 6, 7], "header": [5, 6, 7], "uuid": [5, 7], "implicit_flow_en": 5, "implicitflowen": 5, "implicit": 5, "node_re_registration_timeout": 5, "nodereregistrationtimeout": 5, "re": 5, "registr": [5, 7], "not_befor": 5, "notbefor": 5, "revok": 5, "token": [5, 6, 7], "date": [5, 10], "unix": 5, "optional_client_scop": 5, "optionalclientscop": 5, "protocol_mapp": 5, "protocolmapp": 5, "mapper": [5, 7, 12], "sourc": 5, "parent": [5, 7], "class": [5, 7], "easiest": [5, 7], "dump": [5, 7], "alreadi": [5, 7], "consenttext": 5, "human": 5, "readabl": 5, "accept": [5, 7], "imposs": 5, "sinc": [5, 7], "extend": [5, 7], "spi": [5, 7], "ship": 5, "least": 5, "docker": [5, 13], "address": [5, 10, 11], "group": [5, 10, 11], "membership": 5, "hardcod": [5, 7], "claim": 5, "script": 5, "sha256": 5, "pairwis": 5, "sub": 5, "usermodel": 5, "properti": [5, 7], "usersessionmodel": 5, "note": [5, 7, 8, 10], "look": 5, "public_cli": [5, 12], "publiccli": 5, "master": [5, 6, 7, 10, 11, 12], "redirect_uri": 5, "redirecturi": 5, "uri": 5, "registered_nod": 5, "registerednod": 5, "regist": 5, "nodenam": 5, "last": 5, "registration_access_token": 5, "registrationaccesstoken": 5, "root_url": 5, "rooturl": 5, "append": 5, "rel": [5, 11], "here": [5, 6, 7], "exit": 5, "current": [5, 8], "save": 5, "service_accounts_en": 5, "serviceaccountsen": 5, "standard_flow_en": 5, "standardflowen": 5, "standard": [5, 7], "state": [5, 6, 7, 8], "absent": [5, 6, 7], "surrogate_auth_requir": 5, "surrogateauthrequir": 5, "surrog": 5, "use_template_config": 5, "usetemplateconfig": 5, "use_template_mapp": 5, "usetemplatemapp": 5, "use_template_scop": 5, "usetemplatescop": 5, "validate_cert": [5, 6, 7], "verifi": [5, 6, 7, 13], "tl": [5, 6, 7, 10, 11, 12], "disabl": [5, 6, 7], "product": [5, 6, 7], "web_origin": [5, 12], "weborigin": 5, "cor": 5, "origin": [5, 12], "minim": 5, "delegate_to": [5, 6], "delet": [5, 6, 7, 8], "bell": 5, "whistl": 5, "d8b127a3": 5, "31f6": 5, "44c8": 5, "a7e4": 5, "4ab9a3e78d95": 5, "this_is_a_test": 5, "wonder": 5, "basepath": 5, "reallywellkeptsecret": 5, "8888": 5, "1507825725": 5, "node01": 5, "1507828202": 5, "eyjwt_token": 5, "test01": 5, "test02": 5, "browser": 5, "4c90336b": 5, "bf1d": 5, "4b87": 5, "916d": 5, "3677ba4e5fbb": 5, "family_nam": 5, "jsontyp": 5, "label": [5, 8], "lastnam": [5, 12], "familynam": 5, "famili": 5, "nameformat": 5, "basic": 5, "certificateher": 5, "privatekeyher": 5, "jwks_url_for_client_auth_jwt": 5, "jwt_credential_certificate_for_client_auth": 5, "common": [5, 6, 7], "uniqu": [5, 6, 7], "end_stat": [5, 6, 7], "represent": [5, 6, 7], "sampl": [5, 6, 7, 13], "truncat": [5, 6], "success": [5, 6, 7], "rv": [5, 6, 7], "_url": 5, "msg": [5, 6, 7], "messag": [5, 6, 7], "what": [5, 6, 7], "action": [5, 6, 7], "taken": [5, 6, 7], "testclient": 5, "propos": [5, 6, 7], "eik": 5, "frost": 5, "eikef": 5, "multi": [6, 13], "individu": [6, 11], "wai": 6, "call": [6, 10, 11, 12], "translat": 6, "suitabl": 6, "pair": 6, "resid": [6, 7], "consid": [6, 8], "kc": 6, "mycustomrealm": 6, "myclient": 