<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi,<br>
<br>
right now users authenticated via LDAP are synced to keycloak
database and they receive just default roles configured for
particular realm (or realm applications). Other roles need to be
done manually. Right now we don't have any support for sync LDAP
groups or user memberships from LDAP. There is jira for it
<a class="moz-txt-link-freetext" href="https://issues.jboss.org/browse/KEYCLOAK-630">https://issues.jboss.org/browse/KEYCLOAK-630</a> <br>
<br>
Marek<br>
<br>
On 13.11.2014 01:32, Lionel Orellana wrote:<br>
</div>
<blockquote
cite="mid:CAO-n44NxSG5xsSCwN9Z9zPyf-_cNRP-vvo1rGscGrO69VrGxnA@mail.gmail.com"
type="cite">Hi,
<div><br>
</div>
<div>I am evaluating LDAP integration in version 1.1.0.Beta1. I
don't see anything in the LDAP provider settings regarding
groups. I was expecting something similar to the jboss ldap
login module where there are settings to populate the user
principal with roles from LDAP groups. Is there an alternative
way to do this with Keycloak?</div>
<div><br>
</div>
<div>Thanks</div>
<div><br>
</div>
<div>Lionel.<span></span></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</body>
</html>