[keycloak-dev] Custom Realm Attributes

[Thomas Darimont]

Hello group,

currently the configuration for themes, extensions, clients is quite local
to a
component and one has to repeat some information like company name,
trademark,
URLs, parts of application name etc.

It would be cool if an admin could configure a set of key-value pairs on
realm
level that could then be used / referenced in client definitions, user
attributes, themes, emails.
The admin-console could feature a new tab 'attributes' in the
realm-settings
in which one could configure key-value pairs with support for string,
boolean,
numeric and lists values.

This could also be used as a centralized configuration source of custom
extensions e.g.
FederationProvider, RequiredActions, Authenticators.

Of course something like this is already partially possible with system
properties / env-variables.
However these values are hard to change at runtime. Having a dedicated
support for realm-wide
attributes managed by an "attributes" section in the admin-console would
allow for simpler configuration.

An idea on top of that is to let extensions (like custom Authenticators)
register their configuration settings
as attributes in the realm which could then be shown as an overview in the
"attributes" section of the realm-settings.
This would give provide you with all the configuration settings for all
realm-components at a glance.

Cheers,
Thomas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20160828/44f27b35/attachment.html