[keycloak-user] Still no luck with native iOS Facebook auth

[Shetty, Shweta]

You need to enable it using the following args
-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled
-Dkeycloak.profile.feature.token_exchange=enabled
https://stackoverflow.com/questions/53367566/unable-to-setup-idp-token-exchange-in-keycloak-4-6-0-final

On 2/14/19, 8:19 PM, "keycloak-user-bounces at lists.jboss.org on behalf of Andrew J. Alexander" <keycloak-user-bounces at lists.jboss.org on behalf of andrew.j.alexander at gmail.com> wrote:

    [External Email]
    ________________________________
    
    I'm not seeing a permissions tab, and I'm not finding where I should enable
    it:
    
    https://www.keycloak.org/docs/latest/securing_apps/keycloak-images/exchange-idp-permission-set.png
    
    On Thu, Feb 14, 2019 at 2:23 PM Andrew J. Alexander <
    andrew.j.alexander at gmail.com> wrote:
    
    > I'll take a look at this
    >
    > On Wed, Feb 13, 2019 at 1:52 AM Sebastien Blanc <sblanc at redhat.com> wrote:
    >
    >> Hi Andrew,
    >>
    >> Have you tired the token exchange service ?
    >> https://www.keycloak.org/docs/latest/securing_apps/index.html#external-token-to-internal-token-exchange
    >>
    >>
    >>
    >> On Wed, Feb 13, 2019 at 4:40 AM Andrew J. Alexander <
    >> andrew.j.alexander at gmail.com> wrote:
    >>
    >>> I am just completely lost here.
    >>>
    >>> I need to integrate the Facebook SDK directly with Keycloak - Facebook is
    >>> threatening to remove the ability to login entirely from my client's app.
    >>>
    >>> I am, however, absolutely and completely lost with how to do this in
    >>> Keycloak.
    >>>
    >>> Here's my original post:
    >>>
    >>> http://lists.jboss.org/pipermail/keycloak-user/2017-February/009592.html
    >>>
    >>> And I am wondering a similar question - is there a way to use native
    >>> Facebook access token to authenticate with Keycloak?
    >>>
    >>> Facebook is saying that they want my client to update their app to use
    >>> the
    >>> Facebook SDK for login as opposed to non-standard SDK (i.e.
    >>> AeroGear/Keycloak)
    >>>
    >>> I am trying to use the token provided by Facebook on successful login,
    >>> with
    >>> absolutely no luck.
    >>>
    >>> What is the recommended way (or is there a guide) on how to do this?
    >>>
    >>>
    >>>
    >>> Is there absolutely any compliant way to integrate the iOS Facebook SDK
    >>> with Keycloak? Anything at all? I've been working on this for two weeks
    >>> and
    >>> I'm completely lost and have no idea how to do it.
    >>> _______________________________________________
    >>> keycloak-user mailing list
    >>> keycloak-user at lists.jboss.org
    >>> https://lists.jboss.org/mailman/listinfo/keycloak-user
    >>>
    >>
    _______________________________________________
    keycloak-user mailing list
    keycloak-user at lists.jboss.org
    https://lists.jboss.org/mailman/listinfo/keycloak-user