----- Original Message -----
On 07/22/2013 03:24 PM, Bolesław Dawidowicz wrote:
> On 07/22/2013 03:13 PM, Marko Strukelj wrote:
>> When using Google+ SignIn or Facebook SignIn or Twitter SignIn I
>> always get redirected to an authorization form where now there would
>> say something like:
>>
>> Application _Keycloak_ wants access to your email, and a list of
>> friends.
>>
>> Instead of saying:
>>
>> Application _SocialDemo_ wants access to your email ...
>>
>>
>> Me as a user I don't know anything about Keycloak. I came to the web
>> site of SocialDemo. When I see that Keycloak wants access to my
>> email, phishing alarms go off in my head ...
>
> Exactly...
Also IIRC you define the level of access to user information per
application - and requirements may vary. Would it be possible with
global account?
You mean that by granting access to my list of friends when signing in via
SocialDemo, I would be granting the same access to
acme.com and all the apps using
Keycloak? :)
I'd say that's the case, yes.