<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">I couldn't find the attribute <b>lastName</b>
in the <b>user_attribute</b> table. I did find the following
though<br>
<blockquote type="cite">COPY idp_mapper_config (idp_mapper_id,
value, name) FROM stdin;<br>
9871fac6-80ef-4fed-91d2-01a2fa56fd31 street user.attribute<br>
9871fac6-80ef-4fed-91d2-01a2fa56fd31 address claim<br>
473e55d3-8266-4507-bc1d-cc3c27d49498 lastName
user.attribute<br>
49a22d17-4dd5-426b-ba02-cbf6b7de6a84 sub claim<br>
49a22d17-4dd5-426b-ba02-cbf6b7de6a84 firstName
user.attribute<br>
</blockquote>
<br>
It seems that my mappings ended up in <b>idp_mapper_config</b>.
My mappings are:<br>
<blockquote type="cite"><b>lastName:</b> preferred_username<br>
<b>firstName: </b>sub<br>
<b>street:</b> address<br>
</blockquote>
<br>
This was the JSON response from the OID backend. The interesting
thing is that Keycloak maps "name" from the OID backend to
firstName.
<blockquote type="cite">{"sub":"Christine
Chapel","name":"","position":"","preferred_username":"Christine
Chapel","address":"Nurse, USS Enterprise"}</blockquote>
<br>
Does it mean that Keycloak doesn't support mapping to the
UserModel?<br>
<br>
<br>
Thanks!<br>
Eugene<br>
<br>
On 14/7/2015 9:26 PM, Marek Posolda wrote:<br>
</div>
<blockquote cite="mid:55A50DFA.1040209@redhat.com" type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
<div class="moz-cite-prefix">From looking at the code, it seems
that we don't support mapping to UserModel properties (ie.
firstName, lastName, email) but just custom attributes. Could
you check your database if there is attribute "lastName" in
USER_ATTRIBUTE table for this user? If it's the case, then it
means that mapper added custom attribute "lastName" instead of
the java property "lastName" from user model . Then feel free to
create JIRA to support mapping to UserModel properties as well .<br>
<br>
Marek<br>
<br>
On 14.7.2015 13:19, Eugene Chow wrote:<br>
</div>
<blockquote
cite="mid:F82A6278-D5CD-4255-BBE6-26E146621547@gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
Hi Marek,
<div class=""><br class="">
</div>
<div class="">I managed to set up the logger. Thanks! This is
the configuration to dump the userinfo JSON response in the
log file and the console.</div>
<div class="">
<blockquote type="cite" class="">
<div class=""> <subsystem
xmlns="urn:jboss:domain:logging:3.0"></div>
<div class="">
<div class=""> <console-handler
name="CONSOLE"></div>
<div class=""> <level name="DEBUG"/></div>
<div class=""> <formatter></div>
<div class=""> <named-formatter
name="COLOR-PATTERN"/></div>
<div class=""> </formatter></div>
<div class=""> </console-handler></div>
</div>
<div class="">…</div>
<div class="">
<div class=""> <logger
category="org.keycloak.social.user_profile_dump"></div>
<div class=""> <level name="DEBUG"/></div>
<div class=""> </logger></div>
</div>
<div class="">...</div>
</blockquote>
</div>
<div class="">
<div class=""><br class="">
</div>
</div>
<div class="">I have another problem, which is to map the <b
class="">userinfo</b> from the custom OpenID Connect
backend. Upon login, it returns this JSON response:</div>
<div class="">
<blockquote type="cite" class="">{"sub":"Christine
Chapel","name":"","position":"","preferred_username":"Christine
Chapel","address":"Nurse, USS Enterprise"}</blockquote>
</div>
<div class=""><br class="">
</div>
<div class="">I’m trying to map <b class="">preferred_username</b>
to the <b class="">Last Name</b> field. I tried to map this
field, and also <b class="">sub</b> and <b class="">address</b>,
but all without success:</div>
<div class=""><b class="">Name:</b> Fullname</div>
<div class=""><b class="">Mapper Type:</b> Attribute Importer</div>
<div class=""><b class="">Claim:</b> preferred_username</div>
