在keycloak中如何更改经过身份验证的用户的密码

Question

In the keycloak administration, if I set the "Required User Action" of a user to "Update Password". The user is asked for a new password after a successful login, calling:

https://SERVER/auth/realms/REALM/login-actions/required-action?execution=UPDATE_PASSWORD&client_id=CLIENT_ID&tab_id=TAB_ID

Calling this URL with a user logged-in but not configured "Update Password" I get a message "User is already logged in".

What would be the correct URL to call from an external application, eg from a menu with actions edit-profile, change-password...

Edit : In our application we authenticate users managed in keycloak. We would like to be able to link a keycloak page (similar as the one posted) where the user can update/change his password (eg old-pw, new-pw, confirm-pw).

Answer 1

This answer is based on Keycloak 12 (latest version at the time of writing the answer)

You can ask users to change their profile details or passwords from the manage account section. You can get the URL of that screen and direct users to that.

"manage account" link location

Account management screen