Repository navigation
Users API returns service accounts after upgrading from 25.0.6 to 26.6.0 #49778
Unanswered
rohit-tiwari-1
asked this question in
Q&A
Replies: 1 comment
|
Service accounts have always been users under the hood in Keycloak (a realm user with a serviceAccountClientLink pointing back to the client), but newer admin API and console versions surface them in the plain users listing where 25.x mostly hid them. As far as I know there is still no server-side exclude filter on GET /users, so you have three practical options:
I would also keep an eye on the existing feature requests asking for an includeServiceAccounts query parameter. This has come up repeatedly since the console started showing them, so a first-class filter is the natural fix and probably lands before too long. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Keycloak version: Upgrading from 25.0.6 to 26.6.0
Description:
We are upgrading Keycloak from 25.0.6 to 26.6.0 and noticed that the following endpoint now includes service accounts in the response, which was not the case in 25.0.6.
GET /admin/realms/{realm}/users?enabled=trueWe rely on this endpoint to fetch the list of real users. Is there a recommended way to use the standard
/usersAPI to get only real users excluding service accounts?All reactions