How about be consistent and use just FirstName/LastName combination in all places? FullName is especially bad during registration as underlying model (class UserModel) is using combination of FirstName/LastName, which means that after registration, we must programatically parse fullName and try to obtain firstName/lastName from it (note that this is really not good as some languages are using 3 names, some others are using lastName before firstName etc…)

> Realm advanced search of users: https://gatein.mybalsamiq.com/projects/keycloak/Realm%20users%20search Not sure what is difference between "search" and "advanced search" ? Is it that for "search" you can specify just one field and for "advanced search" you can specify more fields? I am asking because in the picture the "Bubble" is around "Search" but there is form for filling all fields, so it seems that it's more related to advanced search?

> Realm new user / edit user: https://gatein.mybalsamiq.com/projects/keycloak/Realm%20new%20user I am not sure if I understand correctly 'By clicking it, the fields "Current password" and "New password" appear'. Does that mean that to change password administrator needs to know old password of user? I don't think that it is possible as in underlying backend model (Picketlink) are passwords saved hashed and salted, so administrator couldn't know the original password of user.

How about other credential types like TOTP?

>>> Realm new user / edit user: https://gatein.mybalsamiq.com/projects/keycloak/Realm%20new%20user >> I am not sure if I understand correctly 'By clicking it, the fields "Current password" and "New password" appear'. Does that mean that to change password administrator needs to know old password of user? I don't think that it is possible as in underlying backend model (Picketlink) are passwords saved hashed and salted, so administrator couldn't know the original password of user. > So for admins we should only display the "New password" field, correct? > Should we display "Current password" whenever the user is trying to update his own password? hmm... not sure if it's necessary as user would have possibility to change his password in Keycloak UI, but he needs to authenticate to Keycloak before he can go there, which means that he already provided his password during Keycloak authentication. It may be also possible that some user wants to setup his password even if he doesn't have any "current password" (For example if he register to Keycloak through social network)

From: "Gabriel Cardoso" <gcardoso(a)redhat.com&gt; To: keycloak-dev(a)lists.jboss.org Sent: Friday, 13 September, 2013 1:28:44 AM Subject: Re: [keycloak-dev] Realm users Hi all, I've just published the pages related to the realm users. - http://ejsclient-cardosogabriel.rhcloud.com/realm-users.html Click advanced search, select one item of the table. The pagination is fake ;) - http://ejsclient-cardosogabriel.rhcloud.com/realm-user-edition.html In the roles table, after selecting a role, it becomes a token (in blue) and the button "+" appears again. Some JS also need to be written for this and to allow deleting roles as well. The select component came from http://ivaynberg.github.io/select2/#changelog . It works with Angular and it was a recommendation from Stian ;) Please let me know what you think. Gabriel On Sep 5, 2013, at 11:26 AM, Gabriel Cardoso wrote: Realm new user / edit user: https://gatein.mybalsamiq.com/projects/keycloak/Realm%20new%20user I am not sure if I understand correctly 'By clicking it, the fields "Current password" and "New password" appear'. Does that mean that to change password administrator needs to know old password of user? I don't think that it is possible as in underlying backend model (Picketlink) are passwords saved hashed and salted, so administrator couldn't know the original password of user. So for admins we should only display the "New password" field, correct? Should we display "Current password" whenever the user is trying to update his own password? hmm... not sure if it's necessary as user would have possibility to change his password in Keycloak UI, but he needs to authenticate to Keycloak before he can go there, which means that he already provided his password during Keycloak authentication. It may be also possible that some user wants to setup his password even if he doesn't have any "current password" (For example if he register to Keycloak through social network) Actually this is a requirement. The prototype is here: https://gatein.mybalsamiq.com/projects/keycloak/Linda%20change%20password I guess this screen would be slightly different in case of having no password :) Gabriel -- Gabriel Cardoso GateIn Portal | User Experience Designer _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev -- Gabriel Cardoso GateIn Portal | User Experience Designer _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev