This message was deleted.

@Oket I integrated Keycloack with Grails before using SAML. I remember you still need the user detail service, In the user detail service, there is a user detail passed in via the interface with Keycloak, and you can have a set of attributes from Keycloak. With these attributes I believe you can identify the roles to the users. I did these almost several years ago, and my memory could be vague now.