[keycloak-user] SAML attribute importer with multiple values

Manuel Palacio emanuel.palacio at gmail.com
Wed Sep 28 05:04:35 EDT 2016


Hello,

I am trying to process a SAML attribute with multiple values.

To that end I have created a client mapper of type User Attribute with
"Multivalued" on.

I also have an "attribute importer" mapper in the SAML v2.0 identity
provider. It points to user attribute name defined in the client mapper
mentioned above.

Unfortunately, it is only mapping the first value into the access token.

The attribute in the SAML response looks like this

<Attribute Name="http://cambio.se/2016-09/cds/profile"> <AttributeValue>
value1</AttributeValue> <AttributeValue>value2</AttributeValue> <
AttributeValue>value3</AttributeValue> </Attribute>

In the access token only the first value appears as part of "otherClaims"
map.

What do I need to do in order to get all the values in the access token?

Thanks

/Manuel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160928/f21ef132/attachment-0001.html 


More information about the keycloak-user mailing list