[prev in list] [next in list] [prev in thread] [next in thread] 

List:       keycloak-user
Subject:    [keycloak-user] (no subject)
From:       mposolda () redhat ! com (Marek Posolda)
Date:       2017-04-10 19:46:49
Message-ID: 9fd147d3-f1c2-ae04-df08-1bd9e7eebff7 () redhat ! com
[Download RAW message or body]

Maybe it will help to use "use-resource-role-mappings" switch in your 
application adapter configuration (in file keycloak.json).

If it won't help, then I would doublecheck if roles are present in the 
access token. It's possible that you need to add those roles as "scope" 
for your client as well. Unless your client has "Full scope allowed" on.

Marek

On 07/04/17 12:38, JiJesH V U wrote:
> I have these 2 keycloak configurations for per app role mapping.I have
> configured the role per app and assigned to the user. When I remove a
> particular role from app1 it can login. This does not happen.What I'm doing
> wrong here.
>
>
>
>
>
>
>
>
>
> regards,
> jijesh v u
> mob: +91 9037329817
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user



[prev in list] [next in list] [prev in thread] [next in thread]