mirror of
https://github.com/wekan/wekan.git
synced 2026-03-02 11:50:16 +01:00
Updated Keycloak OIDC Integration (markdown)
parent
c6ce5ec3c8
commit
b6cdc8a6c7
1 changed files with 32 additions and 2 deletions
|
|
@ -1,3 +1,5 @@
|
|||
Outstanding Bug: When the user is registered, in the users entry in the mongo database, the following "profile" item is not being created "boardView" with value of "board-view-lists" Creating the entry manually resolves the issue.
|
||||
|
||||
Environment Variables that need to be set in your Wekan container:
|
||||
|
||||
OAUTH2_ENABLE = TRUE
|
||||
|
|
@ -7,7 +9,35 @@ OAUTH2_AUTH_ENDPOINT = /realms/<keycloak realm>/protocol/openid-connect/auth
|
|||
OAUTH2_USERINFO_ENDPOINT = /realms/<keycloak realm>/protocol/openid-connect/userinfo
|
||||
OAUTH2_TOKEN_ENDPOINT = /realms/<keycloak realm>/protocol/openid-connect/token
|
||||
OAUTH2_SECRET = <keycloak client secret>
|
||||
** When creating a Client in keycloak, ensure the access type is confidential. After clicking save, you will have a Credentials tab. You can retrieve the secret from that location.
|
||||
** When creating a Client in keycloak, ensure the access type is confidential under the settings tab. After clicking save, you will have a Credentials tab. You can retrieve the secret from that location.
|
||||
|
||||
Under the Client area in Keycloak, click on the Mappers area and "create" the following:
|
||||
|
||||
|
||||
1. displayName
|
||||
Name: displayName
|
||||
Consent Required: Off
|
||||
Mapper Type: User Attribute
|
||||
User Attribute: displayName
|
||||
Token Claim Name: displayName
|
||||
Claim JSON Type: String
|
||||
Add to ID token: on
|
||||
Add to access token : on
|
||||
Add to userinfo : on
|
||||
Multivalued: off
|
||||
|
||||
2. id
|
||||
Name: id
|
||||
Consent Required: Off
|
||||
Mapper Type: User Property
|
||||
User Attribute: username
|
||||
Token Claim Name: id
|
||||
Claim JSON Type: String
|
||||
Add to ID token: on
|
||||
Add to access token : on
|
||||
Add to userinfo : on
|
||||
|
||||
Edit the existing username mapper:
|
||||
Token Claim Name: uid
|
||||
|
||||
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue