@rockcarver/frodo-lib 0.16.2-2 → 0.16.2-3

package/esm/test/mocks/AgentApi/getAgents/agents.json

@@ -0,0 +1,3862 @@
+{
+  "result": [
+      {
+          "miscWebAgentConfig": {
+              "anonymousUserId": "anonymous",
+              "profileAttributesCookieMaxAge": 300,
+              "urlJsonResponse": [
+                  ""
+              ],
+              "caseInsensitiveUrlComparison": true,
+              "compositeAdviceRedirect": false,
+              "compositeAdviceEncode": false,
+              "addCacheControlHeader": true,
+              "anonymousUserEnabled": false,
+              "invalidUrlRegex": null,
+              "ignorePathInfo": false,
+              "invertUrlJsonResponse": false,
+              "statusCodeJsonResponse": 202,
+              "headerJsonResponse": {},
+              "encodeSpecialCharsInCookies": false,
+              "gotoParameterName": "goto",
+              "encodeUrlSpecialCharacters": false,
+              "mineEncodeHeader": 0,
+              "profileAttributesCookiePrefix": "HTTP_"
+          },
+          "ssoWebAgentConfig": {
+              "cookieResetList": [
+                  ""
+              ],
+              "cdssoRedirectUri": "agent/cdsso-oauth2",
+              "persistentJwtCookie": false,
+              "acceptSsoToken": false,
+              "secureCookies": false,
+              "cookieResetOnRedirect": false,
+              "sameSite": null,
+              "cdssoCookieDomain": [
+                  ""
+              ],
+              "cookieResetEnabled": false,
+              "cookieName": "iPlanetDirectoryPro",
+              "multivaluePreAuthnCookie": false,
+              "httpOnly": true
+          },
+          "advancedWebAgentConfig": {
+              "overrideRequestHost": true,
+              "pdpSkipPostUrl": [
+                  ""
+              ],
+              "pdpStickySessionValue": null,
+              "postDataPreservation": false,
+              "hostnameToIpAddress": [],
+              "showPasswordInHeader": false,
+              "overrideRequestProtocol": true,
+              "clientIpHeader": null,
+              "replayPasswordKey": null,
+              "customProperties": [],
+              "postDataCachePeriod": 10,
+              "retainSessionCache": false,
+              "pdpJavascriptRepost": false,
+              "pdpStickySessionMode": "OFF",
+              "overrideRequestPort": true,
+              "apacheAuthDirectives": null,
+              "fragmentRedirectEnabled": false,
+              "clientHostnameHeader": null,
+              "pdpStickySessionCookieName": null,
+              "logonAndImpersonation": false
+          },
+          "amServicesWebAgent": {
+              "policyClockSkew": 0,
+              "enableLogoutRegex": false,
+              "policyEvaluationRealm": "/alpha",
+              "fetchPoliciesFromRootResource": false,
+              "logoutUrlRegex": null,
+              "conditionalLoginUrl": [
+                  "mytestrun.com|https://idc.scheuber.io:443/am/oauth2/authorize?realm=/alpha"
+              ],
+              "customLoginMode": 0,
+              "invalidateLogoutSession": true,
+              "logoutResetCookies": [
+                  ""
+              ],
+              "logoutRedirectUrl": null,
+              "regexConditionalLoginUrl": [
+                  ""
+              ],
+              "policyCachePollingInterval": 3,
+              "regexConditionalLoginPattern": [
+                  ""
+              ],
+              "logoutRedirectDisabled": false,
+              "retrieveClientHostname": false,
+              "applicationLogoutUrls": [
+                  ""
+              ],
+              "userIdParameterType": "session",
+              "publicAmUrl": null,
+              "userIdParameter": "UserToken",
+              "amLoginUrl": [
+                  "https://idc.scheuber.io/login?realm=/alpha"
+              ],
+              "policyEvaluationApplication": "apps",
+              "amLogoutUrl": [
+                  "https://idc.scheuber.io:443/am/UI/Logout"
+              ],
+              "ssoCachePollingInterval": 3
+          },
+          "applicationWebAgentConfig": {
+              "profileAttributeFetchMode": "NONE",
+              "clientIpValidation": false,
+              "notEnforcedIpsRegex": false,
+              "continuousSecurityCookies": {},
+              "fetchAttributesForNotEnforcedUrls": false,
+              "ignorePathInfoForNotEnforcedUrls": true,
+              "responseAttributeFetchMode": "NONE",
+              "attributeMultiValueSeparator": "|",
+              "profileAttributeMap": {},
+              "sessionAttributeFetchMode": "NONE",
+              "continuousSecurityHeaders": {},
+              "notEnforcedIpsList": [
+                  ""
+              ],
+              "responseAttributeMap": {},
+              "notEnforcedUrls": [
+                  "",
+                  "https://apps.mytestrun.com/app1/*"
+              ],
+              "sessionAttributeMap": {},
+              "notEnforcedUrlsRegex": false,
+              "invertNotEnforcedUrls": false,
+              "notEnforcedIps": [
+                  ""
+              ]
+          },
+          "globalWebAgentConfig": {
+              "agentDebugLevel": "Info",
+              "fqdnDefault": "apps.mytestrun.com",
+              "userpassword": null,
+              "webSocketConnectionIntervalInMinutes": 30,
+              "status": "Active",
+              "configurationPollingInterval": 60,
+              "auditLogLocation": "ALL",
+              "fqdnCheck": false,
+              "amLbCookieEnable": false,
+              "fqdnMapping": {},
+              "accessDeniedUrl": null,
+              "resetIdleTime": false,
+              "auditAccessType": "LOG_BOTH",
+              "ssoOnlyMode": false,
+              "notificationsEnabled": true,
+              "agentUriPrefix": "https://apps.mytestrun.com:443/amagent",
+              "disableJwtAudit": false,
+              "jwtName": "am-auth-jwt",
+              "repositoryLocation": "centralized",
+              "cdssoRootUrl": [
+                  "agentRootURL=https://apps.mytestrun.com:443/"
+              ],
+              "agentConfigChangeNotificationsEnabled": true,
+              "jwtAuditWhitelist": null
+          },
+          "_id": "apacheagent",
+          "_type": {
+              "_id": "WebAgent",
+              "name": "Web Agents",
+              "collection": true
+          }
+      },
+      {
+          "miscWebAgentConfig": {
+              "anonymousUserId": "anonymous",
+              "profileAttributesCookieMaxAge": 300,
+              "urlJsonResponse": [
+                  ""
+              ],
+              "caseInsensitiveUrlComparison": true,
+              "compositeAdviceRedirect": false,
+              "compositeAdviceEncode": false,
+              "addCacheControlHeader": false,
+              "anonymousUserEnabled": false,
+              "invalidUrlRegex": null,
+              "ignorePathInfo": false,
+              "invertUrlJsonResponse": false,
+              "statusCodeJsonResponse": 202,
+              "headerJsonResponse": {},
+              "encodeSpecialCharsInCookies": false,
+              "gotoParameterName": "goto",
+              "encodeUrlSpecialCharacters": false,
+              "mineEncodeHeader": 0,
+              "profileAttributesCookiePrefix": "HTTP_"
+          },
+          "advancedWebAgentConfig": {
+              "overrideRequestHost": false,
+              "pdpSkipPostUrl": [
+                  ""
+              ],
+              "pdpStickySessionValue": null,
+              "postDataPreservation": false,
+              "hostnameToIpAddress": [],
+              "showPasswordInHeader": false,
+              "overrideRequestProtocol": false,
+              "clientIpHeader": null,
+              "replayPasswordKey": null,
+              "customProperties": [],
+              "postDataCachePeriod": 10,
+              "retainSessionCache": false,
+              "pdpJavascriptRepost": false,
+              "pdpStickySessionMode": "OFF",
+              "overrideRequestPort": false,
+              "apacheAuthDirectives": null,
+              "clientHostnameHeader": null,
+              "fragmentRedirectEnabled": false,
+              "pdpStickySessionCookieName": null,
+              "logonAndImpersonation": false
+          },
+          "ssoWebAgentConfig": {
+              "cookieResetList": [
+                  ""
+              ],
+              "cdssoRedirectUri": "agent/cdsso-oauth2",
+              "persistentJwtCookie": false,
+              "secureCookies": false,
+              "acceptSsoToken": false,
+              "cookieResetOnRedirect": false,
+              "sameSite": null,
+              "cdssoCookieDomain": [
+                  ""
+              ],
+              "cookieResetEnabled": false,
+              "cookieName": "iPlanetDirectoryPro",
+              "multivaluePreAuthnCookie": false,
+              "httpOnly": true
+          },
+          "amServicesWebAgent": {
+              "policyClockSkew": 0,
+              "enableLogoutRegex": false,
+              "policyEvaluationRealm": "/alpha",
+              "fetchPoliciesFromRootResource": false,
+              "logoutUrlRegex": null,
+              "conditionalLoginUrl": [
+                  "|https://openam-volker-dev.forgeblocks.com:443/am/oauth2/authorize?realm=/alpha"
+              ],
+              "customLoginMode": 0,
+              "invalidateLogoutSession": true,
+              "logoutResetCookies": [
+                  ""
+              ],
+              "logoutRedirectUrl": null,
+              "regexConditionalLoginUrl": [
+                  ""
+              ],
+              "policyCachePollingInterval": 3,
+              "regexConditionalLoginPattern": [
+                  ""
+              ],
+              "logoutRedirectDisabled": false,
