libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

KEYCLOAK-11770 add documentation for hardcoded ldap mapper

Browse source
This commit is contained in:
Cédric Couralet 2019-12-06 11:05:27 +01:00 committed by Marek Posolda
parent cf7a35b1dd
commit 16ac876820
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
server_admin/topics/user-federation/ldap.adoc
View file

@ -125,6 +125,10 @@ FullName Mapper::
This allows you to specify that the full name of the user, which is saved in some LDAP attribute (usually `cn` ) will be mapped to `firstName` and `lastname` attributes in the {project_name} database.
Having `cn` to contain full name of user is a common case for some LDAP deployments.
Hardcoded Attribute Mapper::
This mapper adds a hardcoded attribute value to each {project_name} user linked with LDAP.
This mapper can also force the values for the `enabled` or `emailVerified` user properties.
Role Mapper::
This allows you to configure role mappings from LDAP into {project_name} role mappings.
One Role mapper can be used to map LDAP roles (usually groups from a particular branch of LDAP tree) into roles corresponding to either realm roles or client roles of a specified client.