Skip to content

Commit b6cab0b

Browse files
committed
keycloak section md tweaks
1 parent 8ef4939 commit b6cab0b

File tree

1 file changed

+10
-9
lines changed

1 file changed

+10
-9
lines changed

docs/admin/users/idp-sync.md

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -622,17 +622,18 @@ Below are some details specific to individual OIDC providers.
622622
623623
### Keycloak
624624
625-
The access_type parameter has two possible values: "online" and "offline." By
626-
default, the value is set to "offline". This means that when a user
627-
authenticates using OIDC, the application requests offline access to the user's
628-
resources, including the ability to refresh access tokens without requiring the
629-
user to reauthenticate.
625+
The `access_type` parameter has two possible values: `online` and `offline`.
626+
By default, the value is set to `offline`.
630627
631-
To enable the `offline_access` scope, which allows for the refresh token
628+
This means that when a user authenticates using OIDC, the application requests
629+
offline access to the user's resources, including the ability to refresh access
630+
tokens without requiring the user to reauthenticate.
631+
632+
To enable the `offline_access` scope which allows for the refresh token
632633
functionality, you need to add it to the list of requested scopes during the
633-
authentication flow. Including the `offline_access` scope in the requested
634-
scopes ensures that the user is granted the necessary permissions to obtain
635-
refresh tokens.
634+
authentication flow.
635+
Including the `offline_access` scope in the requested scopes ensures that the
636+
user is granted the necessary permissions to obtain refresh tokens.
636637
637638
By combining the `{"access_type":"offline"}` parameter in the OIDC Auth URL with
638639
the `offline_access` scope, you can achieve the desired behavior of obtaining

0 commit comments

Comments
 (0)