Unable to setup IDP token exchange in Keycloak 4.6.0.Final
After spinning up a Keycloak instance by docker image 4.6.0.Final, the permissions tab of the client and Identity Providers are missing. The tabs are available in version 4.5.0.Final out of the box. The missing of permission tab prevents the setup of token exchange by following official document, Securing Apps Token Exchange
jboss keycloak
asked Nov 19 at 2:34
Reeve Lau
11317
add a comment |
After spinning up a Keycloak instance by docker image 4.6.0.Final, the permissions tab of the client and Identity Providers are missing. The tabs are available in version 4.5.0.Final out of the box. The missing of permission tab prevents the setup of token exchange by following official document, Securing Apps Token Exchange
jboss keycloak
asked Nov 19 at 2:34
Reeve Lau
11317
I have the same problem, I will send an email to user mailing group.
– GGGforce
Nov 19 at 10:52
add a comment |
After spinning up a Keycloak instance by docker image 4.6.0.Final, the permissions tab of the client and Identity Providers are missing. The tabs are available in version 4.5.0.Final out of the box. The missing of permission tab prevents the setup of token exchange by following official document, Securing Apps Token Exchange
jboss keycloak
asked Nov 19 at 2:34
Reeve Lau
11317
After spinning up a Keycloak instance by docker image 4.6.0.Final, the permissions tab of the client and Identity Providers are missing. The tabs are available in version 4.5.0.Final out of the box. The missing of permission tab prevents the setup of token exchange by following official document, Securing Apps Token Exchange
jboss keycloak
jboss keycloak
asked Nov 19 at 2:34
Reeve Lau
11317
asked Nov 19 at 2:34
Reeve Lau
11317
asked Nov 19 at 2:34
Reeve Lau
11317
asked Nov 19 at 2:34
Reeve Lau
11317
asked Nov 19 at 2:34
Reeve Lau
11317
11317
I have the same problem, I will send an email to user mailing group.
– GGGforce
Nov 19 at 10:52
add a comment |
I have the same problem, I will send an email to user mailing group.
– GGGforce
Nov 19 at 10:52
I have the same problem, I will send an email to user mailing group.
– GGGforce
Nov 19 at 10:52
I have the same problem, I will send an email to user mailing group.
– GGGforce
Nov 19 at 10:52
add a comment |
1 Answer
1
active
oldest
votes
I have received an answer from Pedro Silva via the mailing list:
Hi,
...We no longer enable tech preview features by default. You need to enable the feature you want, such as admin fine grained permissions, by passing a specific environment variable. Try to boot your server using this system property:
-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled
-Dkeycloak.profile.feature.token_exchange=enabled
Docs are not reflecting these changes, created https://issues.jboss.org/browse/KEYCLOAK-8865.
answered Nov 19 at 11:39
GGGforce
1931214
1
Yes, the permission tabs are back after specifying the system property by env-e 'JAVA_TOOL_OPTIONS=-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled -Dkeycloak.profile.feature.token_exchange=enabled'to docker run command.
– Reeve Lau
Nov 20 at 3:21
1
And to enable the script Authentication feature, add-Dkeycloak.profile.feature.scripts=enabled
– GGGforce
Nov 27 at 8:54
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53367566%2funable-to-setup-idp-token-exchange-in-keycloak-4-6-0-final%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I have received an answer from Pedro Silva via the mailing list:
Hi,
...We no longer enable tech preview features by default. You need to enable the feature you want, such as admin fine grained permissions, by passing a specific environment variable. Try to boot your server using this system property:
-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled
-Dkeycloak.profile.feature.token_exchange=enabled
Docs are not reflecting these changes, created https://issues.jboss.org/browse/KEYCLOAK-8865.
answered Nov 19 at 11:39
GGGforce
1931214
1
Yes, the permission tabs are back after specifying the system property by env-e 'JAVA_TOOL_OPTIONS=-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled -Dkeycloak.profile.feature.token_exchange=enabled'to docker run command.
