Skip to content

Commit ac41872

Browse files
authored
Enhance Keycloak documentation with client scopes
Added a section on client scopes and their built-in options. Updated the description for evaluating scopes and viewing generated access tokens.
1 parent ea777d6 commit ac41872

File tree

1 file changed

+21
-1
lines changed

1 file changed

+21
-1
lines changed

_articles/keycloak.md

Lines changed: 21 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,32 @@ layout: page
33
title: Keycloak
44
---
55

6+
## Terminology
7+
8+
### Client > Client scopes
9+
10+
Some built-in client scopes are:
11+
12+
- openid - use this scope to signal that you're using OpenID Connect
13+
- profile
14+
- acr
15+
- address
16+
- basic
17+
- email
18+
- microprofile-jwt
19+
- offline_access
20+
- organization
21+
- phone
22+
- profile
23+
- roles
24+
- web-origins
25+
626
## Cookbook
727

828
### Evaluate scopes and view a generated access token
929

1030
Go to Clients -> (client name) -> Client scopes -> Evaluate.
1131

12-
This allows you to see **protocol mappers** in action and see what a generated access token will look like with the current settings.
32+
This allows you to see **protocol mappers** in action, and effectively see what a generated access token would look like, with the current settings.
1333

1434
This is very useful when integrating other apps with Keycloak, to see what data will be shared with the third party app.

0 commit comments

Comments
 (0)