diff --git a/Keycloak.md b/Keycloak.md index cb1d8e2..5076c89 100644 --- a/Keycloak.md +++ b/Keycloak.md @@ -4,32 +4,15 @@ Environment Variables that need to be set in your Wekan environment: -* OAUTH2_ENABLE = TRUE +* OAUTH2_ENABLED = TRUE * OAUTH2_CLIENT_ID = `` * OAUTH2_SERVER_URL = `/auth` * OAUTH2_AUTH_ENDPOINT = `/realms//protocol/openid-connect/auth` * OAUTH2_USERINFO_ENDPOINT = `/realms//protocol/openid-connect/userinfo` * OAUTH2_TOKEN_ENDPOINT = `/realms//protocol/openid-connect/token` * OAUTH2_SECRET = `` -* OAUTH2_ID_MAP = `uid` -* OAUTH2_USERNAME_MAP = `uid` -* OAUTH2_FULLNAME_MAP = `displayName` +* OAUTH2_ID_MAP = `preferred_username` +* OAUTH2_USERNAME_MAP = `preferred_username` +* OAUTH2_FULLNAME_MAP = `given_name` * OAUTH2_EMAIL_MAP = `email` -> When creating a Client in keycloak, ensure the access type is confidential under the settings tab. After clicking save, you will have a Credentials tab. You can retrieve the secret from that location. - -Under the Client area in Keycloak, click on the Mappers area and "create" the two following mappers: - -1. displayName -* Name: displayName -* Consent Required: Off -* Mapper Type: User Attribute -* User Attribute: displayName -* Token Claim Name: displayName -* Claim JSON Type: String -* Add to ID token: on -* Add to access token : on -* Add to userinfo : on -* Multivalued: off - -Then Edit the existing username mapper and update the following: -* Token Claim Name: uid \ No newline at end of file +> When creating a Client in keycloak, ensure the access type is confidential under the settings tab. After clicking save, you will have a Credentials tab. You can retrieve the secret from that location. \ No newline at end of file