Plugging the data referential service into the IAM
In this section, we’ll learn how to prepare the IAM to be used by the books referential service. We will also integrate the code with the IAM, add the RBAC authorization based on IAM attributes, and look at ABAC’s additional capabilities.
Preparing the IAM to be used by the books referential service
The next very important step in building the books data referential service is to plug it into the IAM for the obvious security reasons that were mentioned at the beginning of this section. To do so, we will lean on the first step of parameters that was done on Keycloak in Chapter 15 and create what is called a client in the demoeditor realm. Since many applications will call the IAM in the end, it is indeed important that Keycloak remains in control of who requests an identity token from it, and this is done through clients.
In the Clients menu, we can see that there are already some default clients configured:
...
