How can I restrict registrating automatically by IdP

You can allow new users to create an account, however, you can restrict the actions (i.e., scope permissions) they are initially (e.g., new users are granted the ‘Guest’ role) allowed to perform.

See: Angular, OAuth 2.0 and Keycloak

1 Like