Dynamic Client Registration

1

Hi There,

I am trying to authenticate users using grant_type=password for a client and also I assigned the create client, manage client in the service account roles section but still I am not able to create/register a new client. Please advise.

Thanks,
Narendra

2

Do you have view-client, create-client and manage-client roles granted?

3

yes, All 3 were assigned.

4

Are you creating the client using the admin API, or are you trying to use the OIDC Dynamic Client Registration endpoint? If the latter, you have to create an initial access token. Go to “Realm settings”->”Client Registration” to do that.

5

Using oidc protocol and Out of the three methods we have , would like to prefer the user bearer token instead of the other two authentication methods.

6

Please also see the above for more test cases I tried

7

I see. Thanks for the additional context. I didn’t understand you were doing a token exchange from a user to a service account. Does the service account for AppAdmin have the right roles specified in “Service Account Roles” also? That’s usually the problem that yields the insufficient_scope error.

8

Yes , the AppAdmin client (Service account) was assigned with the below 4 roles,
create client
manage client
query client
view client