Re: [keycloak-user] SAML attribute importer with multiple values
Looks like a limitation of the user attribute importer:
https://github.com/keycloak/keycloak/blob/master/services/src/main/java/o...
It simply picks the first value and uses that.
You can create a JIRA feature request to have support for importing multi
valued attributes. A PR for this would be great if you're up for it. If you
need a solution quick you can create your own custom mapper.
On 28 September 2016 at 11:04, Manuel Palacio <emanuel.palacio(a)gmail.com>
wrote:
Hello,
I am trying to process a SAML attribute with multiple values.
To that end I have created a client mapper of type User Attribute with
"Multivalued" on.
I also have an "attribute importer" mapper in the SAML v2.0 identity
provider. It points to user attribute name defined in the client mapper
mentioned above.
Unfortunately, it is only mapping the first value into the access token.
The attribute in the SAML response looks like this
<Attribute Name="http://cambio.se/2016-09/cds/profile">
<AttributeValue>
value1</AttributeValue> <AttributeValue>value2</AttributeValue> <
AttributeValue>value3</AttributeValue> </Attribute>
In the access token only the first value appears as part of "otherClaims"
map.
What do I need to do in order to get all the values in the access token?
Thanks
/Manuel
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user