get_client
Retrieves a client's configuration with resolved authentication flow aliases, showing which browser flow overrides apply while excluding credential material.
Instructions
Show one client's configuration, including its authentication flow overrides.
Reports an explicit allowlist of fields rather than the raw client
representation. A client representation can carry secret,
registrationAccessToken and, for SAML clients, signing material under
attributes; attributes and protocolMappers are therefore omitted
entirely rather than filtered, so nothing credential-shaped reaches tool
output, hence LLM context.
The headline is authenticationFlowBindingOverrides: pinning one client
to a non-default browser flow is how a single SP is made to require OTP
while the realm default stays untouched. KeyCloak stores those overrides as
flow IDs, so they are resolved to flow aliases here.
Args: client_id: The clientId (not the internal UUID).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| client_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |