[keycloak-user] Default Realm Roles Not Set When role-ldap-mapper is configured for AD

[Adrian Matei]

Hi everyone,

When I configure an LDAP Role Mapper for Active Directory the Default Roles
of the Realm are not set anymore when a user registers himself or if I
create one via the Keycloak Admin Console.

Configuration:

Mapper type: role-ldap-mapper
LDAP Roles DN: subtree in AD
Role LDAP Attribute: cn
Role Object Classes: group
Membership LDAP Attribute: member
Membership Attribute Type: DN
Membership User LDAP Attribute: uid
Mode: LDAP_ONLY
User Roles Retrieve Strategy: LOAD_ROLES_BY_MEMBER_Attribute
Use Realm Roles Mapping: ON


Does anyone have a solution, or should I create a Jira Issue for that?

Best regards,
Adrian