diff --git a/changelogs/fragments/11197-keycloak-realm-webauthnpolicypasswordlesspasskeysenabled.yml b/changelogs/fragments/11197-keycloak-realm-webauthnpolicypasswordlesspasskeysenabled.yml new file mode 100644 index 0000000000..13e94b346e --- /dev/null +++ b/changelogs/fragments/11197-keycloak-realm-webauthnpolicypasswordlesspasskeysenabled.yml @@ -0,0 +1,2 @@ +minor_changes: + - keycloak_realm - add ``webAuthnPolicyPasswordlessPasskeysEnabled`` parameter (https://github.com/ansible-collections/community.general/pull/11197). \ No newline at end of file diff --git a/plugins/modules/keycloak_realm.py b/plugins/modules/keycloak_realm.py index 0f5d421cc1..2e96d09265 100644 --- a/plugins/modules/keycloak_realm.py +++ b/plugins/modules/keycloak_realm.py @@ -732,6 +732,13 @@ options: type: list version_added: 11.3.0 elements: str + web_authn_policy_passwordless_passkeys_enabled: + description: + - Enable passkeys (conditional UI) authentication in the username forms. + aliases: + - webAuthnPolicyPasswordlessPasskeysEnabled + type: bool + version_added: 12.1.0 extends_documentation_fragment: - community.general.keycloak @@ -1005,6 +1012,9 @@ def main(): web_authn_policy_passwordless_extra_origins=dict( type="list", elements="str", aliases=["webAuthnPolicyPasswordlessExtraOrigins"], no_log=False ), + web_authn_policy_passwordless_passkeys_enabled=dict( + type="bool", aliases=["webAuthnPolicyPasswordlessPasskeysEnabled"] + ), ) argument_spec.update(meta_args)