Can someone provide (if there is one out there) of an example of adding an additional OIDC mapper to Keycloak?   I have tried to compile and load a module to add an additional mapper, and cannot seem to get it working.   My new mapper does not appear as a choice for modifying the clJWT claim.

Or do I need to add it to the main source tree and recompile the whole Keycloak project?



From: Thomas Darimont <>
Date: Wednesday, February 24, 2016 at 4:31 PM
To: Reed Lewis <>
Cc: "" <>
Subject: Re: [keycloak-user] Client Mappers. Can I define mappers programmatically?

Hello Reed,

yes you should be able to do that via the:

You can provide your own org.keycloak.protocol.ProtocolMapper 
(org.keycloak.protocol.oidc.mappers.OIDCAccessTokenMapper) to introduce 
computed attributes to the access tokens.

You can find the predefined mappers in the package:
org/keycloak/protocol/oidc/mappers within the keycloak-services project.