My understanding is that currently groups are a Keycloak only concept, it allows you to group users and assign roles to groups. In turn users will inherit group roles. That's as far as it goes today, there are items on the keycloak JIRA related to Group based authorizations, no target though.

Hi,

So, if I understand correctly. I want to assign a user task to a group of users (let say "manager"). If bob and tom are part of this group "manager" in Keycloak and my process implements a group assignation to "manager". It's not going to work because a Keycloak group is not reflected to jBPM ?

What can I do as a workaround. Assign individually all the users from the group list as actors ?

Thanks

Greg

EDIT: Actually a role in Keycloak is a group in jBPM. So that works

I have the same problem. I did the integration of jBPM with Keycloak.

It is authenticating correctly, but when I do the process and assign to an existing group in Keycloak, the process does not appear for the user, only if I link the process directly to the user login.

Has anyone here solved this problem?