How to enable OIDC Client's authorizationServicesEnabled field using CLI #17115

jeonsoh · 2023-02-15T10:22:30Z

jeonsoh
Feb 15, 2023

Hello,

I want to set authorizationServicesEnabled field to enable in the keycloak_openid_client settings using cli.
https://www.keycloak.org/docs-api/9.0/rest-api/index.html#_clientrepresentation

When I try to update master-realm client in Master Realm using PUT /{realm}/clients/{id} api, the other fields(directAccessGrantsEnabled, serviceAccountsEnabled, and so on) are working well. But, authorizationServicesEnabled field not working.
I try to set enabled, but authorizationServicesEnabled field still disabled.

#!/bin/sh

test()
{
  cat << EOF
{
    "authorizationServicesEnabled": true,
     "serviceAccountsEnabled": true,
    "bearerOnly": false
}
EOF
}

curl -k \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -H "Accept: application/x-www-form-urlencoded" \
  -X PUT "http://${AUTH_DOMAIN}/auth/admin/realms/master/clients/${CLIENT_ID}" \
  --data "$(test)"

Keycloak App Version
9.0.2

Associate Issue
keycloak/terraform-provider-keycloak#446

rausub · 2025-02-05T08:39:37Z

rausub
Feb 5, 2025

I am facing the same issue

with admin-cli token

2025-02-05 03:36:37,941 ERROR [org.keycloak.services.error.KeycloakErrorHandler] (executor-thread-16) Uncaught server error: java.lang.RuntimeException: Only confidential clients are allowed to set authorization settings
        at org.keycloak.models.utils.RepresentationToModel.createResourceServer(RepresentationToModel.java:1578)
        at org.keycloak.authorization.admin.ResourceServerService.create(ResourceServerService.java:89)
        at org.keycloak.authorization.admin.AuthorizationService.enable(AuthorizationService.java:67)
        at org.keycloak.services.resources.admin.ClientsResource.createClient(ClientsResource.java:204)
        at org.keycloak.services.resources.admin.ClientsResource$quarkusrestinvoker$createClient_1912e34f91860fbaabe8443c7133bbe9d618125d.invoke(Unknown Source)
        at org.jboss.resteasy.reactive.server.handlers.InvocationHandler.handle(InvocationHandler.java:29)
        at io.quarkus.resteasy.reactive.server.runtime.QuarkusResteasyReactiveRequestContext.invokeHandler(QuarkusResteasyReactiveRequestContext.java:141)
        at org.jboss.resteasy.reactive.common.core.AbstractResteasyReactiveContext.run(AbstractResteasyReactiveContext.java:147)
        at io.quarkus.vertx.core.runtime.VertxCoreRecorder$14.runWith(VertxCoreRecorder.java:582)
        at org.jboss.threads.EnhancedQueueExecutor$Task.run(EnhancedQueueExecutor.java:2513)
        at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1538)
        at org.jboss.threads.DelegatingRunnable.run(DelegatingRunnable.java:29)
        at org.jboss.threads.ThreadLocalResettingRunnable.run(ThreadLocalResettingRunnable.java:29)
        at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
        at java.base/java.lang.Thread.run(Thread.java:840)

0 replies

ldicarlo · 2026-11-03T11:45:21Z

ldicarlo
Nov 3, 2026

Hey!
You can find more about that error by looking through the code: https://github.com/search?q=repo%3Akeycloak%2Fkeycloak+%22Only+confidential+clients+are+allowed+to+set+authorization+settings%22&type=code

Your client shoud be set to public: false maybe? Or bearerOnly: true.
See in the code, relative to the version you are using.

0 replies

Navigation Menu

Repository navigation

How to enable OIDC Client's authorizationServicesEnabled field using CLI #17115

Uh oh!

{{title}}

Uh oh!

Replies: 2 comments

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

How to enable OIDC Client's authorizationServicesEnabled field using CLI #17115

Uh oh!

jeonsoh Feb 15, 2023

Replies: 2 comments

Uh oh!

rausub Feb 5, 2025

Uh oh!

ldicarlo Nov 3, 2026

jeonsoh
Feb 15, 2023

rausub
Feb 5, 2025

ldicarlo
Nov 3, 2026