[keycloak-dev] groups vs. organizations

Bill Burke bburke at redhat.com
Thu Jul 30 18:28:35 EDT 2015


I'm trying to wrap my head around how your concept of an organization is 
different than a group.  Wouldn't an organization just be a more 
stricter form of a group?  A group could have any arbitrary roles and 
attributes associated with it.  An organization could too.

Is the difference that the organization has a specific common set of 
attributes?  i.e. what's in saml organization descriptors.

My thinking is that we'd have both organizations and groups.  They would 
work the same exact way except organization would have some pre-defined 
attribute types.

Bill Burke
JBoss, a division of Red Hat

More information about the keycloak-dev mailing list