Blog

Dive in and expand your knowledge with every scroll.

Accessing All User Data Roles in Keycloak Access Tokens Using Postman

12:46 pm
No Comments

Keycloak is an open-source Identity and Access Management (IAM) solution aimed at modern applications and services. Keycloak provides out-of-the-box authentication and authorization services as well as advanced features like User Federation, Identity Brokering, and Social Login.

“We’ll explore how Keycloak accesses all user data through Postman, granting us control over transferring custom attributes to applications that receive ID Tokens and Access Tokens. Keycloak offers extensive control over the information sent back to the client. To illustrate, we’ll configure a custom attribute for a user and map that attribute to the Access Token using Mappers.”

Set Up Keycloak

Download Keycloak from here, unzip, and start using the following command:

./standalone.sh(bat)

In your browser, go to http://localhost:8080/auth/

Since it’s the first time that the Keycloak server is running, you will have to create an admin user, so let’s create an admin user with admin as the username.

Now, log in to Keycloak using admin user and start configuring Keycloak, the admin user is created in the default realm called master.

A realm secures and manages security metadata for a set of users, applications, and registered oauth clients. Users can be created within a specific realm within the Administration console. Roles (permission types) can be defined at the realm level and you can also set up user role mappings to assign these permissions to specific users.