I have a realm definition:
"clientPolicies": {
"policies": [
{
"name": "fapi-2-policy",
"description": "FAPI 2.0 Security Policy for IKEA with DPoP",
"enabled": true,
"conditions": [
{
"condition": "client-roles",
"configuration": {
"is-negative-logic": false,
"roles": ["FAPIV2"]
}
}
],
"profiles": ["fapi-2-dpop-security-profile"]
}
]
}
And have 3 clients:
"clients": [
{"clientId": "ikea-tpp" … },
{"clientId": "gateway-exchanger" … },
{"clientId": "internal-services" … },
]
How to set Keycloak to not apply fapi-2-policy to gateway-exchanger?
I tried to add roles configuration, but after having set it, did not matter if I added “FAPIV2“ as role to a given client or not…
Thanks.