wip

Author: stianst

demos/spiffe-oidc/README.md

@@ -79,11 +79,12 @@ Then create a new client within the realm:
 ```bash
 ./kcadm.sh create clients -r spiffe  -f - << EOF
 {
-  "clientId": "spiffe://example.org/myclient",
+  "clientId": "myclient",
   "serviceAccountsEnabled": true,
   "clientAuthenticatorType": "federated-jwt",
   "attributes": {
-    "jwt.credential.issuer": "spiffe"
+    "jwt.credential.issuer": "spiffe",
+    "jwt.credential.sub": "spiffe://example.org/myclient",
   }
 }
 EOF

demos/spiffe/README.md

@@ -51,7 +51,7 @@ Optionally create a new realm:
   "providerId": "spiffe",
   "hideOnLogin": true,
   "config": {
-    "trustDomain": "example.org",
+    "issuer": "spiffe://example.org",
     "bundleEndpoint": "https://localhost:8543"
   }
 }
@@ -62,11 +62,12 @@ Then create a new client within the realm:
 ```bash
 ./kcadm.sh create clients -r spiffe  -f - << EOF
 {
-  "clientId": "spiffe://example.org/myclient",
+  "clientId": "myclient",
   "serviceAccountsEnabled": true,
   "clientAuthenticatorType": "federated-jwt",
   "attributes": {
     "jwt.credential.issuer": "spiffe"
+    "jwt.credential.sub": "spiffe://example.org/myclient"    
   }
 }
 EOF