[keycloak-user] Keycloak Master Password & Query String

[Niko Köbler]

I wouldn't suggest to write a custom SPI for such dirty use cases.
Just use the impersonation feature of Keycloak. Authenticate as an admin, impersonate as the user you want and you're good to go.
Don't build dirty hacks! Never! Ever! Do! This!

- Niko


> Am 15.10.2019 um 09:57 schrieb Tony Yip <tony.yip at shinetown.com.hk>:
> 
> Dear Barış,
> 
> It is not possible to setup a master password to enter all users account which is also danger. However, if you really need to use this method, you can write a custom SPI for authentication.
> For the query string, you may append the query at the end of the reedirect_uri of OIDC / OAuth2 flow with configuration of the client having the redierct_uri ending with a star(*).
> 
> Tony Yip
> tony.yip at shinetown.com.hk
> Frontend Developer
> Shinetown Telecommunication Limited
> 
> Web: shinetown.com.hk
> 
>> On 15 Oct 2019, at 3:23 PM, Namık Barış İDİL <namikbarisidil at hotmail.com> wrote:
>> 
>> 
>> Hello All,
>> 
>> Is there any way to have a master password which can enter all users account? Another thing I would like to ask if there is any way to have something in a query string in the login page. I mean, I would like to redirect a user from another page to login page and I would like to embed some information to the redirect link.
>> 
>> Thanks in advance.
>> 
>> Barış
>> 
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
Url : http://lists.jboss.org/pipermail/keycloak-user/attachments/20191015/ce60d253/attachment.bin