+              "retrieveClientHostname": false,
+              "applicationLogoutUrls": [
+                  ""
+              ],
+              "userIdParameterType": "session",
+              "publicAmUrl": null,
+              "userIdParameter": "UserToken",
+              "amLoginUrl": [],
+              "policyEvaluationApplication": null,
+              "amLogoutUrl": [
+                  "https://openam-volker-dev.forgeblocks.com:443/am/UI/Logout"
+              ],
+              "ssoCachePollingInterval": 3
+          },
+          "applicationWebAgentConfig": {
+              "profileAttributeFetchMode": "NONE",
+              "clientIpValidation": false,
+              "notEnforcedIpsRegex": false,
+              "continuousSecurityCookies": {},
+              "fetchAttributesForNotEnforcedUrls": false,
+              "ignorePathInfoForNotEnforcedUrls": true,
+              "responseAttributeFetchMode": "NONE",
+              "attributeMultiValueSeparator": "|",
+              "profileAttributeMap": {},
+              "sessionAttributeFetchMode": "NONE",
+              "continuousSecurityHeaders": {},
+              "notEnforcedIpsList": [
+                  ""
+              ],
+              "responseAttributeMap": {},
+              "notEnforcedUrls": [
+                  ""
+              ],
+              "sessionAttributeMap": {},
+              "notEnforcedUrlsRegex": false,
+              "invertNotEnforcedUrls": false,
+              "notEnforcedIps": [
+                  ""
+              ]
+          },
+          "globalWebAgentConfig": {
+              "agentDebugLevel": "Error",
+              "fqdnDefault": "www.mytestrun.com",
+              "userpassword": null,
+              "webSocketConnectionIntervalInMinutes": 30,
+              "status": "Active",
+              "configurationPollingInterval": 60,
+              "auditLogLocation": "REMOTE",
+              "fqdnCheck": false,
+              "amLbCookieEnable": false,
+              "fqdnMapping": {},
+              "accessDeniedUrl": null,
+              "resetIdleTime": false,
+              "ssoOnlyMode": false,
+              "auditAccessType": "LOG_NONE",
+              "agentgroup": null,
+              "notificationsEnabled": true,
+              "agentUriPrefix": "https://www.mytestrun.com:443/amagent",
+              "disableJwtAudit": false,
+              "jwtName": "am-auth-jwt",
+              "repositoryLocation": "centralized",
+              "cdssoRootUrl": [
+                  "agentRootURL=https://www.mytestrun.com:443/"
+              ],
+              "agentConfigChangeNotificationsEnabled": true,
+              "jwtAuditWhitelist": null
+          },
+          "_id": "webserver",
+          "_type": {
+              "_id": "WebAgent",
+              "name": "Web Agents",
+              "collection": true
+          }
+      },
+      {
+          "ssoJ2EEAgentConfig": {
+              "encodeCookies": false,
+              "cookieResetDomains": {},
+              "authExchangeUri": null,
+              "authExchangeCookieName": null,
+              "setCookieInternalMap": {},
+              "excludedUserAgentsList": [],
+              "cdssoRedirectUri": "/agent/post-authn-redirect",
+              "cookieResetPaths": {},
+              "cdssoSecureCookies": false,
+              "acceptSsoTokenEnabled": false,
+              "acceptSsoTokenDomainList": [
+                  ""
+              ],
+              "cdssoDomainList": [
+                  ""
+              ],
+              "setCookieAttributeMap": {},
+              "cookieResetEnabled": false,
+              "cookieResetNames": [
+                  ""
+              ],
+              "acceptIPDPCookie": false,
+              "httpOnly": true
+          },
+          "amServicesJ2EEAgent": {
+              "urlPolicyEnvPostParameters": [
+                  ""
+              ],
+              "policyEvaluationRealm": "/",
+              "authServiceHost": "openam-volker-dev.forgeblocks.com",
+              "policyNotifications": true,
+              "conditionalLoginUrl": [
+                  ""
+              ],
+              "customLoginEnabled": false,
+              "legacyLoginUrlList": [
+                  ""
+              ],
+              "agentAdviceEncode": false,
+              "authServicePort": 443,
+              "urlPolicyEnvGetParameters": [
+                  ""
+              ],
+              "restrictToRealm": {},
+              "urlPolicyEnvJsessionParameters": [
+                  ""
+              ],
+              "amLoginUrl": [],
+              "conditionalLogoutUrl": [
+                  ""
+              ],
+              "authServiceProtocol": "https",
+              "policyEvaluationApplication": "iPlanetAMWebAgentService",
+              "authSuccessRedirectUrl": false,
+              "overridePolicyEvaluationRealmEnabled": false
+          },
+          "globalJ2EEAgentConfig": {
+              "userTokenName": "UserToken",
+              "fqdnDefault": "openam-volker-dev.forgeblocks.com",
+              "httpSessionBinding": true,
+              "userpassword": null,
+              "webSocketConnectionIntervalInMinutes": 30,
+              "localAuditLogRotation": false,
+              "filterMode": {
+                  "": "ALL"
+              },
+              "debugLogfileRotationSize": 52428800,
+              "status": "Active",
+              "debugLevel": "error",
+              "lbCookieName": "amlbcookie",
+              "auditLogLocation": "REMOTE",
+              "lbCookieEnabled": false,
+              "userPrincipalFlag": false,
+              "fqdnCheck": false,
+              "preAuthCookieMaxAge": 300,
+              "localAuditRotationSize": 52428800,
+              "fqdnMapping": {},
+              "debugLogfileRotationMinutes": -1,
+              "loginAttemptLimit": 0,
+              "auditAccessType": "LOG_NONE",
+              "redirectAttemptLimitCookieName": "amFilterRDParam",
+              "debugLogfileRetentionCount": -1,
+              "configurationReloadInterval": 0,
+              "agentgroup": null,
+              "debugLogfileSuffix": "-yyyy.MM.dd-HH.mm.ss",
+              "userAttributeName": "employeenumber",
+              "localAuditLogfileRetentionCount": -1,
+              "customResponseHeader": {},
+              "redirectAttemptLimit": 0,
+              "userMappingMode": "USER_ID",
+              "jwtName": "am-auth-jwt",
+              "repositoryLocation": "centralized",
+              "loginAttemptLimitCookieName": "amFilterParam",
+              "cdssoRootUrl": [
+                  "agentRootURL=https://openam-volker-dev.forgeblocks.com:443/"
+              ],
+              "agentConfigChangeNotificationsEnabled": true,
+              "debugLogfilePrefix": null,
+              "preAuthCookieName": "amFilterCDSSORequest"
+          },
+          "applicationJ2EEAgentConfig": {
+              "profileAttributeFetchMode": "NONE",
+              "notEnforcedUris": [
+                  ""
+              ],
+              "notEnforcedIpsCacheEnabled": true,
+              "logoutIntrospection": false,
+              "invertNotEnforcedUris": false,
+              "cookieAttributeUrlEncoded": true,
+              "cookieAttributeMultiValueSeparator": "|",
+              "notEnforcedRuleCompoundSeparator": "|",
+              "logoutRequestParameters": {},
+              "resourceAccessDeniedUri": {},
+              "continuousSecurityCookies": {},
+              "responseAttributeFetchMode": "NONE",
+              "notEnforcedUrisCacheEnabled": true,
+              "headerAttributeDateFormat": "EEE, d MMM yyyy hh:mm:ss z",
+              "profileAttributeMap": {},
+              "sessionAttributeFetchMode": "NONE",
+              "continuousSecurityHeaders": {},
+              "responseAttributeMap": {},
+              "notEnforcedUrisCacheSize": 1000,
+              "invertNotEnforcedIps": false,
+              "sessionAttributeMap": {},
+              "clientIpValidationRange": {},
+              "notEnforcedIpsCacheSize": 1000,
+              "clientIpValidationMode": {
+                  "": "OFF"
+              },
+              "notEnforcedFavicon": true,
+              "logoutEntryUri": {},
+              "notEnforcedIps": [
+                  ""
+              ],
+              "applicationLogoutUris": {}
+          },
+          "advancedJ2EEAgentConfig": {
+              "postDataStickySessionKeyValue": null,
+              "xssDetectionRedirectUri": {},
+              "postDataCacheTtlMin": 5,
+              "jwtCacheSize": 5000,
+              "postDataPreservation": false,
+              "policyCacheSize": 5000,
+              "postDataPreserveCacheEntryMaxEntries": 1000,
+              "postDataPreserveCacheEntryMaxTotalSizeMb": -1,
+              "ssoExchangeCacheSize": 100,
+              "sessionCacheTTL": 15,
+              "idleTimeRefreshWindow": 1,
+              "ssoExchangeCacheTTL": 5,
+              "possibleXssCodeElements": [
+                  ""
+              ],
+              "alternativeAgentPort": null,
+              "policyClientPollingInterval": 3,
+              "missingPostDataPreservationEntryUri": [
+                  ""
+              ],
+              "clientIpHeader": null,
+              "alternativeAgentProtocol": null,
+              "jwtCacheTTL": 30,
+              "customProperties": [],
+              "policyCachePerUser": 50,
+              "expiredSessionCacheTTL": 20,
+              "fragmentRelayUri": null,
+              "postDataStickySessionMode": "URL",
+              "alternativeAgentHostname": null,
+              "expiredSessionCacheSize": 500,
+              "clientHostnameHeader": null,
+              "monitoringToCSV": false
+          },
+          "miscJ2EEAgentConfig": {
+              "legacyUserAgentList": [
+                  "Mozilla/4.7*"
+              ],
