[keycloak-dev] default roles vs. registration roles

[Bill Burke]

On 11/7/2013 10:21 AM, Bill Burke wrote:
> I think you're going about the default roles thing wrong as far as UI
> goes.  Since default roles really are only useful for newly registered
> users they should be configured in one place under a "registration" menu
> item in the "Realm" section of the Admin UI.  The way it is now, you'd
> have to go to possibly N different screens to configure roles applied to
> a newly registered user.
>
> So this "registration" config page would look pretty much like the role
> mapping page in which you select roles you want applied when
> registering.  When we have composite roles this page should
> automatically manage a "REGISTRATION" composite role behind the scenes.
>

Also, when we have composite roles...when registering, Keycloak will 
examine the "REGISTRATION" composite role and assign each composite part 
to the user.

-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com