9:38 a.m.
Is it possible to return a user attribute in the ID token using protocol mappers?
I have a user that has a custom attribute called "accountId" and a value is
assigned to it. I checked in the USER_ATTRIBUTE table (mysql) and the values are properly
assigned.
I created a protocol mapper. In that I set the protocol type as "User Attribute"
and entered the key "accountId" as both the User Attribute and Token Claim Name
and switched on both "Add to ID Token" and "Add to Access Token".
I simply cant get this accountID attribute value returned in the ID Token nor Access
Token.
Basically I need to return the user attributes in the ID Token / Access Token. Is it
possible?
Regards,
Kalinga
10:12 a.m.
Hi,
I've just tried that with latest 1.2.0.CR1 release and it works as
expected. Could you also try it with latest version?
Which adapter are you using? In JS application, you should be able to
retrieve token directly from "tokenParsed" or "idTokenParsed". From
servlet application, you need to call something like:
accessToken.getOtherClaims().get("accountId");
Also doublecheck the case-sensitivity for both database and name of
attribute in protocol mapper ( "accountId" vs. "accountID" ).
Last tip: if you added the attribute directly to database, you may need
to restart keycloak server. It's because user might be already cached by
Keycloak and hence you won't see the attribute from DB until you restart
Keycloak server. It's because cache is not cleared if you edit database
directly.
Marek
On 5.5.2015 16:38, Kalinga Dissanayake wrote:
Is it possible to return a user attribute in the ID token using
protocol mappers?
I have a user that has a custom attribute called "accountId" and a
value is assigned to it. I checked in the USER_ATTRIBUTE table (mysql)
and the values are properly assigned.
I created a protocol mapper. In that I set the protocol type as "User
Attribute" and entered the key "accountId" as both the User Attribute
and Token Claim Name and switched on both "Add to ID Token" and "Add
to Access Token".
I simply cant get this accountID attribute value returned in the ID
Token nor Access Token.
Basically I need to return the user attributes in the ID Token /
Access Token. Is it possible?
Regards*,*
Kalinga
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
10:15 a.m.
There is a UserProperty mapper and a UserAttribute mapper. Use the
"UserAttribute" mapper. Maybe that's it? UserProperty is looks for get
methods on UserModel. Meh, this as probably a bad idea. Should
probably have just combined them.
On 5/5/2015 10:38 AM, Kalinga Dissanayake wrote:
Is it possible to return a user attribute in the ID token using
protocol
mappers?
I have a user that has a custom attribute called "accountId" and a value
is assigned to it. I checked in the USER_ATTRIBUTE table (mysql) and the
values are properly assigned.
I created a protocol mapper. In that I set the protocol type as "User
Attribute" and entered the key "accountId" as both the User Attribute
and Token Claim Name and switched on both "Add to ID Token" and "Add to
Access Token".
I simply cant get this accountID attribute value returned in the ID
Token nor Access Token.
Basically I need to return the user attributes in the ID Token / Access
Token. Is it possible?
Regards*,*
Kalinga
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
10:21 a.m.
+1 for combine them.
Or maybe UserPropertyMapper could display the combobox with the
available properties from UserModel? As those could be retrieved by
reflection.
Marek
On 5.5.2015 17:15, Bill Burke wrote:
There is a UserProperty mapper and a UserAttribute mapper. Use the
"UserAttribute" mapper. Maybe that's it? UserProperty is looks for get
methods on UserModel. Meh, this as probably a bad idea. Should
probably have just combined them.
On 5/5/2015 10:38 AM, Kalinga Dissanayake wrote:
> Is it possible to return a user attribute in the ID token using protocol
> mappers?
>
> I have a user that has a custom attribute called "accountId" and a value
> is assigned to it. I checked in the USER_ATTRIBUTE table (mysql) and the
> values are properly assigned.
>
> I created a protocol mapper. In that I set the protocol type as "User
> Attribute" and entered the key "accountId" as both the User Attribute
> and Token Claim Name and switched on both "Add to ID Token" and "Add
to
> Access Token".
>
> I simply cant get this accountID attribute value returned in the ID
> Token nor Access Token.
>
> Basically I need to return the user attributes in the ID Token / Access
> Token. Is it possible?
