services.AddKeycloakAuthentication(options =>
{
    options.KeycloakBaseUrl = "http://localhost:8080";
    options.RealmAdminCredentials = new KcClientCredentials
    {
        ClientId = "your-client-id",
        Secret = "your-client-secret"
    };
});

// Create Keycloak client
var keycloakClient = new KeycloakClient("http://localhost:8080");

// Authenticate
var token = await keycloakClient.Auth.GetClientCredentialsTokenAsync(
    "your-realm",
    new KcClientCredentials
    {
        ClientId = "your-client-id",
        Secret = "your-client-secret"
    });

// Check for authentication errors
if (token.IsError)
{
    Console.WriteLine($"Authentication error: {token.ErrorMessage}");
    return;
}

// Get the actual token from the Response property
var accessToken = token.Response.AccessToken;
Console.WriteLine($"Successfully authenticated. Access token obtained.");

// Use the token for other operations
var users = await keycloakClient.Users.GetAsync(
    "your-realm",
    token.AccessToken,
    new KcUserFilter { Max = 10 });

var client = new KeycloakClient("http://localhost:8080");
var token = await client.Auth.GetClientCredentialsTokenAsync(realm, credentials);

// Get count of all organizations
var count = await client.Organizations.CountAsync(realm, token.Response.AccessToken);

// List organizations with filter
var filter = new KcOrganizationFilter
{
    Search = "test",
    Exact = false,
    Max = 50
};
var orgs = await client.Organizations.ListAsync(realm, token.Response.AccessToken, filter);

// Get specific organization
var org = await client.Organizations.GetAsync(realm, token.Response.AccessToken, orgId);

var client = new KeycloakClient("http://localhost:8080");
var token = await client.Auth.GetClientCredentialsTokenAsync(realm, credentials);

// Get all members of an organization
var members = await client.Organizations.GetMembersAsync(
    realm,
    token.Response.AccessToken,
    organizationId);

// Get count of members
var count = await client.Organizations.GetMembersCountAsync(
    realm,
    token.Response.AccessToken,
    organizationId);

// Filter members by membership type
var filter = new KcOrganizationMemberFilter
{
    MembershipType = KcMembershipType.Managed,
    Search = "john",
    Exact = false,
    Max = 50
};
var managedMembers = await client.Organizations.GetMembersAsync(
    realm,
    token.Response.AccessToken,
    organizationId,
    filter);

// Add an existing user as a member of the organization
var addResult = await client.Organizations.AddMemberAsync(
    realm,
    token.Response.AccessToken,
    organizationId,
    userId);

// Invite a user by email (sends invitation or registration link)
var emailInvite = new KcInviteUserByEmailRequest
{
    Email = "user@example.com",
    FirstName = "John",
    LastName = "Doe"
};
var inviteByEmailResult = await client.Organizations.InviteUserByEmailAsync(
    realm,
    token.Response.AccessToken,
    organizationId,
    emailInvite);

// Invite an existing user to the organization (by user ID)
var inviteResult = await client.Organizations.InviteExistingUserAsync(
    realm,
    token.Response.AccessToken,
    organizationId,
    userId);

// Remove a member from the organization
var removeResult = await client.Organizations.RemoveMemberAsync(
    realm,
    token.Response.AccessToken,
    organizationId,
    memberId);

// Get all organizations associated with a member
var memberOrgs = await client.Organizations.GetMemberOrganizationsAsync(
    realm,
    token.Response.AccessToken,
    organizationId,
    memberId);

// Get full representation of member's organizations (not just brief)
var memberOrgsFilter = new KcOrganizationFilter
{
    BriefRepresentation = false
};
var memberOrgsFull = await client.Organizations.GetMemberOrganizationsAsync(
    realm,
    token.Response.AccessToken,
    organizationId,
    memberId,
    memberOrgsFilter);