[keycloak-user] Map SAML Subject NameID to user email

Jared Blashka jblashka at redhat.com
Fri Oct 14 10:54:20 EDT 2016


Does setting the 'Name ID Format' option to email in the client settings
not accomplish what you're looking for? That's supposed to use the user's
email address as the NameID.
Failing that, I know that if you use the 'persistent' Name ID format you
can set an attribute of saml.persistent.name.id.for.$clientId for a user
adnd the value of that field gets used as the NameID.

Jared

On Thu, Oct 13, 2016 at 10:31 PM, Niels Bertram <nielsbne at gmail.com> wrote:

> Hi guys,
>
> I have a requirement to map a user email to the /saml:Subject/saml:NameID
> field in a Keycloak SAML client. I can see that someone else is asking for
> the same at
> http://stackoverflow.com/questions/39854398/sending-
> username-emailid-in-the-saml-req-as-nameid-to-keycloak
> without much luck. The mapper only maps attributes while I need to change
> the subjects identifier.
>
> Could anyone help with a thought on how that can be achieved?
>
> Many thanks,
> Niels
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>


More information about the keycloak-user mailing list