>
> Regards*,*
>
> Kalinga
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
6:49 p.m.
I am using 1.2.0 Beta version on keycloak.
Hmm...Let me try again and see how it goes.
Regards,
Kalinga
-----Original Message-----
From: "Marek Posolda" <mposolda(a)redhat.com>
Sent: Tuesday, May 5, 2015 8:51pm
To: "Bill Burke" <bburke(a)redhat.com>, keycloak-user(a)lists.jboss.org
Subject: Re: [keycloak-user] User attributes in ID Token using protocol mappers
+1 for combine them.
Or maybe UserPropertyMapper could display the combobox with the
available properties from UserModel? As those could be retrieved by
reflection.
Marek
On 5.5.2015 17:15, Bill Burke wrote:
There is a UserProperty mapper and a UserAttribute mapper. Use the
"UserAttribute" mapper. Maybe that's it? UserProperty is looks for get
methods on UserModel. Meh, this as probably a bad idea. Should
probably have just combined them.
On 5/5/2015 10:38 AM, Kalinga Dissanayake wrote:
> Is it possible to return a user attribute in the ID token using protocol
> mappers?
>
> I have a user that has a custom attribute called "accountId" and a value
> is assigned to it. I checked in the USER_ATTRIBUTE table (mysql) and the
> values are properly assigned.
>
> I created a protocol mapper. In that I set the protocol type as "User
> Attribute" and entered the key "accountId" as both the User Attribute
> and Token Claim Name and switched on both "Add to ID Token" and "Add
to
> Access Token".
>
> I simply cant get this accountID attribute value returned in the ID
> Token nor Access Token.
>
> Basically I need to return the user attributes in the ID Token / Access
> Token. Is it possible?
>
> Regards*,*
>
> Kalinga
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
3:43 a.m.
Sorted!. Thanks.
Upgraded all the related components to 1.2.0. Played around with the configurations on the
protocol mappings and worked fine.
Regards,
Kalinga
-----Original Message-----
From: "Kalinga Dissanayake" <kalinga(a)leapset.com>
Sent: Wednesday, May 6, 2015 5:19am
To: "Marek Posolda" <mposolda(a)redhat.com>
Cc: "Bill Burke" <bburke(a)redhat.com>, keycloak-user(a)lists.jboss.org
Subject: Re: [keycloak-user] User attributes in ID Token using protocol mappers
I am using 1.2.0 Beta version on keycloak.
Hmm...Let me try again and see how it goes.
Regards,
Kalinga
-----Original Message-----
From: "Marek Posolda" <mposolda(a)redhat.com>
Sent: Tuesday, May 5, 2015 8:51pm
To: "Bill Burke" <bburke(a)redhat.com>, keycloak-user(a)lists.jboss.org
Subject: Re: [keycloak-user] User attributes in ID Token using protocol mappers
+1 for combine them.
Or maybe UserPropertyMapper could display the combobox with the
available properties from UserModel? As those could be retrieved by
reflection.
Marek
On 5.5.2015 17:15, Bill Burke wrote:
There is a UserProperty mapper and a UserAttribute mapper. Use the
"UserAttribute" mapper. Maybe that's it? UserProperty is looks for get
methods on UserModel. Meh, this as probably a bad idea. Should
probably have just combined them.
On 5/5/2015 10:38 AM, Kalinga Dissanayake wrote:
> Is it possible to return a user attribute in the ID token using protocol
> mappers?
>
> I have a user that has a custom attribute called "accountId" and a value
> is assigned to it. I checked in the USER_ATTRIBUTE table (mysql) and the
> values are properly assigned.
>
> I created a protocol mapper. In that I set the protocol type as "User
> Attribute" and entered the key "accountId" as both the User Attribute
> and Token Claim Name and switched on both "Add to ID Token" and "Add
to
> Access Token".
>
> I simply cant get this accountID attribute value returned in the ID
> Token nor Access Token.
>
> Basically I need to return the user attributes in the ID Token / Access
> Token. Is it possible?
>
> Regards*,*
>
> Kalinga
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
3512
days inactive
3519
days old
5 comments
3 participants
participants (3)
-
Bill Burke -
Kalinga Dissanayake -
Marek Posolda