You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Make IDP management permissions available in REST client
#39644
The Keycloak REST API offers endpoints to enable and manage client Authorization permissions:
GET /admin/realms/{realm}/identity-provider/instances/{alias}/management/permissions
PUT /admin/realms/{realm}/identity-provider/instances/{alias}/management/permissions
This endpoint (in combination with preview features token-exchange,admin-fine-grained-authz:v1) is needed to activate token-exchange for IPDs programmatically (as I understand this might change in the future once Token Exchange V2 is feature complete and supports external token exchange).
Currently it is not available in the Keycloak REST client though. It would be great if this could be added. I have a draft request prepared, but still need to look a bit more into tests.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
The Keycloak REST API offers endpoints to enable and manage client Authorization permissions:
GET /admin/realms/{realm}/identity-provider/instances/{alias}/management/permissionsPUT /admin/realms/{realm}/identity-provider/instances/{alias}/management/permissionsThis endpoint (in combination with preview features
token-exchange,admin-fine-grained-authz:v1) is needed to activate token-exchange for IPDs programmatically (as I understand this might change in the future once Token Exchange V2 is feature complete and supports external token exchange).Currently it is not available in the Keycloak REST client though. It would be great if this could be added. I have a draft request prepared, but still need to look a bit more into tests.
All reactions