6, "some": [6, 7], "attrib1": 6, "value1": 6, "attrib2": 6, "value2": 6, "attrib3": 6, "numer": 6, "item": 6, "clientrol": 6, "composit": 6, "containerid": 6, "9f03eb61": 6, "a826": 6, "4771": 6, "a9fd": 6, "930e06d2d36a": 6, "561703dd": 6, "0f38": 6, "45ff": 6, "9a5a": 6, "0c978f794547": 6, "myrol": 6, "laurent": [6, 7], "paumier": [6, 7], "laurpaum": [6, 7], "20": [7, 10], "provider_id": [7, 12], "ldap": 7, "kerbero": 7, "sssd": 7, "allowkerberosauthent": 7, "spnego": 7, "about": 7, "allowpasswordauthent": 7, "authtyp": 7, "dure": 7, "oper": 7, "most": 7, "sent": 7, "simpl": 7, "batchsizeforsync": 7, "count": 7, "import": 7, "transact": 7, "1000": 7, "bindcredenti": 7, "binddn": 7, "dn": 7, "cachepolici": 7, "polici": 7, "storag": [7, 12], "evict": 7, "_daili": 7, "_weekli": 7, "max": 7, "_lifespan": 7, "NO": 7, "_cach": 7, "changedsyncperiod": 7, "synchron": 7, "newli": [7, 8], "connectionpool": 7, "determin": 7, "pool": 7, "connectionpoolingauthent": 7, "digest": 7, "md5": 7, "connectionpoolingdebug": 7, "indic": [7, 8], "level": [7, 11], "output": 7, "produc": 7, "fine": 7, "trace": 7, "creation": 7, "inform": [7, 9], "connectionpoolinginits": 7, "number": [7, 8], "per": 7, "ident": 7, "connectionpoolingmaxs": 7, "maximum": 7, "maintain": [7, 8], "concurr": 7, "connectionpoolingprefs": 7, "prefer": [7, 10], "connectionpoolingprotocol": 7, "plain": 7, "ssl": 7, "connectionpoolingtimeout": 7, "millisecond": 7, "idl": 7, "remain": 7, "without": 7, "close": 7, "connectiontimeout": 7, "connectionurl": 7, "customusersearchfilt": 7, "addit": [7, 8, 10, 11], "filter": [7, 8], "search": 7, "leav": [7, 10, 11], "empti": [7, 10, 11], "krb5loginmodul": 7, "editmod": 7, "read_onli": 7, "read": 7, "writabl": 7, "mean": 7, "sync": 7, "demand": 7, "unsync": 7, "_onli": 7, "evictiondai": 7, "dai": 7, "week": 7, "invalid": 7, "evictionhour": 7, "hour": 7, "evictionminut": 7, "minut": 7, "fullsyncperiod": 7, "importen": 7, "db": [7, 10], "kerberosrealm": 7, "keytab": 7, "locat": 7, "princip": 7, "etc": [7, 10, 11], "krb5": 7, "maxlifespan": 7, "lifespan": 7, "pagin": 7, "prioriti": 7, "lowest": 7, "rdnldapattribut": 7, "rdn": 7, "top": 7, "typic": 7, "howev": 7, "cn": 7, "might": 7, "samaccountnam": 7, "readtimeout": 7, "searchscop": 7, "subtre": 7, "whole": 7, "serverprincip": 7, "domain": 7, "starttl": 7, "syncregistr": 7, "effect": 7, "trustemail": 7, "verif": 7, "updateprofilefirstlogin": 7, "profil": 7, "usekerberosforpasswordauthent": 7, "usepasswordmodifyextendedop": 7, "ldapv3": 7, "rfc": 7, "3062": 7, "good": 7, "randomli": 7, "usernameldapattribut": 7, "map": [7, 12], "mani": 7, "vendor": 7, "uid": 7, "fill": 7, "record": 7, "want": 7, "userobjectclass": 7, "objectclass": 7, "divid": 7, "comma": [7, 11], "inetorgperson": 7, "organizationalperson": 7, "written": 7, "just": 7, "usersdn": 7, "tree": 7, "usetruststorespi": 7, "truststor": [7, 10], "standalon": [7, 10], "never": 7, "cacert": [7, 10, 11], "javax": 7, "ldapsonli": 7, "uuidldapattribut": 7, "entryuuid": 7, "objectguid": 