Re: [keycloak-user] OpenID Connect Clients and Roles

Hi, I'm fairly new to OpenID Connect and Keycloak (using version 2.2.0-CR1 and RedHat SSO v7), I've managed to get a client working with a realm within Keycloak. I've configured the client in the realm using a shared key and have configured my remote client accordingly. It works fine for authentication and I'm getting the standard claims back. But I don't know how to get the roles associated with the user to come through. I can see in the endpoint OpenID connect configuration on the server that the following claims are supported: "claim_types_supported": [ "normal" ], "claims_parameter_supported": false, "claims_supported": [ "sub", "iss", "auth_time", "name", "given_name", "family_name", "preferred_username", "email" ] Does this mean that it's not possible to get the roles from the userinfo call? Or if it is possible, how do I configure it to be supported? Any help is very much appreciated ! Thanks andy _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user