+              "loginReasonMap": {},
+              "authFailReasonParameterRemapper": {},
+              "agent302RedirectStatusCode": 200,
+              "loginReasonParameterName": null,
+              "gotoUrl": null,
+              "localeLanguage": "en",
+              "authFailReasonParameterName": null,
+              "unwantedHttpUrlParams": [
+                  ""
+              ],
+              "agent302RedirectContentType": "application/json",
+              "agent302RedirectEnabled": true,
+              "legacyUserAgentSupport": false,
+              "wantedHttpUrlParams": [
+                  ""
+              ],
+              "ignorePathInfo": false,
+              "agent302RedirectInvertEnabled": false,
+              "wantedHttpUrlRegexParams": [
+                  ""
+              ],
+              "localeCountry": "US",
+              "agent302RedirectHttpData": "{redirect:{requestUri:%REQUEST_URI%,requestUrl:%REQUEST_URL%,targetUrl:%TARGET%}}",
+              "agent302RedirectNerList": [
+                  ""
+              ],
+              "legacyRedirectUri": "/agent/sunwLegacySupportURI",
+              "portCheckFile": "PortCheckContent.txt",
+              "authFailReasonUrl": null,
+              "gotoParameterName": "goto",
+              "portCheckSetting": {
+                  "443": "https"
+              },
+              "unwantedHttpUrlRegexParams": [
+                  ""
+              ],
+              "portCheckEnabled": false
+          },
+          "_id": "javaAgent",
+          "_type": {
+              "_id": "J2EEAgent",
+              "name": "J2EE Agents",
+              "collection": true
+          }
+      },
+      {
+          "ssoJ2EEAgentConfig": {
+              "encodeCookies": false,
+              "cookieResetDomains": {},
+              "authExchangeUri": null,
+              "authExchangeCookieName": null,
+              "setCookieInternalMap": {},
+              "excludedUserAgentsList": [],
+              "cdssoRedirectUri": "/agentapp/post-authn-redirect",
+              "cookieResetPaths": {},
+              "cdssoSecureCookies": false,
+              "acceptSsoTokenEnabled": false,
+              "acceptSsoTokenDomainList": [
+                  ""
+              ],
+              "cdssoDomainList": [
+                  ""
+              ],
+              "setCookieAttributeMap": {},
+              "cookieResetEnabled": false,
+              "cookieResetNames": [
+                  ""
+              ],
+              "acceptIPDPCookie": false,
+              "httpOnly": true
+          },
+          "amServicesJ2EEAgent": {
+              "urlPolicyEnvPostParameters": [
+                  ""
+              ],
+              "policyEvaluationRealm": "/alpha",
+              "authServiceHost": "openam-volker-dev.forgeblocks.com",
+              "policyNotifications": true,
+              "conditionalLoginUrl": [
+                  "|?realm=/alpha"
+              ],
+              "customLoginEnabled": false,
+              "legacyLoginUrlList": [
+                  ""
+              ],
+              "agentAdviceEncode": false,
+              "authServicePort": 443,
+              "urlPolicyEnvGetParameters": [
+                  ""
+              ],
+              "restrictToRealm": {},
+              "urlPolicyEnvJsessionParameters": [
+                  ""
+              ],
+              "amLoginUrl": [],
+              "conditionalLogoutUrl": [
+                  ""
+              ],
+              "authServiceProtocol": "https",
+              "policyEvaluationApplication": "apps",
+              "authSuccessRedirectUrl": false,
+              "overridePolicyEvaluationRealmEnabled": false
+          },
+          "globalJ2EEAgentConfig": {
+              "userTokenName": "UserToken",
+              "fqdnDefault": "apps2.mytestrun.com",
+              "recheckAmUnavailabilityInSeconds": 5,
+              "httpSessionBinding": true,
+              "userpassword": null,
+              "webSocketConnectionIntervalInMinutes": 30,
+              "localAuditLogRotation": false,
+              "filterMode": {
+                  "": "URL_POLICY"
+              },
+              "debugLogfileRotationSize": 52428800,
+              "status": "Active",
+              "debugLevel": "message",
+              "lbCookieName": "amlbcookie",
+              "auditLogLocation": "ALL",
+              "lbCookieEnabled": false,
+              "userPrincipalFlag": false,
+              "fqdnCheck": false,
+              "preAuthCookieMaxAge": 300,
+              "localAuditRotationSize": 52428800,
+              "fqdnMapping": {},
+              "debugLogfileRotationMinutes": -1,
+              "loginAttemptLimit": 0,
+              "auditAccessType": "LOG_NONE",
+              "redirectAttemptLimitCookieName": "amFilterRDParam",
+              "debugLogfileRetentionCount": -1,
+              "configurationReloadInterval": 10,
+              "agentgroup": null,
+              "debugLogfileSuffix": "-yyyy.MM.dd-HH.mm.ss",
+              "userAttributeName": "uid",
+              "localAuditLogfileRetentionCount": -1,
+              "customResponseHeader": {},
+              "redirectAttemptLimit": 0,
+              "userMappingMode": "USER_ID",
+              "jwtName": "am-auth-jwt",
+              "repositoryLocation": "centralized",
+              "loginAttemptLimitCookieName": "amFilterParam",
+              "cdssoRootUrl": [
+                  "agentRootURL=http://localhost:8080/",
+                  "agentRootURL=https://apps2.mytestrun.com:443/"
+              ],
+              "agentConfigChangeNotificationsEnabled": false,
+              "debugLogfilePrefix": null,
+              "preAuthCookieName": "amFilterCDSSORequest"
+          },
+          "applicationJ2EEAgentConfig": {
+              "profileAttributeFetchMode": "NONE",
+              "notEnforcedUris": [
+                  ""
+              ],
+              "notEnforcedIpsCacheEnabled": true,
+              "logoutIntrospection": false,
+              "invertNotEnforcedUris": false,
+              "cookieAttributeUrlEncoded": true,
+              "cookieAttributeMultiValueSeparator": "|",
+              "notEnforcedRuleCompoundSeparator": "|",
+              "logoutRequestParameters": {},
+              "resourceAccessDeniedUri": {},
+              "continuousSecurityCookies": {},
+              "responseAttributeFetchMode": "NONE",
+              "notEnforcedUrisCacheEnabled": true,
+              "headerAttributeDateFormat": "EEE, d MMM yyyy hh:mm:ss z",
+              "profileAttributeMap": {},
+              "sessionAttributeFetchMode": "NONE",
+              "continuousSecurityHeaders": {},
+              "responseAttributeMap": {},
+              "notEnforcedUrisCacheSize": 1000,
+              "invertNotEnforcedIps": false,
+              "sessionAttributeMap": {},
+              "clientIpValidationRange": {},
+              "notEnforcedIpsCacheSize": 1000,
+              "clientIpValidationMode": {
+                  "": "OFF"
+              },
+              "notEnforcedFavicon": true,
+              "logoutEntryUri": {},
+              "notEnforcedIps": [
+                  ""
+              ],
+              "applicationLogoutUris": {}
+          },
+          "advancedJ2EEAgentConfig": {
+              "postDataStickySessionKeyValue": null,
+              "xssDetectionRedirectUri": {},
+              "postDataCacheTtlMin": 5,
+              "jwtCacheSize": 5000,
+              "postDataPreservation": false,
+              "policyCacheSize": 5000,
+              "postDataPreserveCacheEntryMaxEntries": 1000,
+              "postDataPreserveCacheEntryMaxTotalSizeMb": -1,
+              "ssoExchangeCacheSize": 100,
+              "sessionCacheTTL": 15,
+              "idleTimeRefreshWindow": 1,
+              "ssoExchangeCacheTTL": 5,
+              "possibleXssCodeElements": [
+                  ""
+              ],
+              "alternativeAgentPort": null,
+              "policyClientPollingInterval": 3,
+              "missingPostDataPreservationEntryUri": [
+                  ""
+              ],
+              "clientIpHeader": null,
+              "alternativeAgentProtocol": null,
+              "jwtCacheTTL": 30,
+              "customProperties": [],
+              "policyCachePerUser": 50,
+              "expiredSessionCacheTTL": 20,
+              "fragmentRelayUri": null,
+              "postDataStickySessionMode": "URL",
+              "alternativeAgentHostname": null,
+              "expiredSessionCacheSize": 500,
+              "clientHostnameHeader": null,
+              "monitoringToCSV": false
+          },
+          "miscJ2EEAgentConfig": {
+              "legacyUserAgentList": [
+                  "Mozilla/4.7*"
+              ],
+              "loginReasonMap": {},
+              "authFailReasonParameterRemapper": {},
+              "agent302RedirectStatusCode": 200,
+              "loginReasonParameterName": null,
+              "gotoUrl": null,
+              "localeLanguage": "en",
+              "authFailReasonParameterName": null,
+              "unwantedHttpUrlParams": [
+                  ""
+              ],
+              "agent302RedirectContentType": "application/json",
+              "agent302RedirectEnabled": true,
+              "legacyUserAgentSupport": false,
+              "wantedHttpUrlParams": [
+                  ""
+              ],
+              "ignorePathInfo": false,
+              "agent302RedirectInvertEnabled": false,
+              "wantedHttpUrlRegexParams": [
+                  ""
+              ],
+              "localeCountry": "US",
+              "agent302RedirectHttpData": "{redirect:{requestUri:%REQUEST_URI%,requestUrl:%REQUEST_URL%,targetUrl:%TARGET%}}",
+              "agent302RedirectNerList": [
+                  ""
+              ],
+              "legacyRedirectUri": "/app1/sunwLegacySupportURI",