7, "notion": 7, "suppos": 7, "among": 7, "validatepasswordpolici": 7, "short": 7, "write": 7, "rhd": 7, "left": 7, "associ": 7, "identityprovidermapp": 7, "parentid": 7, "blank": 7, "providerid": 7, "providertyp": 7, "compon": 7, "ldapstoragemapp": 7, "parent_id": 7, "provider_typ": [7, 12], "userstorageprovid": [7, 12], "636": 7, "ou": 7, "dc": 7, "reader": 7, "cf52ae4f": 7, "4471": 7, "4435": 7, "a0cf": 7, "bb620cadc122": 7, "myrealm": 7, "01122837": 7, "9047": 7, "4ae4": 7, "8ca0": 7, "6e2e891a765f": 7, "mandatori": 7, "mail": 7, "model": 7, "17d60ce2": 7, "2d44": 7, "4c2c": 7, "8b1f": 7, "1fba601b9a9f": 7, "myfe": 7, "No": 7, "164bb483": 7, "c613": 7, "482e": 7, "80fe": 7, "7f1431308799": 7, "semant": 8, "semver": 8, "major": 8, "minor": 8, "increment": 8, "incompat": 8, "scenario": 8, "function": [8, 13], "manner": 8, "matrix": 8, "deprec": [8, 10], "strict": 8, "pre": [8, 10, 11], "build": 8, "hub": 8, "shall": 8, "By": 8, "begin": 8, "smaller": 8, "therefor": 8, "explicitli": 8, "assum": 8, "readi": 8, "made": 8, "we": [8, 12], "prior": 8, "next": 8, "nor": 8, "elimin": 8, "dedic": 8, "introduc": 8, "limit": 8, "argspec": 8, "shape": 8, "inbound": 8, "payload": 8, "cfg": 8, "outcom": 8, "previou": 8, "correct": [8, 13], "abov": 8, "increas": 8, "revis": 8, "trigger": 8, "annot": 8, "git": [8, 13], "tag": 8, "publish": 8, "built": 8, "artifact": 8, "page": 8, "python3": 10, "librari": 10, "yum": 10, "dnf": 10, "redhat_csp_download": 10, "ga": 10, "septemb": 10, "2021": 10, "15": 10, "june": 10, "2022": 10, "cp": 10, "januari": 10, "novemb": 10, "11": [10, 11], "keycloak_ha_en": 10, "auto": [10, 11], "backend": [10, 11], "remot": [10, 11, 13], "keycloak_db_en": 10, "els": [10, 11], "keycloak_admin_us": [10, 12], "keycloak_bind_address": 10, "port": [10, 11, 12], "keycloak_management_port_bind_address": 10, "manag": [10, 11, 12], "127": 10, "keycloak_host": [10, 12], "hostnam": [10, 11, 12], "keycloak_http_port": [10, 11, 12], "8080": [10, 11, 12], "keycloak_https_port": [10, 12], "8443": [10, 11, 12], "keycloak_ajp_port": 10, "ajp": [10, 11], "8009": [10, 11], "keycloak_jgroups_port": 10, "jgroup": [10, 11], "tcp": [10, 11], "7600": [10, 11], "keycloak_management_http_port": [10, 11, 12], "9990": [10, 12], "keycloak_management_https_port": 10, "9993": 10, "keycloak_prefer_ipv4": 10, "ipv4": 10, "stack": 10, "keycloak_config_standalone_xml": 10, "filenam": [10, 11], "keycloak_service_us": 10, "posix": [10, 11], "keycloak_service_group": 10, "keycloak_service_pidfil": 10, "pid": [10, 11], "run": [10, 11, 13], "keycloak_jvm_packag": 10, "rhel": [10, 11, 13], "runtim": [10, 11], "openjdk": [10, 11], "headless": [10, 11], "keycloak_java_hom": 10, "java_hom": [10, 11], "jre": [10, 11], "rpm": [10, 11], "keycloak_java_opt": 10, "xms1024m": [10, 11], "xmx2048m": [10, 11], "offlin": [10, 11], "keycloak_vers": 10, "keycloak_dest": 10, "opt": [10, 11], "keycloak_arch": 10, "keycloak_configure_firewalld": 10, "ensur": [10, 11, 13], "firewalld": [10, 11], "miscellan": [10, 11], "legaci": 