How do we add users to the default roles? I am using the key cloak federation api to do custom authentication for a realm. Noticed that the users are not able to login to the application after being authenticated unless roles are added manually to them. Wondering if the roles can be added within the federation provider code after authenticating the users? Sent from my iPhone _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Hi Bill - Yes, I am using custom federation adapter and could authenticate users successfully. Will try out your suggestions. Thanks. One observation though in the 1.1 Beta1 version- Based on debugging comments, it appears that for each authentication attempt, the below methods in Federation Provider are called multiple times (10 or 12 times) 1) proxy 2) isValid 3) getInstance (in Federation Factory) Thanks once again. Raghu ------------------------------------------------------------------------ *From:* Bill Burke <bburke(a)redhat.com&gt; *To:* keycloak-user(a)lists.jboss.org *Sent:* Friday, November 7, 2014 9:22 PM *Subject:* Re: [keycloak-user] Api for adding roles to users Are you writing a custom federation adapter? Two options: * Define default roles within the admin console. When your user is imported into a UserModel, the default roles will be added * Extract role mappings from your external store, and populate the user model with them when you import the user into the keycloak database. On 11/7/2014 4:46 PM, Raghuram wrote: > How do we add users to the default roles? I am using the key cloak federation api to do custom authentication for a realm. Noticed that the users are not able to login to the application after being authenticated unless roles are added manually to them. Wondering if the roles can be added within the federation provider code after authenticating the users? > > Sent from my iPhone > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org <mailto:keycloak-user@lists.jboss.org> > https://lists.jboss.org/mailman/listinfo/keycloak-user > -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com <http://bill.burkecentral.com/> _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org <mailto:keycloak-user@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-user _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user