Search code examples
jbosskeycloakjboss-toolsjboss-eap-7keycloak-services

Keycloak create a custom identity provider mapper

i have an open id provider and i use this provider as identity broker of keycloak. I want to map roles (claims) which sent from broker to keycloak (and keycloak will sent mapped roles in its jwt). I want to know how to implement and add a custom mapper to keycloak (like hardcodedmapper, attributemapper in keycloak). Can i do this? Thanks

Solution

  • Create your new provider class, I extended the existing org.keycloak.broker.saml.mappers.AttributeToRoleMapper class.

    When building your jar ensure you have a folder called services within the jars, META-INF folder.

    Within this folder create a simple text file called org.keycloak.broker.provider.IdentityProviderMapper, within that file add the full name of your new provider class, i.e. package.Classname.

    Once compiled drop the file in the providers folder below the Keycloak root folder. Restart your container.