keycloak-scim/server_admin/topics/users/ref-user-credentials.adoc

35 lines
1.5 KiB
Text

// Module included in the following assemblies:
//
// server_admin/topics/users.adoc
[id="ref-user-credentials_{context}"]
= User credentials
You can manage credentials of a user in the *Credentials* tab.
.Credential management
image:{project_images}/user-credentials.png[]
This tab includes the following fields:
Position::
The arrow buttons in the *Position* column allow you to shift the priority of the credential for the user. The topmost credential has the highest priority. The priority determines which credential is displayed first after a user logs in.
Type::
This column displays the type of credential, for example *password* or *OTP*.
User Label::
This is an assignable label to recognize the credential when presented as a selection option during login. It can be set to any value to describe the
credential.
Data::
This is the non-confidential technical information about the credential. It is hidden, by default. You can click *Show data...* to display the data for a
credential.
Actions::
This column has two actions. Click *Save* to record the value or the user field. Click *Delete* to remove the credential.
You cannot configure other types of credentials for a specific user in the admin console; that task is the user's responsibility.
You can delete the credentials of a user in the event a user loses an OTP device or if credentials have been compromised. You can only delete credentials of a user in the *Credentials* tab.