+              "portCheckFile": "PortCheckContent.txt",
+              "authFailReasonUrl": null,
+              "gotoParameterName": "goto",
+              "portCheckSetting": {
+                  "443": "https"
+              },
+              "unwantedHttpUrlRegexParams": [
+                  ""
+              ],
+              "portCheckEnabled": false
+          },
+          "_id": "tomcatagent",
+          "_type": {
+              "_id": "J2EEAgent",
+              "name": "J2EE Agents",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "openid",
+                  "email",
+                  "profile"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://paloalto.catalyst.forgerock.org/login",
+                  "https://paloalto.catalyst.forgerock.org/am/XUI"
+              ],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [
+                  "https://paloalto.catalyst.forgerock.org",
+                  "https://paloalto.catalyst.forgerock.org:443"
+              ],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "client_credentials",
+                  "refresh_token",
+                  "password",
+                  "urn:ietf:params:oauth:grant-type:uma-ticket",
+                  "implicit",
+                  "urn:ietf:params:oauth:grant-type:device_code",
+                  "urn:ietf:params:oauth:grant-type:saml2-bearer",
+                  "urn:openid:params:grant-type:ciba",
+                  "urn:ietf:params:oauth:grant-type:token-exchange",
+                  "urn:ietf:params:oauth:grant-type:jwt-bearer"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "poc",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "agentgroup": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "fr:idm:*",
+                  "openid"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com/admin/appAuthHelperRedirect.html",
+                  "https://openam-volker-dev.forgeblocks.com/admin/sessionCheck.html",
+                  "https://openam-volker-dev.forgeblocks.com/platform/appAuthHelperRedirect.html",
+                  "https://openam-volker-dev.forgeblocks.com/platform/sessionCheck.html",
+                  "https://idc.mytestrun.com/admin/appAuthHelperRedirect.html",
+                  "https://idc.mytestrun.com/admin/sessionCheck.html",
+                  "https://idc.mytestrun.com/platform/appAuthHelperRedirect.html",
+                  "https://idc.mytestrun.com/platform/sessionCheck.html",
+                  "https://idc.scheuber.io/admin/appAuthHelperRedirect.html",
+                  "https://idc.scheuber.io/admin/sessionCheck.html",
+                  "https://idc.scheuber.io/platform/appAuthHelperRedirect.html",
+                  "https://idc.scheuber.io/platform/sessionCheck.html"
+              ],
+              "clientName": [],
+              "clientType": "Public",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token",
+                  "code token",
+                  "token id_token",
+                  "code id_token",
+                  "code token id_token",
+                  "device_code",
+                  "device_code id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "sectorIdentifierUri": null,
+              "tokenEndpointAuthMethod": "none",
+              "isConsentImplied": true,
+              "grantTypes": [
+                  "authorization_code",
+                  "implicit"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": "http://am:80/am/oauth2/connect/jwk_uri",
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": []
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "idmAdminClient",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "openid",
+                  "fr:idm:*"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": false,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "client_credentials",
+                  "refresh_token"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "0bf0d4fc-6273-4e8e-a2ce-899df2ee96d4",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "agentgroup": null,
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "fr:idm:*",
+                  "openid"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "Public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token",
+                  "code token",
+                  "token id_token",
+                  "code id_token",
+                  "code token id_token",
+                  "device_code",
+                  "device_code id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "sectorIdentifierUri": null,
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": false,
+              "grantTypes": [
+                  "client_credentials",
+                  "idm_delegation"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": "http://am:80/am/oauth2/connect/jwk_uri",
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": []
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "idm-provisioning",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "openid",
+                  "profile",
+                  "email"
+              ],
+              "status": "Inactive",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": false,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "client_credentials",
+                  "refresh_token",
+                  "urn:ietf:params:oauth:grant-type:token-exchange",
+                  "password"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "postman2",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "signEncOAuth2ClientConfig": {
+              "userinfoResponseFormat": "JSON",
+              "mTLSCertificateBoundAccessTokens": false,
+              "publicKeyLocation": "x509",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionEnabled": false,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "userinfoEncryptedResponseEncryptionAlgorithm": null,
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 1,
+              "defaultAcrValues": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreOAuth2ClientConfig": {
+              "scopes": [
+                  "openid",
+                  "profile"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "clientName": [
+                  "ja-jpan-jp|クライアント名",
+                  "en|Vlad1"
+              ],
+              "clientType": "Confidential",
+              "defaultScopes": [],
+              "userpassword": null,
+              "authorizationCodeLifetime": 0,
+              "refreshTokenLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "subjectType": "public",
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "responseTypes": [
+                  "code",
+                  "id_token code"
+              ],
+              "updateAccessToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxNWUzYzdmNy00YzliLTQ5YjQtOWQ3OC1mYzJhYTc0ZWYzMzgiLCJjdHMiOiJPQVVUSDJfR1JBTlRfU0VUIiwiYXVkaXRUcmFja2luZ0lkIjoiYjU4ZmZlZDQtZTkxNy00MjJkLTg2NjktNzNkNTIwMjVjYTMyLTE1NjQ4MyIsInN1Ym5hbWUiOiIxNWUzYzdmNy00YzliLTQ5YjQtOWQ3OC1mYzJhYTc0ZWYzMzgiLCJpc3MiOiJodHRwczovL29wZW5hbS12b2xrZXItZGV2LmZvcmdlYmxvY2tzLmNvbTo0NDMvYW0vb2F1dGgyL2FscGhhIiwidG9rZW5OYW1lIjoiYWNjZXNzX3Rva2VuIiwidG9rZW5fdHlwZSI6IkJlYXJlciIsImF1dGhHcmFudElkIjoiUl9Yckp1cDRub0xlZnlyQ2taT0M3VnhBYmwwLmFlUU1VaV9hZHp0Qk5WRGlzcjJVdGpIVmpodyIsImF1ZCI6IjE1ZTNjN2Y3LTRjOWItNDliNC05ZDc4LWZjMmFhNzRlZjMzOCIsIm5iZiI6MTY0NjcxMDkxMywiZ3JhbnRfdHlwZSI6ImR5bmFtaWNfY2xpZW50X3JlZ2lzdHJhdGlvbiIsInNjb3BlIjpbXSwiYXV0aF90aW1lIjoxNjQ2NzEwOTEzLCJyZWFsbSI6Ii9hbHBoYSIsImV4cCI6MTY0NjcxNDUxMywiaWF0IjoxNjQ2NzEwOTEzLCJleHBpcmVzX2luIjozNjAwLCJqdGkiOiJSX1hySnVwNG5vTGVmeXJDa1pPQzdWeEFibDAuWWNudlRWZl9MVE94WDhLam9USFFuc2RzODZVIiwibWF5X2FjdCI6eyJjbGllbnRfaWQiOltudWxsXX19.JrZnqFW4cBoGnKu8d7Jzz6_iZX9JiMyo1jy2xGmwLH4",
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "_id": "15e3c7f7-4c9b-49b4-9d78-fc2aa74ef338",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "openid",
+                  "fr:idm:*",
+                  "profile",
+                  "email",
+                  "givenName",
+                  "sn",
+                  "uid",
+                  "am-introspect-all-tokens",
+                  "sg-bcbs",
+                  "fr:idc:esv:*"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com",
+                  "https://idc.scheuber.io/enduser?realm=/alpha"
+              ],
+              "clientName": [
+                  "postman"
+              ],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [
+                  "Postman Client"
+              ],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [
+                  "https://idc.scheuber.io",
+                  "https://idc.scheuber.io:443",
+                  "https://openam-volker-dev.forgeblocks.com",
+                  "https://openam-volker-dev.forgeblocks.com:443"
+              ],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "client_credentials",
+                  "password",
+                  "urn:ietf:params:oauth:grant-type:token-exchange",
+                  "implicit",
+                  "refresh_token"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": []
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "postman",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [
+                  "profile",
+                  "openid",
+                  "email"
+              ],
+              "refreshTokenLifetime": 604800,
+              "scopes": [
+                  "openid",
+                  "profile",
+                  "email"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 3600,
+              "redirectionUris": [
+                  "http://localhost:3000/callback",
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "clientName": [],
+              "clientType": "Public",
+              "authorizationCodeLifetime": 120
+          },
+          "advancedOAuth2ClientConfig": {
+              "require_pushed_authorization_requests": false,
