Repository navigation
Replies: 1 comment
|
I don't know if this is a issue/bug/or just my configuration but there is definitely something weird going on between versions 19.0.3 and 20.0.3. To explain this, what I did is on the 20.0.3 console - master realm I switched the admin theme from keycloak v2 to keycloak. When doing this and then logout/login to keycloak, returning to the created realm above, I go and display the user there in keycloak users - the user attributes display properly here as 1 user attribute with the old multi-value syntax - "RolefromIDP##RolefromDB##RolefromDB##RolefromDB##RolefromIDP". This doesn't fix the overall connection to the application as it still takes the roles from the database to one user attribute and the IdP roles coming through appear as: "roles": [ Then when switching back to keycloak v2 theme the display in console has the display of a IdP users the same way as it is returned to the application. Any assistance with this would be greatly appreciated. Thanks |
Uh oh!
There was an error while loading. Please reload this page.
Hello, I'm trying to have a user attribute I have named Roles. From the saml IdP we pull in roles or role and place the value in user_storage under Roles. I also have singular-keycloak-database-federation in use to pull values into keycloak, including what my company uses as application roles. Here is where my problem lies... On initiating connection to IdP from application, I log in, and then I'm redirected back to my application. I have a testing application that displays the information of the openid user_information, token, etc ( openid-connect-client ). Anyways, the problem I'm having is the values from the IdP and the DB are not merged together. For the IdP the value returned shows values separated in json array. However the values from the database, because of multivalued are shown as a long string of "roles" separated by ## values. Example:
"roles": [
"Role1",
"Role2##Role3##Role4##Role5",
"Role6"
]
What I was expecting was:
"roles": [
"Role1",
"Role2",
"Role3",
"Role4",
"Role5",
"Role6"
]
Is this an issue with keycloak 20? Is this something I have done wrong/incorrect? Please advise.
All reactions