[keycloak-user] Script Based Authenticator - Web Service Call

Hello all, I'm attempting to use a script based authenticator to fire as part of the post login flow of an identity provider. I need to make a web service call from this script. Is this even possible? I've tried using XMLHttpRequest, but as this is not executing inside a browser, it does not work. Is there a way to get access to RestEasy on Wildfly and use REST.request()? Basically, has anyone had to do anything similar, and what did you do to accomplish this? Or, if this isn't possible in the limitations of a script based authenticator, should I just write a small authenticator in Java to handle this. Thanks for the help. -Frank -- FRANK HERRMANN ASSOCIATE SOFTWARE ARCHITECT T: 561-880-2998 x1563 E: frank.herrmann(a)modmed.com [image: [ Modernizing Medicine ]] <http://www.modmed.com/> [image: [ Facebook ]] <http://www.facebook.com/modernizingmedicine> [image: [ LinkedIn ]] <http://www.linkedin.com/company/modernizing-medicine/> [image: [ YouTube ]] <http://www.youtube.com/user/modernizingmedicine> [image: [ Twitter ]] <https://twitter.com/modmed> [image: [ Blog ]] <http://www.modmed.com/BlogBeyondEMR> [image: [ Instagram ]] <http://instagram.com/modernizing_medicine> [image: [ MOMENTUM 2019 ]] <https://momentum.modmed.com/> -- *CONFIDENTIALITY NOTICE:* This e-mail message may contain material protected by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations and other state and federal laws and legal privileges. This message is only for the personal and confidential use of the individuals or organization to whom the message is addressed. If you are an unintended recipient, you have received this message in error, and any reading, distributing, copying or disclosure is unauthorized and strictly prohibited.  All recipients are hereby notified that any unauthorized receipt does not waive any confidentiality obligations or privileges. If you have received this message in error, please notify the sender immediately at the above email address and confirm that you have deleted or destroyed the message.