[keycloak-user] User attributes in ID Token using protocol mappers

Marek Posolda mposolda at redhat.com
Tue May 5 11:21:41 EDT 2015


+1 for combine them.

Or maybe UserPropertyMapper could display the combobox with the 
available properties from UserModel? As those could be retrieved by 
reflection.

Marek

On 5.5.2015 17:15, Bill Burke wrote:
> There is a UserProperty mapper and a UserAttribute mapper.  Use the
> "UserAttribute" mapper.  Maybe that's it?  UserProperty is looks for get
> methods on UserModel.  Meh, this as probably a bad idea.  Should
> probably have just combined them.
>
> On 5/5/2015 10:38 AM, Kalinga Dissanayake wrote:
>> Is it possible to return a user attribute in the ID token using protocol
>> mappers?
>>
>> I have a user that has a custom attribute called "accountId" and a value
>> is assigned to it. I checked in the USER_ATTRIBUTE table (mysql) and the
>> values are properly assigned.
>>
>> I created a protocol mapper. In that I set the protocol type as "User
>> Attribute" and entered the key "accountId" as both the User Attribute
>> and Token Claim Name and switched on both "Add to ID Token" and "Add to
>> Access Token".
>>
>> I simply cant get this accountID attribute value returned in the ID
>> Token nor Access Token.
>>
>> Basically I need to return the user attributes in the ID Token / Access
>> Token. Is it possible?
>>
>> Regards*,*
>>
>> Kalinga
>>
>>
>>
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>



More information about the keycloak-user mailing list