private boolean hasAdminRole(UserModel user, RoleModel adminRole) {
        if (adminRole == null) {
            LOGGER.warnv("Admin role {0} specified in configuration does not seem to exist",
                 approvalConfig.getAdminRole());
            return false;
        }
        return user.hasRole(adminRole);
    }
A user is required to have their account approved (perhaps manually or by an external process).

{@inheritDoc}

@see AccountApprovalOptions options for URI redirect, admin role name, etc.
sso/keycloak/extensions/src/main/java/io/apiman/manager/sso/keycloak/approval/AccountApprovalRequiredActionProvider.java