When I try to check a User's permissions for a given resource at a resource server, I get an error. curl -v -X POST \ > -H "Content-Type:application/json" \ > -H 'Authorization: bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOi AiSldUIiwia2lkIiA6ICIwRnJ0VnFYazM0M2gwTXFkdjZ4bjcwd21HUjJfdV Y4QmNzNUlBN0F2VjBVIn0.eyJqdGkiOiIwMmNjZDg0ZS03ZTE2LTQxYzYtYj c0MC0yNjdiODc0N2IzMjYiLCJleHAiOjE0ODc2Njc0NjksIm5iZiI6MCwiaW F0IjoxNDg3NjY3MTY5LCJpc3MiOiJodHRwczovL2tleWNsb2FrLmZpbi51bm lxdWVkb21haW4vYXV0aC9yZWFsbXMvZmZzIiwiYXVkIjoiYWRtaW4tY2xpIi wic3ViIjoiMmZlZjljOGUtMzc5MC00M2NkLTg5MGYtNDk4ZjJjNzg4ZjI0Ii widHlwIjoiQmVhcmVyIiwiYXpwIjoiYWRtaW4tY2xpIiwiYXV0aF90aW1lIj owLCJzZXNzaW9uX3N0YXRlIjoiOWU5ZWIyMWItMDhkOS00OGJlLTgwYWQtOT k5NTQ4MDA0OGQ5IiwiYWNyIjoiMSIsImNsaWVudF9zZXNzaW9uIjoiYjkwND FkMDItOTIwOS00ZmI5LWIzMTItN2MxZDkyODBlN2NmIiwiYWxsb3dlZC1vcm lnaW5zIjpbXSwicmVzb3VyY2VfYWNjZXNzIjp7InJlYWxtLW1hbmFnZW1lbn QiOnsicm9sZXMiOlsidmlldy1jbGllbnRzIl19fSwibmFtZSI6IiIsInByZW ZlcnJlZF91c2VybmFtZSI6ImZmc19zZXJ2aWNlX3VzZXIifQ.BTSv5HIONmb3PGWhKn- z0E79TUVFKAy3K6vDfais_YLpBx9Du_nHB-TlAjQJdPkFMm_k9VB zAZ7bWxR4ttCyVDb5C8PjfbSDnx6Rx2p7GqxVMWDoWmIlEmx0UQBZ7NnrHFQ bMh5EuuycQUyPf06scH3_Q2tENLmyhdVbodMDpHiVRZkgJ_fzP7rwtXzXAiwXqcJv- RbVoKWsvGKRbTR_22PDpBJIXbuGvE6Xnw6VS2mzA_fBx-yVxBVcsGUDaqHEYAukkWueslw- 9L4A2FMVWxL6VwsmTfwaJvtQhpLOWl9JoYR4Ianai0ZGuaDXNGfyyQOTSeGN7-0_eBUlcFqieQ' \ > -d '"permissions" : [ {"resource_set_name" : "Default Resource", "resource_set_id" : "d7954958-b656-4acf-aa65-d2c46c6b8ad8" }]' \ > https://keycloak.fin.uniquedomain/auth/realms/ffs/authz/ entitlement/test_client > Content-Type:application/json > Content-Length: 123 > * upload completely sent off: 123 out of 123 bytes < HTTP/1.1 400 Bad Request < Connection: keep-alive < X-Powered-By: Undertow/1 < Server: WildFly/10 < Content-Type: text/html < Content-Length: 350 < Date: Tue, 21 Feb 2017 08:53:38 GMT < com.fasterxml.jackson.databind.JsonMappingException: Can not instantiate value of type [simple type, class org.keycloak.authorization.ent itlement.representation.EntitlementRequest] from String value ('permissions'); no single-String constructor/factory method According to the Authorization Services Guide, this should work.