bugfix: added group mapper to default keycloak client config

4 years ago · 1d8b7dae90
parent 3d304f4ec1
commit 1d8b7dae90
1 changed files with 13 additions and 0 deletions
--- a/roles/keycloak/templates/keycloak-realm-create-client.json.j2
+++ b/roles/keycloak/templates/keycloak-realm-create-client.json.j2
@ -50,6 +50,19 @@
        "access.token.claim": "true",
        "userinfo.token.claim": "true"
      }
+    },
+    {
+      "name": "groups",
+      "protocol": "openid-connect",
+      "protocolMapper": "oidc-group-membership-mapper",
+      "consentRequired": false,
+      "config": {
+        "full.path": "true",
+        "id.token.claim": "true",
+        "access.token.claim": "true",
+        "claim.name": "groups",
+        "userinfo.token.claim": "true"
+      }
    }
  ],
  "publicClient": false,