Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-2303

OIDC Client realm roles do overwrite the resource roles if not explicitly disabled

XMLWordPrintable

      When use-realm-role-mappings and use-resource-role-mappings are set to true all previously found resource mappings are overwritten by the realm role mappings.

      When the use-realm-role-mappings are being disabled using a oidc.json configuraion as follows the resource roles will be available only:

      {
        "realm": "MYREALM",
        "auth-server-url": "https://keycloak.somedomain/auth/",
        "resource": "BisonProcess",
        "use-realm-role-mappings": false,
        "use-resource-role-mappings": true,
      }
      

      It is not possible to have a combined set by defining the following configuration:

      {
        "realm": "MYREALM",
        "auth-server-url": "https://keycloak.somedomain/auth/",
        "resource": "BisonProcess",
        "use-realm-role-mappings": true,
        "use-resource-role-mappings": true,
      }
      

              fjuma1@redhat.com Farah Juma
              reinhapa Patrick Reinhart (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: