[keycloak-dev] default roles vs. registration roles

I think you're going about the default roles thing wrong as far as UI goes. Since default roles really are only useful for newly registered users they should be configured in one place under a "registration" menu item in the "Realm" section of the Admin UI. The way it is now, you'd have to go to possibly N different screens to configure roles applied to a newly registered user. So this "registration" config page would look pretty much like the role mapping page in which you select roles you want applied when registering. When we have composite roles this page should automatically manage a "REGISTRATION" composite role behind the scenes. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com