3 ms·
Keycloak actually makes it very easy now, assuming you have account-api and account2 feature flags set (default these days). You remove "manage-account" inside
by sascha_sl 4y ago
Keycloak actually makes it very easy now, assuming you have account-api and account2 feature flags set (default these days). You remove "manage-account" inside the "account" client from the default roles. Do mind this breaks the account console for those users (which is what you probably want anyway).
- fjni 4y agoI don’t remember exactly, but I think this also took away the ability for users to manage their factors (I.e. register a new hardware token)