User Account Management

User should be able to manage their accounts themselves. This should be implemented as part of the forms module (using jsf).

User should be able to:

• Login - SSO login to realm
• Register account - only if self-registration is allowed by realm
• View and update their user profile
• Change password (including setting one if logged in with social)
• Recover password
• View TOTP settings
• Configure TOTP
• Remove TOTP (if not required by realm)
• View linked social accounts
• Link social account
• Unlink social account
• View authorized application (including scopes)
• De-authorize application

Should a user be able to view groups, roles and applications as well?

There can be a link to manage your account from the login page, but there should also be a well known URL that users can go to (for example www.keycloak.com/account)

As an extension it all forms/pages aimed for end-users should be fully customizable. See https://issues.jboss.org/browse/KEYCLOAK-15