[keycloak-user] How to register new users without using admin API

Does Keycloak provide a public REST API to create new users besides the admin API (http://www.keycloak.org/docs-api/3.4/rest-api/index.html#_users_resource)? I know about the Keycloak registration form that is part of the OpenID Connect flow, but I don't want to use the redirects required during the OpenID Connect flows. We considered using OpenID Connect using the implicit flow and "Resource Owner Password Credential Grant" from within an Angular SPA but do not see a possibility to let users create their own accounts in this scenario. What would be the recommended way to let users register themselves here? In the previous mentioned scenario, I know that it's possible to authenticate a user using the "authorization_endpoint" which can be retrieved from the following endpoint: /auth/realms/<real-name>/.well-known/openid-configuration Is there an equivalent endpoint to register respectively to create a new user? Other question: How does Keycloak prevent attackers from excessively creating user accounts using the OpenID Connect flows if captchas are not activated? Thanks in advance, Johannes. ------------------------------------------------ [cid:image001.jpg@01D369E9.31D42700] Leading Business IT Solutions Bison Schweiz AG Allee 1A CH-6210 Sursee Phone direct +41 58 226 02 31 Phone +41 58 226 00 00 Fax +41 58 226 00 50 johannes.eickhold(a)bison-group.com <mailto:johannes.eickhold@bison-group.com> www.bison-group.com<http://www.bison-group.com/>