Home
CA Functions
CA Activation
CA Structure & CRLs
Certificate Profiles
Certification Authorities
Crypto Tokens
Publishers
Validators
RA Functions
Add End Entity
End Entity Profiles
Search End Entities
VA Functions
OCSP Responders
Supervision Functions
Approval Profiles
Approve Actions
System Functions
Roles and Access Rules
Remote Authentication
Services
System Configuration
CMP Configuration
SCEP Configuration
System Configuration
My Preferences
RA Web
Members
Role : Operator
Back to Roles Management
Edit Access Rules
Match with
X509: C, Country
X509: DC, Domain Component
X509: ST, State or Province
X509: L, Locality
X509: O, Organization
X509: OU, Organizational Unit
X509: title, Title
X509: CN, Common name
X509: UID, User identifier
X509: serialNumber, Serial number in DN
X509: Certificate serial number (Recommended)
X509: E, E-mail address in DN
X509: RFC 822 Name (e-mail address)
X509: MS UPN, User Principal Name
X509: With full DN
X509: Any certificate issued by CA
CLI: Username
OAuth 2 JWT: Subject ("sub") claim
OAuth 2 JWT: Issuer ("iss") claim
OAuth 2 JWT: Audience ("aud") claim
OAuth 2 JWT: Object ID ("oid") claim
OAuth 2 JWT: Roles ("roles") claim
PublicAccessAuthenticationToken: Any transport (HTTP or HTTPS)
PublicAccessAuthenticationToken: Non-confidential transport (HTTP)
PublicAccessAuthenticationToken: Confidential transport (HTTPS)
CA
ManagementCA
MKP Issuing CA G1
MKP Root CA G1
OAuth Provider
Match Operator
Match Value
Description
Action
OAuth 2 JWT: Roles ("roles") claim
-
mykeypair-keycloak
Equal, case sens.
ejbca-ra-user
Keycloak OIDC RA operators (Voss)