<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Dear all,</div>
<div> </div>
<div>We are facing a problem with retrieving the client roles from Keycloak. In our implementation we are using the following API to find a retrieve user data via username:</div>
<div><a href="http://www.keycloak.org/docs/rest-api/index.html#_get_users"><font color="blue"><u>http://www.keycloak.org/docs/rest-api/index.html#_get_users</u></font></a></div>
<div> </div>
<div>In the retrieved <a href="http://www.keycloak.org/docs/rest-api/index.html"><font color="blue"><u>UserRepresentation</u></font></a> object instance the property clientRoles is always null. We are using Keycloak 1.9.8 connected to a LDAP server for user
federation. We are connecting a receiving the access token with a admin-user of the corresponding realm. This works just fine. We are also receiving user data like name, e-mail etc., but the client roles are always null. The mappers to sync roles between Keycloak
and LDAP are also defined and working. </div>
<div> </div>
<div>Is there anything else we have overlooked or we should check?</div>
<div> </div>
<div>Thanks and BR,</div>
<div>Marek</div>
<div> </div>
</span></font>
</body>
</html>