3:10 p.m.
Hi
Is there support for handling multiple identities for a single user? If so, is there a
video or write up explaining how this is handled?
Example use case:
You have your user profile (with multiple Identities) that is associated with KC. KC is
connected to three systems. When you log into System 1, you use Identity A, and when you
log into System 2, you use Identity B, and When you log into System 3, you use Identity
C.
The different identities are due to the need for the user wanting to share specific
information depending on the system they are logging into.
This openID connect video has a great intro that outlines the use case for multiple
identities: https://www.youtube.com/watch?v=Kb56GzQ2pSk
Thanks.
Stephen
12:49 a.m.
Yes, in 1.2.0.Beta1 which will be released soon we'll have support for protocol
mappers. Protocol mappers allow you to define exactly what attributes go into the access
token and id token for each application.
----- Original Message -----
From: "Stephen Russett" <stephenrussett(a)gmail.com>
To: keycloak-user(a)lists.jboss.org
Sent: Sunday, 22 March, 2015 9:10:22 PM
Subject: [keycloak-user] Multiple Identity Support?
Hi
Is there support for handling multiple identities for a single user? If so,
is there a video or write up explaining how this is handled?
Example use case:
You have your user profile (with multiple Identities) that is associated with
KC. KC is connected to three systems. When you log into System 1, you use
Identity A, and when you log into System 2, you use Identity B, and When you
log into System 3, you use Identity C.
The different identities are due to the need for the user wanting to share
specific information depending on the system they are logging into.
This openID connect video has a great intro that outlines the use case for
multiple identities: https://www.youtube.com/watch?v=Kb56GzQ2pSk
Thanks.
Stephen
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
9:43 a.m.
Great! Is there any diagrams or documents that show how this will work?
Will there be a way to group attributes in a hierarchy? Example
{Identity1 => { Atribute1.1 => “xxxxxxxxx”,
Atribute1.2 => “xxxxxxxxx”,
Atribute1.3 => “xxxxxxxxx”,
},
Identity2 => {Atribute2.1 => “xxxxxxxxx”,
Atribute2.2 => “xxxxxxxxx”,
Atribute2.3 => “xxxxxxxxx”,
}
}
From this you would be able to tell the protocol mappers to use attributes from IdentityX,
and you would be able to group these attributes in the UI so you are not have to create N
number of fields with labels and system names such as: application1.FirstName,
application2.FirstName, application3.FirstName.
Thanks
From: Stian Thorgersen <stian(a)redhat.com>
Reply: Stian Thorgersen <stian(a)redhat.com>>
Date: March 23, 2015 at 1:49:33 AM
To: Stephen Russett <stephenrussett(a)gmail.com>>
Cc: keycloak-user@lists.jboss.org <keycloak-user(a)lists.jboss.org>>
Subject: Re: [keycloak-user] Multiple Identity Support?
Yes, in 1.2.0.Beta1 which will be released soon we'll have support for protocol
mappers. Protocol mappers allow you to define exactly what attributes go into the access
token and id token for each application.
----- Original Message -----
From: "Stephen Russett" <stephenrussett(a)gmail.com>
To: keycloak-user(a)lists.jboss.org
Sent: Sunday, 22 March, 2015 9:10:22 PM
Subject: [keycloak-user] Multiple Identity Support?
Hi
Is there support for handling multiple identities for a single user? If so,
is there a video or write up explaining how this is handled?
Example use case:
You have your user profile (with multiple Identities) that is associated with
KC. KC is connected to three systems. When you log into System 1, you use
Identity A, and when you log into System 2, you use Identity B, and When you
log into System 3, you use Identity C.
The different identities are due to the need for the user wanting to share
specific information depending on the system they are logging into.
This openID connect video has a great intro that outlines the use case for
multiple identities: https://www.youtube.com/watch?v=Kb56GzQ2pSk
Thanks.
Stephen
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
9:02 a.m.
Just doesn't work that way in Keycloak...instead, each "System" is
granted its own specific token. This token can be tailored to the
system to include/exclude the user information, roles, etc. you want.
This "tailoring" is limited in 1.1.x, but next release we have many more
capabilities to format the token/saml doc the System receives.
On 3/22/2015 4:10 PM, Stephen Russett wrote:
Hi
Is there support for handling multiple identities for a single user? If
so, is there a video or write up explaining how this is handled?
Example use case:
You have your user profile (with multiple Identities) that is associated
with KC. KC is connected to three systems. When you log into System 1,
you use Identity A, and when you log into System 2, you use Identity B,
and When you log into System 3, you use Identity C.
The different identities are due to the need for the user wanting to
share specific information depending on the system they are logging into.
This openID connect video has a great intro that outlines the use case
for multiple identities: https://www.youtube.com/watch?v=Kb56GzQ2pSk
Thanks.
Stephen
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
3576
days inactive
3580
days old
3 comments
3 participants
participants (3)
-
Bill Burke -
Stephen Russett -
Stian Thorgersen