10, "keycloak_download_url_9x": 10, "keycloak_installdir": 10, "keycloak_jboss_hom": 10, "keycloak_rhsso_installdir": 10, "keycloak_config_dir": 10, "keycloak_config_path_to_standalone_xml": 10, "keycloak_auth_realm": [10, 12], "keycloak_auth_cli": [10, 11, 12], "keycloak_force_instal": [10, 11], "keycloak_url": [10, 11, 12], "keycloak_management_url": [10, 11, 12], "minimum": 10, "12": 10, "charact": 10, "frontend": 10, "keycloak_modcluster_en": 10, "subsystem": 10, "keycloak_modcluster_url": 10, "revers": [10, 11], "keycloak_modcluster_port": 10, "6666": 10, "keycloak_jdbc_engin": 10, "engin": [10, 11], "postgr": [10, 11], "mariadb": [10, 11], "keycloak_infinispan_url": 10, "11122": 10, "keycloak_infinispan_us": 10, "supervisor": [10, 11], "keycloak_infinispan_pass": 10, "keycloak_infinispan_sasl_mechan": 10, "scram": [10, 11], "sha": [10, 11], "512": [10, 11], "keycloak_infinispan_use_ssl": 10, "hotrod": 10, "keycloak_infinispan_trust_store_path": 10, "pki": [10, 11], "keycloak_infinispan_trust_store_password": 10, "changeit": [10, 11], "keycloak_jdbc_url": 10, "jdbc": [10, 11], "postgresql": [10, 11], "5432": [10, 11], "keycloak_jdbc_driver_vers": 10, "driver": [10, 11], "1212": [10, 11], "keycloak_db_us": 10, "keycloak_db_pass": 10, "remembertochangem": 10, "include_rol": [10, 12], "16": 10, "guido": [10, 11, 12], "grazioli": [10, 11, 12], "romain": [10, 12], "peliss": [10, 12], "pavan": 10, "kumar": 10, "motaparthi": 10, "keycloak_quarkus_vers": 11, "keycloak_quarkus_ha_en": 11, "keycloak_quarkus_db_en": 11, "keycloak_quarkus_admin_us": 11, "keycloak_quarkus_bind_address": 11, "keycloak_quarkus_host": 11, "keycloak_quarkus_http_port": 11, "keycloak_quarkus_https_port": 11, "keycloak_quarkus_ajp_port": 11, "keycloak_quarkus_jgroups_port": 11, "keycloak_quarkus_service_us": 11, "keycloak_quarkus_service_group": 11, "keycloak_quarkus_service_pidfil": 11, "keycloak_quarkus_jvm_packag": 11, "keycloak_quarkus_java_hom": 11, "keycloak_quarkus_java_opt": 11, "keycloak_quarkus_frontend_url": 11, "keycloak_quarkus_http_relative_path": 11, "context": [11, 12], "keycloak_quarkus_http_en": 11, "listen": 11, "keycloak_quarkus_https_en": 11, "keycloak_quarkus_key_fil": 11, "pem": 11, "keycloak_quarkus_cert_fil": 11, "chain": 11, "crt": 11, "keycloak_quarkus_jdbc_engin": 11, "postr": 11, "keycloak_quarkus_db_us": 11, "keycloak_quarkus_db_pass": 11, "keycloak_quarkus_jdbc_url": 11, "keycloak_quarkus_jdbc_driver_vers": 11, "keycloak_quarkus_ispn_us": 11, "keycloak_quarkus_ispn_pass": 11, "keycloak_quarkus_ispn_url": 11, "keycloak_quarkus_ispn_sasl_mechan": 11, "mechan": 11, "keycloak_quarkus_ispn_use_ssl": 11, "keycloak_quarkus_ispn_trust_store_path": 11, "trust": 11, "keycloak_quarkus_ispn_trust_store_password": 11, "keystor": 11, "keycloak_quarkus_offline_instal": 11, "keycloak_quarkus_download_url": 11, "keycloak_quarkus_dest": 11, "keycloak_quarkus_arch": 11, "keycloak_quarkus_configure_firewalld": 11, "keycloak_quarkus_metrics_en": 11, "metric": 11, "keycloak_quarkus_health_en": 11, "expos": 11, "health": 