[jboss-jira] [JBoss JIRA] (WFCORE-3780) Provide Elytron alternative to RoleMappingLoginModule

Derek Horton created WFCORE-3780: ------------------------------------ Summary: Provide Elytron alternative to RoleMappingLoginModule Key: WFCORE-3780 URL: https://issues.jboss.org/browse/WFCORE-3780 Project: WildFly Core Issue Type: Feature Request Components: Security Affects Versions: 4.0.0.Final Reporter: Derek Horton In picketbox there is RoleMappingLoginModule [1], which takes role as returned from authorization process and maps to different role. I thought something similar should be configurable with some of Elytron role-mappers. But looking into model/code, it is not obvious to me which of them can be used. I know custom role mapper can be still used, but I wonder if we really do not provide this common funcionality out of the box with Elytron. Another workaround is to use direct roles from realm (e.g. LDAP ) in target (e.g. web.xml). But seems users tend to map IDM Roles to applicaiton roles. [1] https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_ap... -- This message was sent by Atlassian JIRA (v7.5.0#75005)