Score:-1

Keycloak 16 - can it log OIDC access tokens for Open-ID Connect identity providers?

de flag

How can I make Keycloak 16 log the access token, when using an Open-ID Connect identity provider? I need to see what claims the OIDC provider sends to Keycloak.

Paul avatar
cn flag
Keycloak 16 is EOL and no longer supported.
Paul avatar
cn flag
"Questions should demonstrate reasonable business information technology management practices. Questions that relate to unsupported hardware or software platforms or unmaintained environments may not be suitable for Server Fault". Keycloak 16 is not merely some old number, it was built on Wildfly, and supported versions are built on Quarkus, in addition to other changes. Old versions of IAM tools seem to me clearly outside of "reasonable business information technology management practices."
Score:1
br flag

You can enable token logging in the Keycloak server configuration. This will allow you to see the claims that the OIDC provider sends to Keycloak.

  • Login to the Keycloak administration console.
  • Select the realm that you want to configure from the dropdown in the top left corner.
  • Click on the "Server" tab in the left-hand menu.
  • Click on the "Logging" tab in the sub-menu.
  • Scroll down to the "Token" section and set the "Token JSON" logging level to "DEBUG".
  • Click "Save" to save the changes.

After you have enabled token logging, you can inspect the Keycloak server logs to see the access token and the claims that were sent by the OIDC provider.

Note that enabling token logging may have security implications and should only be used for debugging and troubleshooting purposes.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.