You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Keycloak and Outline wiki OIDC_SCOPES help needed
#50267
The error means Keycloak doesn't recognize groups as a valid scope for your client. Adding a mapper inside the dedicated client scope isn't quite enough on its own. You need to create a proper client scope named groups and assign it to your client.
Create the client scope
Left menu -> Client Scopes -> Create client scope -> name it groups, type: Optional -> Save
Add the Group Membership mapper
Inside the new scope -> Mappers** -> Add mapper -> By configuration -> Group Membership
Token Claim Name: groups
Full group path: off (unless Outline expects /group/name)
Enable for ID token, Access token, Userinfo -> Save
Assign it to your Outline client
Clients -> your Outline client -> Client Scopes tab -> Add client scope -> add groups as Optional
That should do it... OIDC_SCOPES=openid profile email groups will now be recognized and group membership will show up in the token. Hope it helps
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Hello All,
I have setup Keycloak and Outline wiki and all is working.
I want to extend the OIDC_SCOPES=openid profile email to OIDC_SCOPES=openid profile email groups
Guides that i found point ot add custom mapper Clients --> Client details -->Dedicated scopes --> Configure New Mapper --> Group Membership
After that i reciave errors and it seem groups are not mapped.
OAuth error during authentication: Invalid scopes: openid profile email groups
Can someone point me or provide info how this shuld be set.
Thanks in advance
All reactions