No More Configuration Confusion! Keycloak Mapper Basics for SEs – How to Work with...
summary
Covers how user federation mappers pull LDAP/AD attributes (including nonstandard fields like mainMailPrimary or OU) into Keycloak, how identity provider mappers convert external IdP claims (nested groups, custom claims) into Keycloak attributes and roles, and how protocol mappers control which claims go into ID/access tokens. Explains when to use predefined vs manual mappers, how to write a custom mapper in Java or JavaScript and deploy it as a JAR, and how to preview tokens with the Keycloak token evaluator.
AI-written summary · about
chapters (9)
- 0:00Keycloak mappers intro
- 1:27Why mappers matter
- 2:13Mapper role in tokens
- 3:58LDAP/AD user mappers
- 6:55External IDP mappers
- 9:53Protocol mappers & claims
- 11:41Manual vs predefined mappers
- 13:34Custom mappers guide
- 14:57Token viewer evaluation
related talks
31mDelegate Authentication and a Lot More To Keycloak With OpenID...
29mThe Keycloak-Token-Configuration Mistake, 90% of All Developers Do (and How To Avoid It)
27mSimple Control: Managing Multi-Domain MCP Access Via Keycloak IdP With ID-JAG
25mIdentities and Authentication for Your Agents With Keycloak
53mHow to Secure Your Spring Apps with Keycloak
40mA Walkthrough of Keycloak
54mHow to secure your Spring Apps with Keycloak
01h 12mIdentity 2.0: the what, why and how of social and federated login