Kyecloak SAML and CP4D Integration mappings issue

[Pavlos Papadopoulos]

Hello everyone,

I'm facing an issue while integrating Keycloak SAML mappings with IBM Cloud Pak for Data (CP4D) on Red Hat OpenShift. We've successfully implemented the authentication part, but we're struggling with the mappings between Keycloak and CP4D, specifically related to First Name, Last Name, and Groups.

Our current setup involves creating a client scope between Keycloak and CP4D and configuring the necessary mappings. However, after the SAML authentication process, only the email address and username from Keycloak are being transferred to CP4D. The mappings for First Name, Last Name, and Groups are not working as expected, and we've already reached out to IBM support for assistance.

Following a thorough review of our CP4D configurations, the IBM support team has indicated that the issue might be on the SAML configuration side within Keycloak.

I would greatly appreciate any insights or advice on how to troubleshoot and resolve this matter. If anyone has experience with configuring SAML mappings between Keycloak and CP4D, especially related to transferring First Name, Last Name, and Group information, your guidance would be invaluable.

Thank you in advance for your assistance and expertise.