How to see user client_roles

Getting advice
1

Hi

I am using keycloak 21.1.1 and I would like to see the users client_roles.

We are using client_roles to allow access to resources.

In the old UI you could somewhere deep see what the user claims returned or whatever. Is this available in the new UI aswell?

    # This is an advanced feature that allows you to define OIDC claim mapping expressions.
    # This feature is used to define wg-access-server admins based off a claim in your OIDC token.
    # A JSON-like object of claimKey: claimValue pairs as returned by the issuer is passed to the evaluation function. 
    # See https://github.com/Knetic/govaluate/blob/9aa49832a739dcd78a5542ff189fb82c3e423116/MANUAL.md for the syntax.
    claimMapping:
      # This example works if you have a custom group_membership claim which is a list of strings 
      admin: "'WireguardAdmins' in group_membership"
      access: "'WireguardAccess' in group_membership"

I have this kind of configuration option.

Now what should i replace group_membership with?

2

OK I got closer to something:

Client Scopes → Roles → Mappers → Client roles

Add to ID token using the old UI

ALSO:

You could evaluate using the old UI with your tokens are, like what the hell, where is this in the new UI?!!?!?!?!?!

Clients → My-oidc-client → Client Scopes → Evaluate

EDIT:

It still seems to be there, but it was more easily findable in the old ui.

1 Like