<div class=""><b class="">User Attribute Name:</b> lastName</div>
<div class=""><br class="">
</div>
<div class="">Is there a specific <b class="">Claim</b> or <b
class="">User Attribute Name</b> that I need to use for the
mapping to work?</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Cheers!</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">
<div>
<blockquote type="cite" class="">
<div class="">On 14 Jul 2015, at 14:59, Eugene Chow <<a
moz-do-not-send="true"
href="mailto:eugene.chow.ct@gmail.com" class="">eugene.chow.ct@gmail.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode:
space; -webkit-line-break: after-white-space;"
class="">Hi Marek,
<div class=""><br class="">
</div>
<div class="">Thanks for the heads up. I’ll give it
a shot.</div>
<div class=""><br class="">
</div>
<div class="">Eugene</div>
<div class=""><br class="">
<div class="">
<div class="">
<blockquote type="cite" class="">
<div class="">On 14 Jul 2015, at 14:53,
Marek Posolda <<a
moz-do-not-send="true"
href="mailto:mposolda@redhat.com"
class="">mposolda@redhat.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta content="text/html;
charset=windows-1252"
http-equiv="Content-Type" class="">
<div bgcolor="#FFFFFF" text="#000000"
class="">
<div class="moz-cite-prefix">Hi,<br
class="">
<br class="">
do you have opportunity to upgrade to
latest 1.3.1.Final? It seems that this
logging was added in this version and
is not yet available in 1.2.0.<br
class="">
<br class="">
Marek<br class="">
<br class="">
On 14.7.2015 07:59, Eugene Chow wrote:<br
class="">
</div>
<blockquote
cite="mid:AF0EF6CE-9A56-4831-A9FE-52D8D6C5E6AD@gmail.com"
type="cite" class="">
<meta http-equiv="Content-Type"
content="text/html;
charset=windows-1252" class="">
<div class="">Hi Stian/Marek,</div>
<div class=""><br class="">
</div>
<div class="">Can you please advise on
the following? I used the
instructions from this page - <a
moz-do-not-send="true"
href="http://keycloak.github.io/docs/userguide/html/identity-broker.html#d4e1954"
class="">http://keycloak.github.io/docs/userguide/html/identity-broker.html#d4e1954</a>.
I’m not sure if I have included it
in the correct location as it
doesn’t work.</div>
<div class=""><br class="">
</div>
<div class="">I need this to debug the
JSON response from a custom OpenID
Connect backend.</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Thanks a lot!</div>
<div class="">Eugene</div>
<br class="">
<div class="">
<blockquote type="cite" class="">
<div class="">On 13 Jul 2015, at
17:20, Eugene Chow <<a
moz-do-not-send="true"
href="mailto:eugene.chow.ct@gmail.com"
class="">eugene.chow.ct@gmail.com</a>>
wrote:</div>
<br
class="Apple-interchange-newline">
<div class="">Hi,<br class="">
<br class="">
i have a Keycloak 1.2.0
installation that authenticates
against a custom OpenID Connect
provider. I need to see the JSON
response from the social
provider. The documentation says
to set
org.keycloak.social.user_profile_dump
to DEBUG.<br class="">
<br class="">
I’ve added the following to
standalone.xml as such, but I
don’t see any JSON output in the
log. Is this configuration
correct?<br class="">
<br class="">
<profile><br class="">
<subsystem
xmlns="urn:jboss:domain:logging:2.0”><br
class="">
<logger
category="org.keycloak.social.user_profile_dump"><br
class="">
<level
name="DEBUG"/><br class="">
</logger><br
class="">
…<br class="">
...<br class="">
</profile><br class="">
<br class="">
<br class="">
Thanks!<br class="">
Eugene</div>
</blockquote>
</div>
<br class="">
<br class="">
<fieldset class="mimeAttachmentHeader"></fieldset>
<br class="">
<pre class="" wrap="">_______________________________________________
keycloak-user mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
</blockquote>
<br>
</blockquote>
<br>
</body>
</html>