Creates a merchant account and provisions a Keycloak client_credentials client. Returns client_id and client_secret — the secret is shown only once. POS terminals authenticate using these credentials via Keycloak’s token endpoint. Requires platform admin JWT (realm role admin).
Keycloak JWT. Roles: admin (platform admin — can register merchants, act on behalf of any merchant), merchant (dashboard user — scoped to their own merchant_id via user attribute mapper), POS terminals use client credentials flow with merchant_id injected via protocol mapper.
Merchant registered — store client_secret securely
true
"a1b2c3d4-e5f6-7890-abcd-ef1234567890"
"merchant-a1b2c3d4-e5f6-7890-abcd-ef1234567890"
Shown only once — store securely.
"s3cr3t-shown-once"
"Store client_secret securely — it will not be shown again."