11, "keycloak_quarkus_installdir": 11, "keycloak_quarkus_hom": 11, "keycloak_quarkus_config_dir": 11, "keycloak_quarkus_master_realm": 11, "keycloak_quarkus_log": 11, "handler": 11, "keycloak_quarkus_log_level": 11, "categori": 11, "keycloak_quarkus_log_fil": 11, "keycloak_quarkus_log_format": 11, "d": 11, "yyyi": 11, "mm": 11, "dd": 11, "hh": 11, "ss": 11, "sss": 11, "5p": 11, "c": 11, "n": 11, "keycloak_quarkus_proxy_mod": 11, "forward": 11, "behind": 11, "edg": 11, "keycloak_quarkus_start_dev": 11, "dev": 11, "keycloak_quarkus_admin_pass": 11, "ye": 11, "keycloak_context": 12, "main": 12, "keycloak_client_publ": 12, "keycloak_client_web_origin": 12, "web": 12, "declar": 12, "keycloak_client_default_rol": 12, "keycloak_client_us": 12, "confidenti": 12, "firstnam": 12, "client_rol": 12, "comprehens": 12, "testrealm": 12, "molecul": 13, "setup": 13, "cover": 13, "idempot": 13, "order": 13, "local": 13, "clone": 13, "yamllint": 13, "flake8": 13, "lint": 13, "voluptu": 13, "demo": 13, "aggreg": 13, "rebuilt": 13, "everi": 13, "non": 13, "consist": 13, "behaviour": 13, "flang": 13, "deploy": 13, "crossdc": 13, "region": 13, "system": 13, "step": 13, "environ": 13, "cd": 13, "dep": 13, "cat": 13, "eof": 13}, "objects": {}, "objtypes": {}, "objnames": {}, "titleterms": {"middleware_autom": [0, 1], "keycloak": [0, 1, 3, 5, 6, 7, 10], "releas": [0, 8], "note": 0, "topic": 0, "v1": 0, "2": 0, "0": 0, "devel": 0, "major": 0, "chang": [0, 8], "minor": 0, "1": 0, "bugfix": 0, "break": [0, 8], "port": 0, "guid": 0, "7": 0, "6": 0, "5": 0, "4": 0, "3": 0, "summari": 0, "ansibl": 1, "collect": [1, 3, 8], "version": [1, 8, 10], "compat": [1, 8], "instal": 1, "from": [1, 8], "galaxi": 1, "includ": 1, "role": [1, 6, 8, 9, 10, 11, 12], "usag": 1, "playbook": [1, 10, 12, 13], "control": 1, "node": 1, "local": 1, "sourc": 1, "altern": 1, "like": 1, "corpor": 1, "nexu": 1, "artifactori": 1, "proxi": 1, "etc": 1, "exampl": [1, 5, 6, 7, 10, 12], "command": 1, "configur": 1, "config": 1, "support": 1, "licens": [1, 10, 11, 12], "contributor": 2, "": 2, "guidelin": 2, "welcom": 3, "document": [3, 8], "user": [3, 7], "develop": 3, "gener": 3, "middlewar": 3, "plugin": [4, 8], "index": [4, 9], "modul": 4, "keycloak_cli": 5, "allow": [5, 6, 7], "administr": [5, 6, 7], "client": 5, "via": [5, 6, 7], "api": [5, 6, 7], "synopsi": [5, 6, 7], "paramet": [5, 6, 7], "return": [5, 6, 7], "valu": [5, 6, 7], "author": [5, 6, 7, 10, 11, 12], "keycloak_rol": 6, "keycloak_user_feder": 7, "feder": 7, "strategi": 8, "new": 8, "content": 8, "i": 8, "ad": 8, "an": 8, "exist": 8, "featur": 8, "within": 8, "backward": 8, "bug": 8, "fix": 8, "secur": 8, "ani": 8, "remov": 8, "A": 8, "typograph": 8, "error": 8, "wa": 8, "modifi": 8, "autom": 8, "requir": 10, "depend": 10, "patch": 10, "default": [10, 11, 12], "variabl": [10, 11, 12], "inform": [10, 11, 12], "keycloak_quarku": 11, "keycloak_realm": 12, "format": 12, "test": 13, "continu": 13, "integr": 13}, "envversion": {"sphinx.domains.c": 2, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 