<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1462886037011_5494">Hi all,</div><div id="yui_3_16_0_ym19_1_1462886037011_5494">So, Keycloak has a lot of items around Authentication approaches, but I haven't seen anything specific around authorization - is that a different project?</div><div id="yui_3_16_0_ym19_1_1462886037011_5494"><br></div><div id="yui_3_16_0_ym19_1_1462886037011_5494" dir="ltr">My actual question is this - if you have java apps that have <span style="font-size: 9pt; font-family: 'Courier New'; white-space: pre-wrap;" id="yui_3_16_0_ym19_1_1462886037011_5578"><security-role></span><span style="font-size: 9pt; font-family: 'Courier New'; white-space: pre-wrap;" id="yui_3_16_0_ym19_1_1462886037011_5592"><role-name>role1</role-name></span><span style="font-size: 9pt; font-family: 'Courier New'; white-space: pre-wrap;" id="yui_3_16_0_ym19_1_1462886037011_5622"></security-role> or are using @DeclareRoles, is there a mechanism where the application/SP can *register* with the PDP with those roles, rather than copy-pasting into those different IAM/PDP solutions?</span></div><div id="yui_3_16_0_ym19_1_1462886037011_5494" dir="ltr"><span style="font-size: 9pt; font-family: 'Courier New'; white-space: pre-wrap;"><br></span></div><div id="yui_3_16_0_ym19_1_1462886037011_5494" dir="ltr"><span style="font-size: 9pt; font-family: 'Courier New'; white-space: pre-wrap;">thanky!</span></div><div id="yui_3_16_0_ym19_1_1462886037011_5494" dir="ltr"><span style="font-size: 9pt; font-family: 'Courier New'; white-space: pre-wrap;">-D</span></div></div></body></html>