Re: [keycloak-user] SAML IdP Mapping
On 10/27/2015 7:32 AM, Matthew Woolnough wrote:
I have added a SAML IdP and can successfully authenticate.
I have also added some mappings to map assertions in the SAML token to
database fields.
I can see that the SAML token is in the POST back to keycloak contains
the assertions i am after, but nothing is appearing in Keycloak.
Which leg is missing the SAML assertion? You have to do 2 different
mappings:
#1 Map SAML assertion that you receive rom the external IDP into
keycloak user db.
#2 Map keycloak user db into the assertion created for the client
application. This 2nd part must be done for each client application in
the "Clients" tab.
Does that answer the question?
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com