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "pairwise",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [
+                  "http://localhost:3000",
+                  "https://openam-volker-dev.forgeblocks.com",
+                  "https://openam-volker-dev.forgeblocks.com:443"
+              ],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "none",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "remoteConsentServiceId": null,
+              "tokenEncryptionEnabled": false,
+              "enableRemoteConsent": false,
+              "oidcMayActScript": "[Empty]",
+              "usePolicyEngineForScope": false,
+              "oidcClaimsScript": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
+              "providerOverridesEnabled": false,
+              "issueRefreshTokenOnRefreshedToken": true,
+              "statelessTokensEnabled": false
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 3600,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "WebOAuthClient",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "openid",
+                  "fr:idm:*"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": false,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "client_credentials",
+                  "refresh_token"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "c5f3cf35-4cc1-42f9-80b3-59e1ca842510",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "agentgroup": null,
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "openid"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": false,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "client_credentials",
+                  "refresh_token"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "super-app",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "fr:idm:*"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "Public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token",
+                  "code token",
+                  "token id_token",
+                  "code id_token",
+                  "code token id_token",
+                  "device_code",
+                  "device_code id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "sectorIdentifierUri": null,
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": false,
+              "grantTypes": [
+                  "client_credentials"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": "http://am:80/am/oauth2/connect/jwk_uri",
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": []
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "RCSClient",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 604800,
+              "scopes": [
+                  "fr:idm:*"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 3600,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 120
+          },
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "remoteConsentServiceId": null,
+              "tokenEncryptionEnabled": false,
+              "enableRemoteConsent": false,
+              "oidcMayActScript": "[Empty]",
+              "usePolicyEngineForScope": false,
+              "oidcClaimsScript": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
+              "providerOverridesEnabled": false,
+              "issueRefreshTokenOnRefreshedToken": true,
+              "statelessTokensEnabled": false
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "Public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "client_credentials"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 3600,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "89b4181b-a694-471c-af69-e5ecab53035f",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "agentgroup": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "fr:autoaccess:*",
+                  "fr:idm:*",
+                  "openid"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com/enduser/appAuthHelperRedirect.html",
+                  "https://openam-volker-dev.forgeblocks.com/enduser/sessionCheck.html",
+                  "https://idc.mytestrun.com/enduser/appAuthHelperRedirect.html",
+                  "https://idc.mytestrun.com/enduser/sessionCheck.html",
+                  "https://idc.scheuber.io/enduser/appAuthHelperRedirect.html",
+                  "https://idc.scheuber.io/enduser/sessionCheck.html"
+              ],
+              "clientName": [],
+              "clientType": "Public",
+              "authorizationCodeLifetime": 0
+          },
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": false,
+              "remoteConsentServiceId": "[Empty]",
+              "tokenEncryptionEnabled": false,
+              "enableRemoteConsent": false,
+              "customLoginUrlTemplate": null,
+              "oidcMayActScript": "[Empty]",
+              "usePolicyEngineForScope": false,
+              "oidcClaimsScript": "e1db8a0a-0329-4962-a5bf-ecffaca376ae",
+              "overrideableOIDCClaims": [],
+              "accessTokenModificationPluginType": "SCRIPTED",
+              "accessTokenMayActScript": "[Empty]",
+              "clientsCanSkipConsent": true,
+              "accessTokenModificationScript": "e232cff3-2460-47cd-80b2-36c86c0d0f06",
+              "providerOverridesEnabled": true,
+              "issueRefreshTokenOnRefreshedToken": false,
+              "statelessTokensEnabled": true
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token",
+                  "code token",
+                  "token id_token",
+                  "code id_token",
+                  "code token id_token",
+                  "device_code",
+                  "device_code id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "sectorIdentifierUri": null,
+              "tokenEndpointAuthMethod": "none",
+              "isConsentImplied": true,
+              "grantTypes": [
+                  "authorization_code",
+                  "implicit"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": "http://am:80/am/oauth2/connect/jwk_uri",
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": []
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "endUserUIClient",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "signEncOAuth2ClientConfig": {
+              "userinfoResponseFormat": "JSON",
+              "mTLSCertificateBoundAccessTokens": false,
+              "publicKeyLocation": "x509",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionEnabled": false,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "userinfoEncryptedResponseEncryptionAlgorithm": null,
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 1,
+              "defaultAcrValues": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreOAuth2ClientConfig": {
+              "scopes": [
+                  "address",
+                  "phone",
+                  "openid",
+                  "profile",
+                  "email"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "clientName": [
+                  "en|My Client",
+                  "ja-jpan-jp|クライアント名"
+              ],
+              "clientType": "Confidential",
+              "defaultScopes": [],
+              "userpassword": null,
+              "authorizationCodeLifetime": 0,
+              "refreshTokenLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "subjectType": "public",
+              "clientUri": [
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "responseTypes": [
+                  "code"
+              ],
+              "updateAccessToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.PE3Ks8wV2dK2YpYL_Lv44OguJorTU-O5t3UYkF1LEYs",
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "_id": "d322dd7b-a7ac-4e67-8cf5-15f2a3ae4ff6",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "agentgroup": null,
+              "userpassword": null,
+              "refreshTokenLifetime": 3600,
+              "scopes": [
+                  "test3"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 315576000,
+              "redirectionUris": [
+                  "https://openam-sandeep-dev.forgeblocks.com/platform/appAuthHelperRedirect.html"
+              ],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 600
+          },
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "remoteConsentServiceId": null,
+              "tokenEncryptionEnabled": false,
+              "enableRemoteConsent": false,
+              "customLoginUrlTemplate": null,
+              "oidcMayActScript": "[Empty]",
+              "usePolicyEngineForScope": false,
+              "oidcClaimsScript": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
+              "providerOverridesEnabled": false,
+              "issueRefreshTokenOnRefreshedToken": true,
+              "statelessTokensEnabled": false
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [
+                  "https://openam-sandeep-dev.forgeblocks.com",
+                  "https://openam-sandeep-dev.forgeblocks.com:443"
+              ],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_post",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "refresh_token",
+                  "password"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 3600,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "journey",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "signEncOAuth2ClientConfig": {
+              "userinfoResponseFormat": "JSON",
+              "mTLSCertificateBoundAccessTokens": false,
+              "publicKeyLocation": "x509",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionEnabled": false,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "userinfoEncryptedResponseEncryptionAlgorithm": null,
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 1,
+              "defaultAcrValues": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreOAuth2ClientConfig": {
+              "scopes": [
+                  "address",
+                  "phone",
+                  "openid",
+                  "profile",
+                  "email"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "clientName": [
