10:39 a.m.
Hi,
in the Admin Events / Login Events - View in the Administration Console
in Keycloak, I can see e.g. if users logged in or were assigned to a role.
However, the users are only referenced by their id.
I can determine the username by constructing an URL (e.g.
.../realms/<MY_REALM>/users/<UserId> ) and navigating to it.
Is there an easier way?
Best regards,
Guido
9:04 p.m.
Hi,
does anyone possibly have similar concerns / a workaround? The Admin
Events View
in the Administration Console is of limited use for our Keycloak admins
if they have to lookup
the usernames of the concerned users.
In addition, it seems that the Admin Events do not contain information
on which role(s)
were assigned to / removed from a user - I can only see a general update
of the
client-role-mapping.
Is this true? Is there a way to extend the Admin Events such that it is
possible to see which role(s) were
added/removed?
Thanks in advance, best regards,
Guido
On 06.04.19 10:39 Guido Wimmel wrote:
Hi,
in the Admin Events / Login Events - View in the Administration Console
in Keycloak, I can see e.g. if users logged in or were assigned to a role.
However, the users are only referenced by their id.
I can determine the username by constructing an URL (e.g.
.../realms/<MY_REALM>/users/<UserId> ) and navigating to it.
Is there an easier way?
Best regards,
Guido
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
8:07 p.m.
Hi Guido,
One possible way you could achieve what you want is to implement a custom event listener.
See
https://github.com/zekidkiller/keycloak/tree/master/examples/providers/ev...
for an example.
Then using a combination of the API
https://www.keycloak.org/docs-api/6.0/rest-api/index.html#_users_resource and/or Keycloak
classes
https://www.keycloak.org/docs-api/6.0/javadocs/org/keycloak/storage/user/...
you should be able to get real values for IDs.
The easiest way might be the API as it is very frequently a 1-1 mapping for any resource
path (given in the event details).
Kind regards,
Huw
________________________________
From: keycloak-user-bounces(a)lists.jboss.org <keycloak-user-bounces(a)lists.jboss.org>
on behalf of Guido Wimmel <guido_99(a)gmx.de>
Sent: 08 May 2019 20:04
To: keycloak-user(a)lists.jboss.org
Subject: Re: [keycloak-user] Show Username in Admin Events / Login Events
Hi,
does anyone possibly have similar concerns / a workaround? The Admin
Events View
in the Administration Console is of limited use for our Keycloak admins
if they have to lookup
the usernames of the concerned users.
In addition, it seems that the Admin Events do not contain information
on which role(s)
were assigned to / removed from a user - I can only see a general update
of the
client-role-mapping.
Is this true? Is there a way to extend the Admin Events such that it is
possible to see which role(s) were
added/removed?
Thanks in advance, best regards,
Guido
On 06.04.19 10:39 Guido Wimmel wrote:
Hi,
in the Admin Events / Login Events - View in the Administration Console
in Keycloak, I can see e.g. if users logged in or were assigned to a role.
However, the users are only referenced by their id.
I can determine the username by constructing an URL (e.g.
.../realms/<MY_REALM>/users/<UserId> ) and navigating to it.
Is there an easier way?
Best regards,
Guido
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
9:06 p.m.
Hi Huw,
thank you very much for the helpful advice.
The event listener would be able to get the real user names - but
probably the Admin Console would have to be extended somehow to make the
user names appear in the Admin Events view?
BTW, the solution for the second question (seeing which roles were
added/removed) is simple - just turning on "Include Representation".
Sorry for overlooking this.
Best regards,
Guido
Am 13.05.19 um 20:07 schrieb Huw McNamara:
Hi Guido,
One possible way you could achieve what you want is to implement a
custom event listener. See
https://github.com/zekidkiller/keycloak/tree/master/examples/providers/ev...
an example.
Then using a combination of the API
https://www.keycloak.org/docs-api/6.0/rest-api/index.html#_users_resource...
Keycloak classes
https://www.keycloak.org/docs-api/6.0/javadocs/org/keycloak/storage/user/...
should be able to get real values for IDs.
The easiest way might be the API as it is very frequently a 1-1
mapping for any resource path (given in the event details).
