You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Specify required claim for an OIDC Identity Provider
#15903
I have a use case where I want to federate a Keycloak realm with an upstream OIDC provider, but I only want users that have a particular group in the groups claim from the upstream provider to be able to authenticate with the Keycloak realm.
In the same way that I can configure a mapper to put users with a particular group in the groups claim into a certain Keycloak group, I would like to be able to say "only users with this group in their groups claim can authenticate with the realm".
If I am missing a mechanism that allows me to do this, please let me know!
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
I have a use case where I want to federate a Keycloak realm with an upstream OIDC provider, but I only want users that have a particular group in the
groupsclaim from the upstream provider to be able to authenticate with the Keycloak realm.In the same way that I can configure a mapper to put users with a particular group in the
groupsclaim into a certain Keycloak group, I would like to be able to say "only users with this group in theirgroupsclaim can authenticate with the realm".If I am missing a mechanism that allows me to do this, please let me know!
All reactions