<html><head></head><body><div>Hi guys,</div><div><br></div><div>Just FYI, there's a PR (<a href="https://github.com/keycloak/keycloak/pull/3153">#3153</a>) that makes realm attributes generally available for developers, i.e. exposed through RealmModel, accessible via REST, with support for Mongo and Infinispan. At the moment realm attributes are available only for JPA (via o.k.models.jpa.RealmAdapter) without caching and are not exposed via REST.</div><div><br></div><div>Cheers,</div><div>Dmitry</div><div><br></div><blockquote type="cite"><div dir="ltr">Sounds like an interesting idea. For a while ago I was thinking about how you'd manage clients and hostnames in different environments (dev, test, prod) without having to modify the config. My idea at the time was to introduce server aliases which would be a similar thing to what you are proposing although with much more limited use.</div><div class="gmail_extra"><br><div class="gmail_quote">On 28 August 2016 at 12:24, Thomas Darimont <span dir="ltr"><<a href="mailto:thomas.darimont@googlemail.com" target="_blank">thomas.darimont@googlemail.com</a>></span> wrote:<br><blockquote type="cite"><div dir="ltr"><div>Hello group,</div><div><br></div><div>currently the configuration for themes, extensions, clients is quite local to a </div><div>component and one has to repeat some information like company name, trademark, </div><div>URLs, parts of application name etc.</div><div><br></div><div>It would be cool if an admin could configure a set of key-value pairs on realm </div><div>level that could then be used / referenced in client definitions, user attributes, themes, emails.</div><div>The admin-console could feature a new tab 'attributes' in the realm-settings </div><div>in which one could configure key-value pairs with support for string, boolean, </div><div>numeric and lists values.</div><div><br></div><div>This could also be used as a centralized configuration source of custom extensions e.g. </div><div>FederationProvider, RequiredActions, Authenticators.</div><div><br></div><div>Of course something like this is already partially possible with system properties / env-variables.</div><div>However these values are hard to change at runtime. Having a dedicated support for realm-wide </div><div>attributes managed by an "attributes" section in the admin-console would allow for simpler configuration.</div><div><br></div><div>An idea on top of that is to let extensions (like custom Authenticators) register their configuration settings </div><div>as attributes in the realm which could then be shown as an overview in the "attributes" section of the realm-settings.</div><div>This would give provide you with all the configuration settings for all realm-components at a glance.<br></div><div><br></div><div>Cheers,</div><div>Thomas</div></div>
<br>______________________________<wbr>_________________<br>
keycloak-dev mailing list<br>
<a href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/keycloak-dev</a><br></blockquote></div><br></div>
<pre>_______________________________________________
keycloak-dev mailing list
<a href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a></pre></blockquote></body></html>