You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Editable User Attributes from Keycloak Client but not editable by Keycloak UI users
#41706
In Keycloak 12, we had an attribute specific to our application that we synced over to Keycloak's user_attribute table. With Keycloak 23, we are no longer able to do this. I looked and found that Keycloak 17+ enforces the user profile attributes defined for the user_attribute table. The solution appears that I have to define this attribute as part of the user profile. But this is a problem because this use attribute appears when editing a user. We don't want this attribute editable or visible by a user or admin that logs in since it's internal. However, we do want it editable by the Keycloak client.
The reason we are adding entries to the user_attribute table is because we query report information from the keycloak tables and don't want to introduce a non-keycloak table with our application specific information or link a remote database to the keycloak server. We want the values for the user to be in the user_attribute with the other relevant attributes for the report we are generating.
Has anyone had this issue? How can I solve this problem cleanly?
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
In Keycloak 12, we had an attribute specific to our application that we synced over to Keycloak's
user_attributetable. With Keycloak 23, we are no longer able to do this. I looked and found that Keycloak 17+ enforces the user profile attributes defined for theuser_attributetable. The solution appears that I have to define this attribute as part of the user profile. But this is a problem because this use attribute appears when editing a user. We don't want this attribute editable or visible by a user or admin that logs in since it's internal. However, we do want it editable by the Keycloak client.The reason we are adding entries to the
user_attributetable is because we query report information from the keycloak tables and don't want to introduce a non-keycloak table with our application specific information or link a remote database to the keycloak server. We want the values for the user to be in theuser_attributewith the other relevant attributes for the report we are generating.Has anyone had this issue? How can I solve this problem cleanly?
All reactions