Keycloak custom admin client causes LARGE token size

Configuring the server
1

I’m trying to create a custom client that can create realms & clients inside the new realm being created.
What I tried was using the information from this article: Invoking KeyCloak's Admin REST API using client secrets - Stack Overflow

This worked great until we had more and more realms getting created. This caused the token to get too large, because each realm’s roles were being included in the token.

How can I create a custom ‘adminish’ client that does not contain all the realms in the token? Is it possible for me to request a token for a particular realm and have it narrowed down?

Thanks!
Josh

2

You can use client ldap role filter/client role instead of realm roles/…