Same Java script protocol mapper file for OpenID and SAML clients does not work #16968

sirishkumar · 2023-02-09T10:28:45Z

sirishkumar
Feb 9, 2023

We are using Keycloak 19.0.2 and we have a custom protocol mapper implemented in Java Script which adds attributes to the SAML assertion and to the OIDC token, reference code below for example

metadata-mapper.js

metdata = 'openid-metadata';
exports = metdata;

And the corresponding META-INF/keycloak-scripts.json

{
  "mappers": [
    {
      "name": "metadata-mapper",
      "fileName": "metadata-mapper.js",
      "description": "Adds an attribute for clients."
    }
  ],
  "saml-mappers": [
    {
      "name": "metadata-mapper",
      "fileName": "metadata-mapper.js",
      "description": "Adds an attribute for clients."
    }
  ]
}

Here we are using same metadata-mapper.js file for both SAML and OIDC protocol mappers. When the scripts are deployed to Keycloak, I am able to see this protocol mapper available only for OIDC clients but not for SAML clients.

But when I duplicate the js file and update the keycloak-scripts.json file, I can use it for both SAML and OIDC clients. Updated config below

Working configuration

metadata-mapper-saml.js

metdata = 'openid-metadata';
exports = metdata;

metadata-mapper-oidc.js

metdata = 'openid-metadata';
exports = metdata;

And the corresponding META-INF/keycloak-scripts.json

{
  "mappers": [
    {
      "name": "metadata-mapper",
      "fileName": "metadata-mapper-saml.js",
      "description": "Adds an attribute for clients."
    }
  ],
  "saml-mappers": [
    {
      "name": "metadata-mapper",
      "fileName": "metadata-mapper-oidc.js",
      "description": "Adds an attribute for clients."
    }
  ]
}

Is duplicating the js file. expected or am i doing something wrong?

Navigation Menu

Repository navigation

Same Java script protocol mapper file for OpenID and SAML clients does not work #16968

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Same Java script protocol mapper file for OpenID and SAML clients does not work #16968

Uh oh!

sirishkumar Feb 9, 2023

Working configuration

Replies: 0 comments

sirishkumar
Feb 9, 2023