[keycloak-dev] default roles vs. registration roles

[Bill Burke]

I think you're going about the default roles thing wrong as far as UI 
goes.  Since default roles really are only useful for newly registered 
users they should be configured in one place under a "registration" menu 
item in the "Realm" section of the Admin UI.  The way it is now, you'd 
have to go to possibly N different screens to configure roles applied to 
a newly registered user.

So this "registration" config page would look pretty much like the role 
mapping page in which you select roles you want applied when 
registering.  When we have composite roles this page should 
automatically manage a "REGISTRATION" composite role behind the scenes.

-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com