[keycloak-user] use JBoss/Javaadapter to verify both realm and client roles

Adrian Matei adrianmatei at gmail.com
Wed Dec 19 06:58:31 EST 2018


Hi everyone,

Is there a possibility to *declaratively* verify in the JBoss/JavaAdapter
that the user(service account) has both REALM and Client roles?
In the documentation I found the following:
use-resource-role-mappingsIf set to true, the adapter will look inside the
token for application level role mappings for the user. If false, it will
look at the realm level for user role mappings. This is *OPTIONAL*. The
default value is *false*.
It sounds like is one or the other, which is kind of limited....
Thanks and regards,
Adrian


More information about the keycloak-user mailing list