Keycloak 19.0.3 Quarkus, Client confidential access type.

967 views
Skip to first unread message

Dmitri Zamysloff

unread,
Oct 22, 2022, 6:11:42 PM10/22/22
to Keycloak User
Hi,

I want to be able to connect my backend to keycloak to manage users. Therefore I need to configure client. I learned from all videos to older version, that I need to set access type to confidential to be able to use password. But I can't find anything where I can set it.

So the plan was to create the client and then using service account of this client to access the keycloak api using keycloak admin library. So as I understand I will need client name, client secret, service account name and service account password, which I can't set right now.

I am using keycloak client from spring boot. So if there any example or step-by-step instruction for 19.0.3 - would be helpful.

Thank you in advance.

C R

unread,
Oct 23, 2022, 5:00:44 AM10/23/22
to Dmitri Zamysloff, Keycloak User
Hi Dmitri,

The new UI is confusing if you're used to the old one. To create a
confidential client, you just need to set "Client authentication" to
on (off will create a public one). For enabling a service account,
select "Service account roles".

Regards,

CR

Le dim. 23 oct. 2022 à 00:11, Dmitri Zamysloff
<d.zam...@tranziit.com> a écrit :
> --
> You received this message because you are subscribed to the Google Groups "Keycloak User" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/85bbf4d9-44e5-4565-b8e0-220955b74601n%40googlegroups.com.

Dmitri Zamysloff

unread,
Oct 24, 2022, 2:51:31 AM10/24/22
to Keycloak User
Hi,

Thank you for answer. I have done that and I clicked on service account and wanted to set a password for that service account, but it was not possible. I got error which say it is not possible to create password for the user. So how shall I use Keycloak client, which requires from me client name, client secret, user name and user password? I feel I am missing something.

Bildschirmfoto 2022-10-24 um 08.48.11.pngBildschirmfoto 2022-10-24 um 08.50.34.png

C R

unread,
Oct 24, 2022, 9:11:12 AM10/24/22
to Dmitri Zamysloff, Keycloak User
Le lun. 24 oct. 2022 à 08:51, Dmitri Zamysloff <d.zam...@tranziit.com> a écrit :
Hi,

Thank you for answer. I have done that and I clicked on service account and wanted to set a password for that service account, but it was not possible. I got error which say it is not possible to create password for the user. So how shall I use Keycloak client, which requires from me client name, client secret, user name and user password? I feel I am missing something.


Yes, you are misunderstanding the flow.  When you enable "Service account roles" you can use the client credentials to get a token as sevice-accoun-<your_client_id>. This is not a user to be added.

C.
Reply all
Reply to author
Forward
0 new messages