Hello, I use Keycloak for services communications
In my keycloak setup LDAP Provider in User Federation which mapping roles for user.
After Sync All Users done:
- Realm roles filled with all available roles in LDAP group
- Users filled with all available username with their roles
For example, I have user with name custom-user and roles [custom-default, custom-admin]
I created new client - custom-client with Capability Config
Client authentication
Authorization
And only Service accounts roles active (I need implement Client Credentials grant_type)
Question: How I can implement roles from User in my Service Accounts roles of custom-client automatically? For example, if I have new role (custom-new) from LDAP, it’s updated in Service Accounts Roles to [custom-default, custom-admin, custom-new], how I can make relations with User and Client for automatically updates?