custom attributes under user profile -

[Amit Purohit]

I was waiting eagerly for custom user profile feature. Now keycloak 14.0 has been released with this feature in preview mode. I am trying to use it in a test environment.

I have few observations which I would like to bring to notice, some of them probably are part of next releases but anyway I would list here.

1. I don't see any option to add custom attribute for a user if it is created via admin interface (web). And if any attribute is marked "required" under user profile, user creation via admin interface fails.

2. If user attributes are defined and marked required under profile section, and if somebody tries to register (with default template) it complains with a message "this attribute is required", once for each required attribute,. How do I go ahead, is the earlier known customization is the way to add these attributes to registration template.

3. Similarly do I need to customize account template to get these attribute under account page.

4. Dynamic verify profile form works fine for existing users to add profile details. Similarly, Is it planned for dynamic forms for registration, account management and admin interface? so that as one adds custom attributes they gets rendered in those respective interfaces without any customization.

5. How do I add custom validator for my custom attributes? Please direct me to the right documentation.

Thanks a lot for the efforts put into bringing out the profile features. I hope and wish that it evolves and gets matured very soon.

Best Regards

[Pedro Igor Craveiro e Silva]

On Thu, Jun 24, 2021 at 2:25 PM Amit Purohit <amit...@gmail.com> wrote:

I was waiting eagerly for custom user profile feature. Now keycloak 14.0 has been released with this feature in preview mode. I am trying to use it in a test environment.

I have few observations which I would like to bring to notice, some of them probably are part of next releases but anyway I would list here.

1. I don't see any option to add custom attribute for a user if it is created via admin interface (web). And if any attribute is marked "required" under user profile, user creation via admin interface fails.

What we can do now is to change your attribute permission to only be editable by users. Or view-only permissions to admin.

But yeah, we are planning to make the user detail page more dynamic.

 

2. If user attributes are defined and marked required under profile section, and if somebody tries to register (with default template) it complains with a message "this attribute is required", once for each required attribute,. How do I go ahead, is the earlier known customization is the way to add these attributes to registration template.

Dynamic registration is coming. See https://issues.redhat.com/browse/KEYCLOAK-18428.

For now, yes. You need to do your own customization. Only the verify profile action is dynamic at the moment.

 

3. Similarly do I need to customize account template to get these attribute under account page.

See https://issues.redhat.com/browse/KEYCLOAK-18430.

 

4. Dynamic verify profile form works fine for existing users to add profile details. Similarly, Is it planned for dynamic forms for registration, account management and admin interface? so that as one adds custom attributes they gets rendered in those respective interfaces without any customization.

Yes. Please, look at the roadmap here https://issues.redhat.com/browse/KEYCLOAK-18418.

 

5. How do I add custom validator for my custom attributes? Please direct me to the right documentation.

No documentation at this moment. You might want to look at some of the built-in examples such as https://github.com/keycloak/keycloak/blob/ef3a0ee06c1d0b43d35eba234615c03df14b613e/server-spi-private/src/main/java/org/keycloak/validate/validators/LengthValidator.java#L41.

 

Thanks a lot for the efforts put into bringing out the profile features. I hope and wish that it evolves and gets matured very soon.

Other changes are also related to the display name and order of attributes.

 

Best Regards

--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/8d6029de-2cd0-40e2-a555-442d299595a0n%40googlegroups.com.

[Amit Purohit]

Thanks for your quick response. I will go through the links and revert back to you, if required.

Best regards

[christophe spielmann]

Hello,

Thanks for the very interesting information.

I am trying to do a custom validator for a custom attribute and prepared my code as of  https://github.com/keycloak/keycloak/blob/ef3a0ee06c1d0b43d35eba234615c03df14b613e/server-spi-private/src/main/java/org/keycloak/validate/validators/LengthValidator.java#L41.

I don't get with keycloak 18.0 (wildfly version) how I can make validator available.

it is confusing with the SPI, the provider etc. 

I already have an eventListener that I put as a jar into ...\standalone\deployments.

And I am wondering if this is the same pattern I need to follow.

Regards.