<div dir="ltr"><div>I don't understand how you can have security questions that are particular to a client. A user logs-in to a realm, not a client.<br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 22 February 2016 at 10:20, Juraj Janosik <span dir="ltr"><<a href="mailto:juraj.janosik77@gmail.com" target="_blank">juraj.janosik77@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>@ Stian:<br>generally said, I did not find any description, that the client attributes are for internal use only.<br></div>Parameter "attributes" is propagated in ClientRepresentation in the REST Admin API,<br></div>therefore should be used for CRUD admin operations.<br></div>We plan to attach Security Answers to the user (Security questions are common for particular client).<br><br></div><div>Best Regards,<br></div><div>Juraj<br></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">2016-02-22 10:18 GMT+01:00 Bystrik Horvath <span dir="ltr"><<a href="mailto:bystrik.horvath@gmail.com" target="_blank">bystrik.horvath@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>I think the case here is to provision the text of security question to the client attributes when it is not known in advance.</div><div><br></div><div>Best regards,</div><div>Bystrik</div></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Feb 22, 2016 at 10:06 AM, Thomas Darimont <span dir="ltr"><<a href="mailto:thomas.darimont@googlemail.com" target="_blank">thomas.darimont@googlemail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Interesting - do you need client specific security questions?<div><br></div><div>The keycloak examples contain a custom provider for user specific security questions - perhaps this would suit your needs better.</div><div><a href="https://github.com/keycloak/keycloak/tree/master/examples/providers/authenticator" target="_blank">https://github.com/keycloak/keycloak/tree/master/examples/providers/authenticator</a><br></div><div><br></div><div>Cheers,</div><div>Thomas</div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-02-22 10:02 GMT+01:00 Juraj Janosik <span dir="ltr"><<a href="mailto:juraj.janosik77@gmail.com" target="_blank">juraj.janosik77@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>Hi Thomas,<br><br></div>for example security questions.... :-)<br></div><div></div><br></div>Best Regards,<br></div>Juraj<br><div><div><div><div><br><br></div></div></div></div></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">2016-02-22 9:12 GMT+01:00 Thomas Darimont <span dir="ltr"><<a href="mailto:thomas.darimont@googlemail.com" target="_blank">thomas.darimont@googlemail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hello Juraj,<div><br></div><div>I wondered about that too a while ago - may I ask what client attributes you are planning to store?</div><div><br></div><div>Cheers,</div><div>Thomas</div></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">2016-02-22 8:17 GMT+01:00 Juraj Janosik <span dir="ltr"><<a href="mailto:juraj.janosik77@gmail.com" target="_blank">juraj.janosik77@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div>The user configuration has the possibility to Create/Read/Update/Delete of "custom" attributes in the Admin Console.<br>(/auth/admin/master/console/#/realms/demo/users/{uid}/user-attributes)<br></div>The client does not. I think, the logic and the focus is the same for both.<br></div><br></div></div></div>Best regards,<br></div>Juraj<br><div><div><div><div><div><div><br></div></div></div></div></div></div></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">2016-02-19 15:40 GMT+01:00 Stian Thorgersen <span dir="ltr"><<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">We don't. Why would we add it though?</p>
<div class="gmail_quote"><div><div>On 18 Feb 2016 12:43, "Juraj Janosik" <<a href="mailto:juraj.janosik77@gmail.com" target="_blank">juraj.janosik77@gmail.com</a>> wrote:<br type="attribution"></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr"><div><div>Hi,<br><br></div>is there any plan to support for displaying of "attributes" from Client Representation<br>(like users configuration) in Admin Console?<br><br></div><div>Thanks.<br><br></div><div>Best Regards,<br></div><div>Juraj<br></div></div>
<br></div></div>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div>
</blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>