– Reeve Lau
Nov 20 at 3:21
1
And to enable the script Authentication feature, add-Dkeycloak.profile.feature.scripts=enabled
– GGGforce
Nov 27 at 8:54
add a comment |
I have received an answer from Pedro Silva via the mailing list:
Hi,
...We no longer enable tech preview features by default. You need to enable the feature you want, such as admin fine grained permissions, by passing a specific environment variable. Try to boot your server using this system property:
-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled
-Dkeycloak.profile.feature.token_exchange=enabled
Docs are not reflecting these changes, created https://issues.jboss.org/browse/KEYCLOAK-8865.
answered Nov 19 at 11:39
GGGforce
1931214
1
Yes, the permission tabs are back after specifying the system property by env-e 'JAVA_TOOL_OPTIONS=-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled -Dkeycloak.profile.feature.token_exchange=enabled'to docker run command.
– Reeve Lau
Nov 20 at 3:21
1
And to enable the script Authentication feature, add-Dkeycloak.profile.feature.scripts=enabled
– GGGforce
Nov 27 at 8:54
add a comment |
I have received an answer from Pedro Silva via the mailing list:
Hi,
...We no longer enable tech preview features by default. You need to enable the feature you want, such as admin fine grained permissions, by passing a specific environment variable. Try to boot your server using this system property:
-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled
-Dkeycloak.profile.feature.token_exchange=enabled
Docs are not reflecting these changes, created https://issues.jboss.org/browse/KEYCLOAK-8865.
answered Nov 19 at 11:39
GGGforce
1931214
I have received an answer from Pedro Silva via the mailing list:
Hi,
...We no longer enable tech preview features by default. You need to enable the feature you want, such as admin fine grained permissions, by passing a specific environment variable. Try to boot your server using this system property:
-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled
-Dkeycloak.profile.feature.token_exchange=enabled
Docs are not reflecting these changes, created https://issues.jboss.org/browse/KEYCLOAK-8865.
answered Nov 19 at 11:39
GGGforce
1931214
edited Nov 19 at 20:23
answered Nov 19 at 11:39
GGGforce
1931214
answered Nov 19 at 11:39
GGGforce
1931214
answered Nov 19 at 11:39
GGGforce
1931214
1931214
1
Yes, the permission tabs are back after specifying the system property by env-e 'JAVA_TOOL_OPTIONS=-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled -Dkeycloak.profile.feature.token_exchange=enabled'to docker run command.
– Reeve Lau
Nov 20 at 3:21
1
And to enable the script Authentication feature, add-Dkeycloak.profile.feature.scripts=enabled
– GGGforce
Nov 27 at 8:54
add a comment |
1
Yes, the permission tabs are back after specifying the system property by env-e 'JAVA_TOOL_OPTIONS=-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled -Dkeycloak.profile.feature.token_exchange=enabled'to docker run command.
– Reeve Lau
Nov 20 at 3:21
1
And to enable the script Authentication feature, add-Dkeycloak.profile.feature.scripts=enabled
– GGGforce
Nov 27 at 8:54
1
1
Yes, the permission tabs are back after specifying the system property by env
-e 'JAVA_TOOL_OPTIONS=-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled -Dkeycloak.profile.feature.token_exchange=enabled' to docker run command.– Reeve Lau
Nov 20 at 3:21
Yes, the permission tabs are back after specifying the system property by env
-e 'JAVA_TOOL_OPTIONS=-Dkeycloak.profile.feature.admin_fine_grained_authz=enabled -Dkeycloak.profile.feature.token_exchange=enabled' to docker run command.– Reeve Lau
Nov 20 at 3:21
1
1
And to enable the script Authentication feature, add
-Dkeycloak.profile.feature.scripts=enabled– GGGforce
Nov 27 at 8:54
And to enable the script Authentication feature, add
-Dkeycloak.profile.feature.scripts=enabled– GGGforce
Nov 27 at 8:54
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53367566%2funable-to-setup-idp-token-exchange-in-keycloak-4-6-0-final%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I have the same problem, I will send an email to user mailing group.
– GGGforce
Nov 19 at 10:52