Preventing user from modifying their name in Keycloak

Question

In Keycloak, by default, users are able to change their first and last name in the account manager page. Is it possible to disable this behavior? Removing both fields in the theme results in those values not being sent and the form failing, and a hand-crafted POST request would defeat this method anyway.

Answer 1

I came across a similar problem and after reading this SO post, came to know that although you can disable/hide fields in ftl, you cannot disable form validation

For e.g I hid firstname field , but still cannot submit. Same was the result with disable as well:

I am not aware about disabling a particular field in some other way. However there is a workaround in which you can disable the entire account modification flow (Password can still be changed by Forgot Password option).

Bu default, account modification is enabled, but you can disable it for a particular realm by going to Realms -> Clients -> Account.

The result of this will be, the account page will be inaccessible:

Answer 2

You can remove the client role 'manage_account' for client 'account'.