Create a new user in a specific realm

Delete a user from a specific realm

List users in a specific realm

Update user information in a specific realm

Get user details by ID from a specific realm

Reset a user's password in a specific realm

Search users in a specific realm with filters

Logout all sessions for a specific user

List all available realms

Create a new realm with configurable settings

Update realm settings and configurations

Delete an existing realm

Retrieve detailed settings of a realm

Register a new client/application in a realm

Update client settings (redirect URIs, protocol mappers, etc.)

Remove a client from a realm

List all clients in a realm

List all roles in a specific realm

Create roles at realm or client level

Modify role attributes

Delete roles

Assign a realm role, or a client role when clientId is given, to a user

Remove a realm role, or a client role when clientId is given, from a user

Get all roles directly assigned to a user, returned as { realmMappings, clientMappings }

List all roles defined on a client

Create user groups

Update group attributes

Delete groups

List all groups in a realm

Add or remove users from groups

List all active sessions in a realm

List active sessions for a user

Retrieve authentication and admin events

Clear event logs

Create a protocol mapper for a client (CRITICAL for JWT organization claims)

Create a protocol mapper for a client scope

List protocol mappers for a client

List protocol mappers for a client scope

Update a protocol mapper for a client

Update a protocol mapper for a client scope

Delete a protocol mapper from a client

Delete a protocol mapper from a client scope

Set user attributes (CRITICAL for storing organization data)

Get user attributes including unmanaged attributes

Create a new client scope (CRITICAL for managing token scopes)

Update an existing client scope

Delete a client scope

List all client scopes in a realm

Get details of a specific client scope

Create a new organization (CRITICAL for organization management)

Update an existing organization

Delete an organization

List all organizations in a realm

Get details of a specific organization

Add a user to an organization

Remove a user from an organization

List all members of an organization

Create composite roles (role hierarchies)

Get composite roles for a role

Delete composite roles from a role

Get role details by ID

Update role by ID

Delete role by ID

Find users with a realm role, or with a client role when clientId is given

Assign a realm role, or a client role when clientId is given, to a group

Remove a realm role, or a client role when clientId is given, from a group

Get roles assigned to a group, returned as { realmMappings, clientMappings }

List roles a group could still be granted -- realm roles, or a client's roles when clientId is given

List composite roles for a group

Set group attributes (organization metadata)

Get group attributes

Create a child group (subgroup)

List subgroups of a parent group

List members of a group

Create a new identity provider for SSO integration

Update an existing identity provider

Delete an identity provider

List all identity providers in a realm

Get details of a specific identity provider

Create a mapper for identity provider (external user mapping)

Update an identity provider mapper

Delete an identity provider mapper

List all mappers for an identity provider

Get details of a specific identity provider mapper

List available mapper types for an identity provider

Import identity provider configuration from URL