Map user attributes from User Storage Provider to Access Token #13883

thiaguh11 · 2022-08-19T11:13:26Z

thiaguh11
Aug 19, 2022

I'm implemented a user storage provider to get users from external legacy database. Now I can search for users in the admin console and view their attributes. I created a mapper in one of the client scopes that I have in my realm that takes the attributes of the users and adds in the token, but the attributes of the users returned from the SPI are not obtained in the token, but when I create a user in the keycloak itself and set attributes for it, those attributes appear in the token.

alplunge · 2022-09-01T08:44:08Z

alplunge
Sep 1, 2022

It is hard to comment without seeing actual implementation on how you map external user to keycloak's UserModel, but
I guess you are using some sort of UserRepresentation to map user loaded from external storage, such representation should override a method @Override public Map<String, List<String>> getAttributes(), this is where you should do the mapping for your roles in order to be visible in the token.

e.g.

@Override
public Map<String, List<String>> getAttributes() {
    MultivaluedHashMap<String, String> attributes = new MultivaluedHashMap<>();
    attributes.add(UserModel.USERNAME, getUsername());
    attributes.add(UserModel.EMAIL,getEmail());
    attributes.add(UserModel.FIRST_NAME,getFirstName());
    attributes.add(UserModel.LAST_NAME,getLastName());
    return attributes;
}

0 replies

Navigation Menu

Repository navigation

Map user attributes from User Storage Provider to Access Token #13883

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Select a reply

Uh oh!

Map user attributes from User Storage Provider to Access Token #13883

Uh oh!

thiaguh11 Aug 19, 2022

Replies: 1 comment

Uh oh!

Uh oh!

alplunge Sep 1, 2022

thiaguh11
Aug 19, 2022

alplunge
Sep 1, 2022