+                  "en|My Client2",
+                  "ja-jpan-jp|クライアント名"
+              ],
+              "clientType": "Confidential",
+              "defaultScopes": [],
+              "userpassword": null,
+              "authorizationCodeLifetime": 0,
+              "refreshTokenLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "subjectType": "public",
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "responseTypes": [
+                  "code"
+              ],
+              "updateAccessToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.XIx7BcYkTjGGBCx9Hm7-C9Cb_1GeBwqyw__wM9zT4DE",
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "_id": "2a2773e0-c534-415f-9070-fd73ec224ec0",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "openid",
+                  "profile",
+                  "email"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://idp37.mytestrun.com/openam/XUI"
+              ],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [
+                  "https://idp37.mytestrun.com",
+                  "https://idp37.mytestrun.com:443"
+              ],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "client_credentials",
+                  "refresh_token"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [
+                  "azureOIDC"
+              ],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "onprem",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "openid",
+                  "profile",
+                  "email",
+                  "patient/Patient.read",
+                  "patient/*.read",
+                  "patient/Coverage.read",
+                  "patient/ExplanationOfBenefit.read",
+                  "am-introspect-all-tokens"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com",
+                  "https://idc.scheuber.io/enduser"
+              ],
+              "clientName": [
+                  "FHIR App"
+              ],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [
+                  "FHIR Application"
+              ],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [
+                  "https://idc.scheuber.io",
+                  "https://idc.scheuber.io:443",
+                  "https://openam-volker-dev.forgeblocks.com",
+                  "https://openam-volker-dev.forgeblocks.com:443"
+              ],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [
+                  "customui"
+              ],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "fhirapp",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "fr:idm:*"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 315360000,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "clientName": [
+                  "Router"
+              ],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "remoteConsentServiceId": null,
+              "tokenEncryptionEnabled": false,
+              "enableRemoteConsent": false,
+              "oidcMayActScript": "[Empty]",
+              "usePolicyEngineForScope": false,
+              "oidcClaimsScript": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
+              "providerOverridesEnabled": false,
+              "issueRefreshTokenOnRefreshedToken": true,
+              "statelessTokensEnabled": false
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [
+                  "Router Service Account"
+              ],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "Public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [
+                  "https://openam-volker-dev.forgeblocks.com",
+                  "https://openam-volker-dev.forgeblocks.com:443"
+              ],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "password"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "69d05c11-e8fe-4ae5-a7c9-2252a4d85df4",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "signEncOAuth2ClientConfig": {
+              "userinfoResponseFormat": "JSON",
+              "mTLSCertificateBoundAccessTokens": false,
+              "publicKeyLocation": "x509",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionEnabled": false,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "userinfoEncryptedResponseEncryptionAlgorithm": null,
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 1,
+              "defaultAcrValues": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreOAuth2ClientConfig": {
+              "scopes": [
+                  "openid",
+                  "profile"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "clientName": [
+                  "en|My Client3",
+                  "ja-jpan-jp|クライアント名"
+              ],
+              "clientType": "Confidential",
+              "defaultScopes": [],
+              "userpassword": null,
+              "authorizationCodeLifetime": 0,
+              "refreshTokenLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "subjectType": "public",
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "responseTypes": [
+                  "code",
+                  "id_token code"
+              ],
+              "updateAccessToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.a5C6qku1LtyLqM9tfwGloHoiPoT0oKyeMRYS00MSQNw",
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "_id": "9e58d2bb-8d4b-43c3-a007-bbda60a2f704",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "signEncOAuth2ClientConfig": {
+              "userinfoResponseFormat": "JSON",
+              "mTLSCertificateBoundAccessTokens": false,
+              "publicKeyLocation": "x509",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionEnabled": false,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "userinfoEncryptedResponseEncryptionAlgorithm": null,
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 1,
+              "defaultAcrValues": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreOAuth2ClientConfig": {
+              "scopes": [
+                  "openid",
+                  "profile"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "clientName": [
+                  "ja-jpan-jp|クライアント名",
+                  "en|Vlad1"
+              ],
+              "clientType": "Confidential",
+              "defaultScopes": [],
+              "userpassword": null,
+              "authorizationCodeLifetime": 0,
+              "refreshTokenLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "subjectType": "public",
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "responseTypes": [
+                  "code",
+                  "id_token code"
+              ],
+              "updateAccessToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.lRTBn5U5Gq6M6iq4aXMSLKDhgFh2g62dn8MULMJI29w",
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "_id": "c0203d40-01dc-430a-954f-5a7222c966cd",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "agentgroup": null,
+              "userpassword": null,
+              "refreshTokenLifetime": 604800,
+              "scopes": [],
+              "status": "Active",
+              "accessTokenLifetime": 3600,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 120
+          },
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "remoteConsentServiceId": null,
+              "tokenEncryptionEnabled": false,
+              "enableRemoteConsent": false,
+              "customLoginUrlTemplate": null,
+              "oidcMayActScript": "[Empty]",
+              "usePolicyEngineForScope": false,
+              "oidcClaimsScript": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
+              "providerOverridesEnabled": false,
+              "issueRefreshTokenOnRefreshedToken": true,
+              "statelessTokensEnabled": false
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "Public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "client_credentials"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 3600,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "m2m",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "signEncOAuth2ClientConfig": {
+              "userinfoResponseFormat": "JSON",
+              "mTLSCertificateBoundAccessTokens": false,
+              "publicKeyLocation": "x509",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionEnabled": false,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "userinfoEncryptedResponseEncryptionAlgorithm": null,
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 1,
+              "defaultAcrValues": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreOAuth2ClientConfig": {
+              "scopes": [
+                  "openid",
+                  "profile"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "clientName": [
+                  "ja-jpan-jp|クライアント名",
+                  "en|Vlad1"
+              ],
+              "clientType": "Confidential",
+              "defaultScopes": [],
+              "userpassword": null,
+              "authorizationCodeLifetime": 0,
+              "refreshTokenLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "subjectType": "public",
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "responseTypes": [
+                  "code",
+                  "id_token code"
+              ],
+              "updateAccessToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.NBBQwXpO08Ns-JGvpwpvxGGxUL4FpzDlto65ghMF3BU",
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "_id": "1a369eaa-b27c-4573-887d-7f47ce98242f",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "agentgroup": null,
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "am-introspect-all-tokens",
+                  "am-introspect-all-tokens-any-realm"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "Public",
+              "clientUri": [],
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token",
+                  "code token",
+                  "token id_token",
+                  "code id_token",
+                  "code token id_token",
+                  "device_code",