Kind regards,
Huw
------------------------------------------------------------------------
*From:* keycloak-user-bounces(a)lists.jboss.org
<keycloak-user-bounces(a)lists.jboss.org> on behalf of Guido Wimmel
<guido_99(a)gmx.de>
*Sent:* 08 May 2019 20:04
*To:* keycloak-user(a)lists.jboss.org
*Subject:* Re: [keycloak-user] Show Username in Admin Events / Login
Events
Hi,
does anyone possibly have similar concerns / a workaround? The Admin
Events View
in the Administration Console is of limited use for our Keycloak admins
if they have to lookup
the usernames of the concerned users.
In addition, it seems that the Admin Events do not contain information
on which role(s)
were assigned to / removed from a user - I can only see a general update
of the
client-role-mapping.
Is this true? Is there a way to extend the Admin Events such that it is
possible to see which role(s) were
added/removed?
Thanks in advance, best regards,
Guido
On 06.04.19 10:39 Guido Wimmel wrote:
> Hi,
>
> in the Admin Events / Login Events - View in the Administration Console
> in Keycloak, I can see e.g. if users logged in or were assigned to a
role.
> However, the users are only referenced by their id.
>
> I can determine the username by constructing an URL (e.g.
> .../realms/<MY_REALM>/users/<UserId> ) and navigating to it.
>
> Is there an easier way?
>
> Best regards,
> Guido
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
9:17 p.m.
Hi Guido,
Apologies, I misread your question. I answered from the perspective of outputting the
information to an external logging system. As far as extending the admin console goes, I
do not know if that is possible. Hopefully, someone else on the mailing list can help.
Glad you got an answer to your second question.
Kind regards,
Huw
________________________________
From: Guido Wimmel <guido_99(a)gmx.de>
Sent: 16 May 2019 20:06
To: Huw McNamara; keycloak-user(a)lists.jboss.org
Subject: Re: [keycloak-user] Show Username in Admin Events / Login Events
Hi Huw,
thank you very much for the helpful advice.
The event listener would be able to get the real user names - but probably the Admin
Console would have to be extended somehow to make the user names appear in the Admin
Events view?
BTW, the solution for the second question (seeing which roles were added/removed) is
simple - just turning on "Include Representation".
Sorry for overlooking this.
Best regards,
Guido
Am 13.05.19 um 20:07 schrieb Huw McNamara:
Hi Guido,
One possible way you could achieve what you want is to implement a custom event listener.
See
https://github.com/zekidkiller/keycloak/tree/master/examples/providers/ev...
for an example.
Then using a combination of the API
https://www.keycloak.org/docs-api/6.0/rest-api/index.html#_users_resource and/or Keycloak
classes
https://www.keycloak.org/docs-api/6.0/javadocs/org/keycloak/storage/user/...
you should be able to get real values for IDs.
The easiest way might be the API as it is very frequently a 1-1 mapping for any resource
path (given in the event details).
Kind regards,
Huw
________________________________
From:
keycloak-user-bounces@lists.jboss.org<mailto:keycloak-user-bounces@lists.jboss.org>
<keycloak-user-bounces@lists.jboss.org><mailto:keycloak-user-bounces@lists.jboss.org>
on behalf of Guido Wimmel <guido_99@gmx.de><mailto:guido_99@gmx.de>
Sent: 08 May 2019 20:04
To: keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>
Subject: Re: [keycloak-user] Show Username in Admin Events / Login Events
Hi,
does anyone possibly have similar concerns / a workaround? The Admin
Events View
in the Administration Console is of limited use for our Keycloak admins
if they have to lookup
the usernames of the concerned users.
In addition, it seems that the Admin Events do not contain information
on which role(s)
were assigned to / removed from a user - I can only see a general update
of the
client-role-mapping.
Is this true? Is there a way to extend the Admin Events such that it is
possible to see which role(s) were
added/removed?
Thanks in advance, best regards,
Guido
On 06.04.19 10:39 Guido Wimmel wrote:
Hi,
in the Admin Events / Login Events - View in the Administration Console
in Keycloak, I can see e.g. if users logged in or were assigned to a role.
However, the users are only referenced by their id.
I can determine the username by constructing an URL (e.g.
.../realms/<MY_REALM>/users/<UserId> ) and navigating to it.
Is there an easier way?
Best regards,
Guido
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user
1806
days inactive
1847
days old
4 comments
2 participants
participants (2)
-
Guido Wimmel -
Huw McNamara