[keycloak-dev] KEYCLOAK-11152 : attributes for clients

[Stian Thorgersen]

I'm not in favor of adding this.

Client attributes are internally used, not aimed at users to introduce
arbitrary attributes. There's no reserved internally attribute names, as
such there is no guarantee that user defined client attributes don't
conflict with internally defined client attributes.

>From what I know this is the first time the ability to define client
attributes in the admin console is being requested. The UI for adding
attributes adds complexity to the client configuration screen, which is not
something we want if there's very few users of it.

Looking at the use-cases mentioned in
https://github.com/keycloak/keycloak/pull/6250. They can be achieved either
with overriding the theme for a client, or with a client scope.
For no_email_verification I would rather have added a "verified_email"
client scope, which when requested requires the user to verify the email,
rather than the opposite. For auto_group_join that doesn't make much sense
to me to add a user automatically to a group when they login to a client.
It could be achieved with a client scope, but then again I think you should
probably rethink this approach.

On Wed, 6 Nov 2019 at 07:28, cedric at couralet.eu <cedric at couralet.eu> wrote:

> Hi,
>
> Do you have any idea if this feature could land in keycloak ?
> For us, it could limit *a lot* the number of themes we have to maintain.
> We have a lot of login page where app developer want to put link to help
> page or other informational notice (or descriptions, logos...), but
> keycloak lack a way to add it by client (except by a new theme each time).
> We play a little with client description but it is not really elegant.
>
> I see attributes for clients as a way to better customize keycloak page by
> clients (attributes would need to be accessible from template obviously).
>
> Cédric
>
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev