[security-dev] Keycloak datamodel

Keycloak is a SaaS in which people can register to create their own realms. Default Realm: User Roles: REALM_CREATOR Custom RealmAdminRelationship: Attribute: realmId, Attribute: User. RealmId points to a realm a User has created SSO Realms: * A bunch of attributes for the Realm like private/public key stored in an Agent * Users * Roles * User/RoleMapping * Custom RequiredCredentialRelationship. Defines the credential types required by the realm. * Custom ScopeRelationship. Scope is the same as role mapping, but this defines an OAuth grant thing. It is the roles a user is allowed to request permissions for. It is an Attribute of an Agent and a Role. * Custom ResourceRelationship. A resource is an application that is managed by the realm. This has Attribute Agent pointing to the Agent of the realm, various attributes of the resource, and also a String value pointing to the Tier. I couldn't figure out how to have a hard relationship to a Tier Resource (maps to Tier) * Roles * User/RoleMapping * ScopeRelationship -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com