xs-security.json

{
  "xsappname": "HTML5UserAPIforCF",
  "tenant-mode": "dedicated",
  "description": "Security profile of called application",
  "scopes": [
    {
      "name": "uaa.user",
      "description": "UAA"
    },
    {
      "name": "$XSAPPNAME.Display",
      "description": "display"
    }
  ],
  "attributes": [
    {
      "name": "company",
      "description": "Company",
      "valueType": "string"
    },
    {
      "name": "department",
      "description": "Department",
      "valueType": "string"
    },
    {
      "name": "country",
      "description": "Country",
      "valueType": "s"
    },
    {
      "name": "city",
      "description": "City",
      "valueType": "string"
    },
    {
      "name": "groups",
      "description": "Groups",
      "valueType": "s"
    }
  ],
  "role-templates": [
    {
      "name": "Token_Exchange",
      "description": "UAA",
      "scope-references": [
        "uaa.user"
      ]
    },
    {
      "name": "Viewer",
      "description": "View all",
      "scope-references": [
        "$XSAPPNAME.Display"
      ],
      "attribute-references": [
        "company",
        "department",
        "country",
        "city",
        "groups"
      ]
    }
  ],
  "oauth2-configuration": {
    "redirect-uris": [
      "https://localhost:5000/**",
      "http://localhost:5000/**",
      "https://*.hana.ondemand.com/**",
      "https://*.cloud.sap/**"
    ]
  }
}