On 7/22/2013 9:39 AM, Marko Strukelj wrote:
----- Original Message -----
> On 07/22/2013 03:24 PM, Bolesław Dawidowicz wrote:
>> On 07/22/2013 03:13 PM, Marko Strukelj wrote:
>>> When using Google+ SignIn or Facebook SignIn or Twitter SignIn I
>>> always get redirected to an authorization form where now there would
>>> say something like:
>>>
>>> Application _Keycloak_ wants access to your email, and a list of
>>> friends.
>>>
>>> Instead of saying:
>>>
>>> Application _SocialDemo_ wants access to your email ...
>>>
>>>
>>> Me as a user I don't know anything about Keycloak. I came to the web
>>> site of SocialDemo. When I see that Keycloak wants access to my
>>> email, phishing alarms go off in my head ...
>>
>> Exactly...
>
> Also IIRC you define the level of access to user information per
> application - and requirements may vary. Would it be possible with
> global account?
>
You mean that by granting access to my list of friends when signing in via SocialDemo, I
would be granting the same access to
acme.com and all the apps using Keycloak? :)
I'd say that's the case, yes.
You win.
You're right I'm wrong
You're the best, I'm the worst
You're good looking, I'm not very attractive...
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com