libre.sh/keycloak-scim
4
0
Fork 0
Code Issues 15 Pull requests Releases 1 Activity Actions

KEYCLOAK-14846 default roles processing

Browse source
This commit is contained in:
vramik 2020-12-08 23:03:23 +01:00 committed by Hynek Mlnařík
parent 4b0e30c9bc
commit 7ad57a47ca
2 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
release_notes/topics/13_0_0.adoc Normal file
View file

@ -0,0 +1,8 @@
= Highlights
== Default roles processing improvement
Default roles are now internally stored as composite roles of a new role usually named `default-roles-${realmName}`. Instead of assigning
both realm and all client default roles directly to newly created users or users imported through Identity Brokering, just the role is
assigned to them and the rest of default roles are assigned as effective roles. This change improves performance of default roles processing,
especially with larger number of clients, because it is no longer necessary to go through all clients.

4
server_admin/topics/roles/user-role-mappings/default-roles.adoc
View file

@ -3,7 +3,9 @@
Default roles allow you to automatically assign user role mappings when any user is newly created or imported through
<<_identity_broker, Identity Brokering>>.
To specify default roles go to the `Roles` left menu item, and click the `Default Roles` tab.
To specify default roles go to the `Roles` left menu item, and click the `Default Roles` tab or alternatively you can
search for `default-roles-${realmName}` role in the `Realm Roles` tab and then click Edit. Please note the `default-roles-${realmName}`
role cannot be removed because it serves as a container for both realm and client default roles.
.Default Roles
image:{project_images}/default-roles.png[]