I am thinking about enable/disable offline tokens per client. So in
admin console in "Client settings" tab there will be on/off switch
"Enable offline tokens" and you will be able to request offline token
for particular client just if switch is enabled. Offline token won't
never timeout, so there won't be any new option in realm timeout
settings though.
Marek
On 01/09/15 16:39, robinfernandes . wrote:
Thank you so much for that information.
So would these offline tokens be at the realm level as well as
currently all token settings are at the realm level?
Is there a roadmap for the 1.6 release?
Thanks,
Robin
On Mon, Aug 31, 2015 at 7:27 AM, Stian Thorgersen <stian(a)redhat.com
<mailto:stian@redhat.com>> wrote:
Sounds like what you might want are offline tokens. They will
allow clients to get a permanent token, which can be revoked by a
user or admin, but doesn't expire. These should be added to 1.6
release.
----- Original Message -----
> From: "robinfernandes ." <robin1233(a)gmail.com
<mailto:robin1233@gmail.com>>
> To: keycloak-user(a)lists.jboss.org
<mailto:keycloak-user@lists.jboss.org>
> Sent: Friday, 28 August, 2015 12:32:07 PM
> Subject: [keycloak-user] Different token timeouts for clients
under the same realm
>
> Hi All,
>
> Is there a possibility where we can set different token timeouts
for clients
> under the same realm?
>
> The use case why we are trying to achieve this is basically we
have 2
> applications which require 2 different timeout settings.
> We want the web client timeouts to be short since there would be
human
> intervention there always, however we want our Agent timeouts to
be very
> large since there might not be anyone to log into it again.
>
> Using Keycloak we have seen that the timeout settings can be
applied only at
> the realm level though, which forces us to have each application
in a
> different realm.
>
> Can we have the timeout settings at the client(application)
level rather than
> the realm level so that we can put both the applications in the
same realm?
>
> Thanks & Regards,
> Robin
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org <mailto:keycloak-user@lists.jboss.org>
>
https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user