[keycloak-user] Multiple audience from auth endpoint

Marek Posolda mposolda at redhat.com
Mon May 21 06:29:01 EDT 2018


Hi,

we plan to improve audience in future versions soon (EG. in next weeks 
or months) together with adding support for client scopes. Related JIRA 
is https://issues.jboss.org/browse/KEYCLOAK-6638 . You can add yourself 
as watcher.

Marek

On 03/05/18 17:53, triton oidc wrote:
> Hi,
>
> I saw a feature for KC to handle multiple audiences.
>
> https://issues.jboss.org/browse/KEYCLOAK-5791
>
> I'd like to test this feature in my POC.
>
> I saw that i can use ScriptBasedOIDCProtocolMapper
>
> but didn't found any clear way to do it.
>
> Currently when i ask for a code
> the first query looks like :
>
> https://imyserver:9443/auth/realms/GreenAirlines/protocol/openid-connect/auth?client_id=greenairlines-secure&redirect_uri=https://mywebapp/callback&response_type=code&scope=openid
> email profile
>
> By default the audience equals the clientID
> Is there a parameter that i can add in the query to ask for an additional
> audience ?
>
> If the documentation was somewhere and i didn't found it, i'm really sorry
>
> Thanks for any tips
>
> Amaury
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user




More information about the keycloak-user mailing list