Mapping Groups from external IDP using identity mapper
340 views
Skip to first unread message
Shubham Shrivastav
unread,
Oct 16, 2020, 7:34:46 PM10/16/20
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Keycloak User
Hi,
We're trying to pull in user attributes from Azure AD using SAML, however we cannot pull in groups and map it to a keycloak group. So the workaround is to map it to a role using 'Advanced Attribute to Role' identity mapper.
However, is there a chance to get a 'Attribute to Group option' for SAML identity providers
Kalithasan Periyasamy
unread,
Oct 28, 2021, 11:27:11 AM10/28/21
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Keycloak User
I am also trying the same. but group map is not happening from SAML token.
I tried "Advance attribute to role" , but it is not working.
Do you have any examples or document or reference ? if you have please share to me