+                  "device_code id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "sectorIdentifierUri": null,
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": false,
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": "http://am:80/am/oauth2/connect/jwk_uri",
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": []
+          },
+          "overrideOAuth2ClientConfig": {
+              "oidcClaimsScript": "1f389a3d-21cf-417c-a6d3-42ea620071f0",
+              "accessTokenModificationPluginType": "SCRIPTED",
+              "clientsCanSkipConsent": true,
+              "accessTokenModificationScript": "c234ba0b-58a1-4cfd-9567-09edde980745",
+              "oidcClaimsPluginType": "SCRIPTED",
+              "providerOverridesEnabled": true,
+              "statelessTokensEnabled": true
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "openidm-resource-server",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "validateScopePluginType": "PROVIDER",
+              "tokenEncryptionEnabled": false,
+              "evaluateScopePluginType": "PROVIDER",
+              "oidcMayActScript": "[Empty]",
+              "oidcClaimsScript": "[Empty]",
+              "scopesPolicySet": "oauth2Scopes",
+              "accessTokenModificationPluginType": "PROVIDER",
+              "authorizeEndpointDataProviderClass": "org.forgerock.oauth2.core.plugins.registry.DefaultEndpointDataProvider",
+              "oidcClaimsPluginType": "PROVIDER",
+              "providerOverridesEnabled": false,
+              "authorizeEndpointDataProviderScript": "[Empty]",
+              "statelessTokensEnabled": false,
+              "authorizeEndpointDataProviderPluginType": "PROVIDER",
+              "remoteConsentServiceId": null,
+              "enableRemoteConsent": false,
+              "validateScopeClass": "org.forgerock.oauth2.core.plugins.registry.DefaultScopeValidator",
+              "usePolicyEngineForScope": false,
+              "evaluateScopeClass": "org.forgerock.oauth2.core.plugins.registry.DefaultScopeEvaluator",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "evaluateScopeScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "[Empty]",
+              "issueRefreshTokenOnRefreshedToken": true,
+              "validateScopeScript": "[Empty]"
+          },
+          "advancedOAuth2ClientConfig": {
+              "logoUri": [],
+              "subjectType": "Public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "refreshTokenGracePeriod": 0,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "client_credentials",
+                  "refresh_token",
+                  "implicit",
+                  "password"
+              ],
+              "require_pushed_authorization_requests": false,
+              "descriptions": [],
+              "requestUris": [],
+              "name": [],
+              "contacts": [],
+              "updateAccessToken": null
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "authorizationResponseSigningAlgorithm": "RS256",
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "jwkStoreCacheMissCacheTime": 60000,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksUri": null,
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256",
+              "authorizationResponseEncryptionMethod": null,
+              "userinfoResponseFormat": "JSON",
+              "mTLSCertificateBoundAccessTokens": false,
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "authorizationResponseEncryptionAlgorithm": null,
+              "mTLSTrustedCert": null,
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 3600,
+              "defaultMaxAgeEnabled": false,
+              "clientSessionUri": null,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreOAuth2ClientConfig": {
+              "userpassword": null,
+              "status": "Active",
+              "clientName": [],
+              "clientType": "Confidential",
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "refreshTokenLifetime": 604800,
+              "scopes": [
+                  "openid"
+              ],
+              "accessTokenLifetime": 3600,
+              "redirectionUris": [],
+              "authorizationCodeLifetime": 120
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "testClient1",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [
+                  "fr:idm:*"
+              ],
+              "userpassword": null,
+              "refreshTokenLifetime": 604800,
+              "scopes": [
+                  "fr:idm:*",
+                  "fr:idc:esv:*",
+                  "dynamic_client_registration"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 3600,
+              "redirectionUris": [],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 120
+          },
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "remoteConsentServiceId": null,
+              "tokenEncryptionEnabled": false,
+              "enableRemoteConsent": false,
+              "oidcMayActScript": "[Empty]",
+              "usePolicyEngineForScope": false,
+              "oidcClaimsScript": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
+              "providerOverridesEnabled": false,
+              "issueRefreshTokenOnRefreshedToken": true,
+              "statelessTokensEnabled": false
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "Public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "client_credentials"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 3600,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "ce3cd8cb-686d-4267-aef0-eac374b85511",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [
+                  "openid"
+              ],
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "openid"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [],
+              "clientName": [
+                  "test2"
+              ],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "remoteConsentServiceId": null,
+              "tokenEncryptionEnabled": false,
+              "enableRemoteConsent": false,
+              "oidcMayActScript": "[Empty]",
+              "usePolicyEngineForScope": false,
+              "oidcClaimsScript": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
+              "providerOverridesEnabled": false,
+              "issueRefreshTokenOnRefreshedToken": true,
+              "statelessTokensEnabled": false
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [
+                  "Modified by Frodo on 4/16/2022, 8:41:59 PM"
+              ],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": false,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "refresh_token"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "test2",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "coreOAuth2ClientConfig": {
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "agentgroup": null,
+              "userpassword": null,
+              "refreshTokenLifetime": 0,
+              "scopes": [
+                  "fr:idm:*"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 315576000,
+              "redirectionUris": [
+                  "https://openam-sandeep-dev.forgeblocks.com/platform/appAuthHelperRedirect.html"
+              ],
+              "clientName": [],
+              "clientType": "Confidential",
+              "authorizationCodeLifetime": 0
+          },
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "remoteConsentServiceId": null,
+              "tokenEncryptionEnabled": false,
+              "enableRemoteConsent": false,
+              "customLoginUrlTemplate": null,
+              "oidcMayActScript": "[Empty]",
+              "usePolicyEngineForScope": false,
+              "oidcClaimsScript": "36863ffb-40ec-48b9-94b1-9a99f71cc3b5",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "d22f9a0c-426a-4466-b95e-d0f125b0d5fa",
+              "providerOverridesEnabled": false,
+              "issueRefreshTokenOnRefreshedToken": true,
+              "statelessTokensEnabled": false
+          },
+          "advancedOAuth2ClientConfig": {
+              "descriptions": [],
+              "requestUris": [],
+              "logoUri": [],
+              "subjectType": "public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "name": [],
+              "contacts": [],
+              "responseTypes": [
+                  "token"
+              ],
+              "updateAccessToken": null,
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [
+                  "https://openam-sandeep-dev.forgeblocks.com",
+                  "https://openam-sandeep-dev.forgeblocks.com:443"
+              ],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_post",
+              "isConsentImplied": false,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "refresh_token",
+                  "password"
+              ]
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "mTLSCertificateBoundAccessTokens": false,
+              "userinfoResponseFormat": "JSON",
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "jwkStoreCacheMissCacheTime": 60000,
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "mTLSTrustedCert": null,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "jwksUri": null,
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "clientSessionUri": null,
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "_journey",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "signEncOAuth2ClientConfig": {
+              "userinfoResponseFormat": "JSON",
+              "mTLSCertificateBoundAccessTokens": false,
+              "publicKeyLocation": "x509",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionEnabled": false,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256",
+              "userinfoEncryptedResponseEncryptionAlgorithm": null,
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256"
+          },
+          "coreOpenIDClientConfig": {
+              "jwtTokenLifetime": 0,
+              "defaultMaxAgeEnabled": false,