8, "sphinx.domains.index": 1, "sphinx.domains.javascript": 2, "sphinx.domains.math": 2, "sphinx.domains.python": 3, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx.ext.intersphinx": 1, "sphinx": 57}, "alltitles": {"middleware_automation.keycloak Release Notes": [[0, "middleware-automation-keycloak-release-notes"]], "Topics": [[0, "topics"]], "v1.2.0-devel": [[0, "v1-2-0-devel"]], "Major Changes": [[0, "major-changes"], [0, "id21"], [0, "id32"]], "Minor Changes": [[0, "minor-changes"], [0, "id4"], [0, "id19"], [0, "id23"], [0, "id27"], [0, "id34"]], "v1.1.1": [[0, "v1-1-1"]], "Bugfixes": [[0, "bugfixes"], [0, "id10"], [0, "id14"], [0, "id16"], [0, "id25"], [0, "id30"]], "v1.1.0": [[0, "v1-1-0"]], "Breaking Changes / Porting Guide": [[0, "breaking-changes-porting-guide"], [0, "id12"]], "v1.0.7": [[0, "v1-0-7"]], "v1.0.6": [[0, "v1-0-6"]], "v1.0.5": [[0, "v1-0-5"]], "v1.0.4": [[0, "v1-0-4"]], "v1.0.3": [[0, "v1-0-3"]], "v1.0.2": [[0, "v1-0-2"]], "v1.0.1": [[0, "v1-0-1"]], "Release Summary": [[0, "release-summary"], [0, "id36"]], "v1.0.0": [[0, "v1-0-0"]], "Ansible Collection - middleware_automation.keycloak": [[1, "ansible-collection-middleware-automation-keycloak"]], "Ansible version compatibility": [[1, "ansible-version-compatibility"]], "Installation": [[1, "installation"]], "Installing the Collection from Ansible Galaxy": [[1, "installing-the-collection-from-ansible-galaxy"]], "Included roles": [[1, "included-roles"]], "Usage": [[1, "usage"]], "Install Playbook": [[1, "install-playbook"]], "Install from controller node (local source)": [[1, "install-from-controller-node-local-source"]], "Install from alternate sources (like corporate Nexus, artifactory, proxy, etc)": [[1, "install-from-alternate-sources-like-corporate-nexus-artifactory-proxy-etc"]], "Example installation command": [[1, "example-installation-command"]], "Configuration": [[1, "configuration"]], "Config Playbook": [[1, "config-playbook"]], "Example configuration command": [[1, "example-configuration-command"]], "Support": [[1, "support"]], "License": [[1, "license"], [10, "license"], [11, "license"], [12, "license"]], "Contributor\u2019s Guidelines": [[2, "contributor-s-guidelines"]], "Welcome to Keycloak Collection documentation": [[3, "welcome-to-keycloak-collection-documentation"]], "User documentation": [[3, null]], "Developer documentation": [[3, null]], "General": [[3, null]], "Middleware collections": [[3, null]], "Plugin Index": [[4, "plugin-index"]], "modules plugins": [[4, null]], "keycloak_client \u2013 Allows administration of Keycloak clients via Keycloak API": [[5, "keycloak-client-allows-administration-of-keycloak-clients-via-keycloak-api"]], "Synopsis": [[5, "synopsis"], [6, "synopsis"], [7, "synopsis"]], "Parameters": [[5, "parameters"], [6, "parameters"], [7, "parameters"]], "Examples": [[5, "examples"], [6, "examples"], [7, "examples"]], "Return Values": [[5, "return-values"], [6, "return-values"], [7, "return-values"]], "Authors": [[5, "authors"], [6, "authors"], [7, "authors"]], "keycloak_role \u2013 Allows administration of Keycloak roles via Keycloak API": [[6, "keycloak-role-allows-administration-of-keycloak-roles-via-keycloak-api"]], "keycloak_user_federation \u2013 Allows administration of Keycloak user federations via Keycloak API": [[7, "keycloak-user-federation-allows-administration-of-keycloak-user-federations-via-keycloak-api"]], "Collection Versioning Strategy": [[8, "collection-versioning-strategy"]], "New content is added to an existing collection": [[8, "new-content-is-added-to-an-existing-collection"]], "New feature to existing plugin or role within a collection (backwards compatible)": [[8, "new-feature-to-existing-plugin-or-role-within-a-collection-backwards-compatible"]], "Bug fix or security fix to existing content within a collection": [[8, "bug-fix-or-security-fix-to-existing-content-within-a-collection"]], "Breaking change to any content within a collection": [[8, "breaking-change-to-any-content-within-a-collection"]], "Content removed from a collection": [[8, "content-removed-from-a-collection"]], "A typographical error was fixed in the documentation for a collection": [[8, "a-typographical-error-was-fixed-in-the-documentation-for-a-collection"]], "Documentation added/removed/modified within a collection": [[8, "documentation-added-removed-modified-within-a-collection"]], "Release automation": [[8, "release-automation"]], "Role Index": [[9, "role-index"]], "keycloak": [[10, "keycloak"]], "Requirements": [[10, "requirements"]], "Dependencies": [[10, "dependencies"]], "Versions": [[10, "versions"]], "Patching": [[10, "patching"]], "Role Defaults": [[10, "role-defaults"], [11, "role-defaults"], [12, "role-defaults"]], "Role Variables": [[10, "role-variables"], [11, "role-variables"], [12, "role-variables"]], "Example Playbook": [[10, "example-playbook"], [12, "example-playbook"]], "Author Information": [[10, "author-information"], [11, "author-information"], [12, "author-information"]], "keycloak_quarkus": [[11, "keycloak-quarkus"]], "keycloak_realm": [[12, "keycloak-realm"]], "Variable formats": [[12, "variable-formats"]], "Testing": [[13, "testing"]], "Continuous integration": [[13, "continuous-integration"]], "Integration testing": [[13, "integration-testing"]], "Test playbooks": [[13, "test-playbooks"]]}, "indexentries": {}})
\ No newline at end of file
diff --git a/main/testing.html b/main/testing.html
index 3f31b82..d5cbf24 100644
--- a/main/testing.html
+++ b/main/testing.html
@@ -45,6 +45,7 @@
               <p class="caption" role="heading"><span class="caption-text">User documentation</span></p>
 <ul>
 <li class="toctree-l1"><a class="reference internal" href="README.html">Ansible Collection - middleware_automation.keycloak</a></li>
+<li class="toctree-l1"><a class="reference internal" href="plugins/index.html">Plugin Index</a></li>
 <li class="toctree-l1"><a class="reference internal" href="roles/index.html">Role Index</a></li>
 </ul>
 <p class="caption" role="heading"><span class="caption-text">Developer documentation</span></p>