[keycloak-user] Send information about the authenticator type into the OpenID Connect token

Marek Posolda mposolda at redhat.com
Tue May 22 03:18:32 EDT 2018


You may need to implement custom protocolMapper for this. ProtocolMapper 
has access to AuthenticatedClientSessionModel, which contains the 
property "executions" with the list of authenticator UUIDS, which were 
used during authentication.

Marek

On 15/05/18 17:09, Daicy Duarte wrote:
> Hi,
>
> I need to send inside the openID Connect token information about the authenticator type that the user has used to log in.
>
> I have seen that in Clients -> Mappers is possible to add some fields that you want to send inside the openid connect token, but not the authenticator type that was used, for example the custom authenticator "secret-question".
>
>
> Best regards,
>
> ---
> Daicy
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user




More information about the keycloak-user mailing list