+              "defaultMaxAge": 1,
+              "defaultAcrValues": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreOAuth2ClientConfig": {
+              "scopes": [
+                  "openid",
+                  "profile"
+              ],
+              "status": "Active",
+              "accessTokenLifetime": 0,
+              "redirectionUris": [
+                  "https://openam-volker-dev.forgeblocks.com"
+              ],
+              "clientName": [
+                  "ja-jpan-jp|クライアント名",
+                  "en|Vlad1"
+              ],
+              "clientType": "Confidential",
+              "defaultScopes": [],
+              "userpassword": null,
+              "authorizationCodeLifetime": 0,
+              "refreshTokenLifetime": 0
+          },
+          "advancedOAuth2ClientConfig": {
+              "subjectType": "public",
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "responseTypes": [
+                  "code",
+                  "id_token code"
+              ],
+              "updateAccessToken": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.TbuxtXCGRU3qryNcRQtZZ7vC7ayI8l6CeHqlApMK_cM",
+              "grantTypes": [
+                  "authorization_code"
+              ]
+          },
+          "_id": "4bc72087-4ff8-4a60-8b8a-ff8c14ee4300",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "overrideOAuth2ClientConfig": {
+              "issueRefreshToken": true,
+              "validateScopePluginType": "PROVIDER",
+              "tokenEncryptionEnabled": false,
+              "evaluateScopePluginType": "PROVIDER",
+              "oidcMayActScript": "[Empty]",
+              "oidcClaimsScript": "[Empty]",
+              "scopesPolicySet": "oauth2Scopes",
+              "accessTokenModificationPluginType": "PROVIDER",
+              "authorizeEndpointDataProviderClass": "org.forgerock.oauth2.core.plugins.registry.DefaultEndpointDataProvider",
+              "oidcClaimsPluginType": "PROVIDER",
+              "providerOverridesEnabled": false,
+              "authorizeEndpointDataProviderScript": "[Empty]",
+              "statelessTokensEnabled": false,
+              "authorizeEndpointDataProviderPluginType": "PROVIDER",
+              "oidcClaimsClass": null,
+              "remoteConsentServiceId": null,
+              "enableRemoteConsent": false,
+              "validateScopeClass": "org.forgerock.oauth2.core.plugins.registry.DefaultScopeValidator",
+              "customLoginUrlTemplate": null,
+              "accessTokenModifierClass": null,
+              "usePolicyEngineForScope": false,
+              "evaluateScopeClass": "org.forgerock.oauth2.core.plugins.registry.DefaultScopeEvaluator",
+              "overrideableOIDCClaims": [],
+              "accessTokenMayActScript": "[Empty]",
+              "evaluateScopeScript": "[Empty]",
+              "clientsCanSkipConsent": false,
+              "accessTokenModificationScript": "[Empty]",
+              "issueRefreshTokenOnRefreshedToken": true,
+              "validateScopeScript": "[Empty]"
+          },
+          "advancedOAuth2ClientConfig": {
+              "logoUri": [],
+              "subjectType": "Public",
+              "clientUri": [],
+              "tokenExchangeAuthLevel": 0,
+              "responseTypes": [
+                  "code",
+                  "token",
+                  "id_token"
+              ],
+              "mixUpMitigation": false,
+              "customProperties": [],
+              "javascriptOrigins": [],
+              "policyUri": [],
+              "softwareVersion": null,
+              "sectorIdentifierUri": null,
+              "tosURI": [],
+              "tokenEndpointAuthMethod": "client_secret_basic",
+              "isConsentImplied": true,
+              "refreshTokenGracePeriod": 0,
+              "softwareIdentity": null,
+              "grantTypes": [
+                  "authorization_code",
+                  "refresh_token"
+              ],
+              "require_pushed_authorization_requests": false,
+              "descriptions": [],
+              "requestUris": [],
+              "name": [],
+              "contacts": [],
+              "updateAccessToken": null
+          },
+          "signEncOAuth2ClientConfig": {
+              "tokenEndpointAuthSigningAlgorithm": "RS256",
+              "idTokenEncryptionEnabled": false,
+              "tokenIntrospectionEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "requestParameterSignedAlg": null,
+              "authorizationResponseSigningAlgorithm": "RS256",
+              "clientJwtPublicKey": null,
+              "idTokenPublicEncryptionKey": null,
+              "mTLSSubjectDN": null,
+              "jwkStoreCacheMissCacheTime": 60000,
+              "jwkSet": null,
+              "idTokenEncryptionMethod": "A128CBC-HS256",
+              "jwksUri": null,
+              "tokenIntrospectionEncryptedResponseAlg": "RSA-OAEP-256",
+              "authorizationResponseEncryptionMethod": null,
+              "userinfoResponseFormat": "JSON",
+              "mTLSCertificateBoundAccessTokens": false,
+              "publicKeyLocation": "jwks_uri",
+              "tokenIntrospectionResponseFormat": "JSON",
+              "requestParameterEncryptedEncryptionAlgorithm": "A128CBC-HS256",
+              "userinfoSignedResponseAlg": null,
+              "idTokenEncryptionAlgorithm": "RSA-OAEP-256",
+              "requestParameterEncryptedAlg": null,
+              "authorizationResponseEncryptionAlgorithm": null,
+              "mTLSTrustedCert": null,
+              "jwksCacheTimeout": 3600000,
+              "userinfoEncryptedResponseAlg": null,
+              "idTokenSignedResponseAlg": "RS256",
+              "userinfoEncryptedResponseEncryptionAlgorithm": "A128CBC-HS256",
+              "tokenIntrospectionSignedResponseAlg": "RS256"
+          },
+          "coreOpenIDClientConfig": {
+              "claims": [],
+              "backchannel_logout_uri": null,
+              "defaultAcrValues": [],
+              "jwtTokenLifetime": 3600,
+              "defaultMaxAgeEnabled": false,
+              "clientSessionUri": null,
+              "defaultMaxAge": 600,
+              "postLogoutRedirectUri": [],
+              "backchannel_logout_session_required": false
+          },
+          "coreOAuth2ClientConfig": {
+              "status": "Active",
+              "clientName": [],
+              "clientType": "Public",
+              "loopbackInterfaceRedirection": false,
+              "defaultScopes": [],
+              "agentgroup": null,
+              "refreshTokenLifetime": 604800,
+              "scopes": [
+                  "openid"
+              ],
+              "accessTokenLifetime": 3600,
+              "redirectionUris": [],
+              "authorizationCodeLifetime": 120
+          },
+          "coreUmaClientConfig": {
+              "claimsRedirectionUris": []
+          },
+          "_id": "dfsd",
+          "_type": {
+              "_id": "OAuth2Client",
+              "name": "OAuth2 Clients",
+              "collection": true
+          }
+      },
+      {
+          "igTokenIntrospection": "Realm_Subs",
+          "status": "Active",
+          "igCdssoRedirectUrls": [],
+          "userpassword": null,
+          "_id": "ig_chico",
+          "_type": {
+              "_id": "IdentityGatewayAgent",
+              "name": "Identity Gateway Agents",
+              "collection": true
+          }
+      },
+      {
+          "igTokenIntrospection": "Realm_Subs",
+          "status": "Active",
+          "igCdssoRedirectUrls": [
+              "https://ig.mytestrun.com/expanse/cdsso/redirect",
+              "https://ig.mytestrun.com/ig-sample-app/cdsso/redirect",
+              "https://ig.mytestrun.com/forgerock/cdsso/redirect",
+              "https://ig.scheuber.io/ig/studio/cdsso/redirect",
+              "https://ig.mytestrun.com/prometheus/cdsso/redirect",
+              "https://ig.mytestrun.com/grafana/cdsso/redirect",
+              "https://ig.mytestrun.com/bi/cdsso/redirect",
+              "https://ig.mytestrun.com/ig/studio/cdsso/redirect",
+              "https://ig.mytestrun.com/ig/cdsso/redirect"
+          ],
+          "agentgroup": null,
+          "userpassword": null,
+          "_id": "ig_mytestrun_com",
+          "_type": {
+              "_id": "IdentityGatewayAgent",
+              "name": "Identity Gateway Agents",
+              "collection": true
+          }
+      },
+      {
+          "igTokenIntrospection": "Realm_Subs",
+          "status": "Active",
+          "igCdssoRedirectUrls": [],
+          "agentgroup": null,
+          "userpassword": null,
+          "_id": "ajays_client",
+          "_type": {
+              "_id": "IdentityGatewayAgent",
+              "name": "Identity Gateway Agents",
+              "collection": true
+          }
+      },
+      {
+          "igTokenIntrospection": "Realm_Subs",
+          "status": "Active",
+          "igCdssoRedirectUrls": [],
+          "userpassword": null,
+          "_id": "api_client",
+          "_type": {
+              "_id": "IdentityGatewayAgent",
+              "name": "Identity Gateway Agents",
+              "collection": true
+          }
+      },
+      {
+          "allowedSubjects": [],
+          "jwksCacheTimeout": 3600000,
+          "jwkSet": null,
+          "consentedScopesClaim": "scope",
+          "issuer": "https://login.microsoftonline.com:443/711ffa9c-5972-4713-ace3-688c9732614a/v2.0",
+          "jwkStoreCacheMissCacheTime": 60000,
+          "jwksUri": "https://login.microsoftonline.com/organizations/discovery/v2.0/keys",
+          "resourceOwnerIdentityClaim": "sub",
+          "agentgroup": null,
+          "_id": "azure",
+          "_type": {
+              "_id": "TrustedJwtIssuer",
+              "name": "OAuth2 Trusted JWT Issuer",
+              "collection": true
+          }
+      }
+  ]
+}