diff --git a/Keycloak---OIDC-Integration.md b/Keycloak---OIDC-Integration.md index f21425c..d98f6d2 100644 --- a/Keycloak---OIDC-Integration.md +++ b/Keycloak---OIDC-Integration.md @@ -1,3 +1,5 @@ +Outstanding Bug: When the user is registered, in the users entry in the mongo database, the following "profile" item is not being created "boardView" with value of "board-view-lists" Creating the entry manually resolves the issue. + Environment Variables that need to be set in your Wekan container: OAUTH2_ENABLE = TRUE @@ -7,7 +9,35 @@ OAUTH2_AUTH_ENDPOINT = /realms//protocol/openid-connect/auth OAUTH2_USERINFO_ENDPOINT = /realms//protocol/openid-connect/userinfo OAUTH2_TOKEN_ENDPOINT = /realms//protocol/openid-connect/token OAUTH2_SECRET = -** When creating a Client in keycloak, ensure the access type is confidential. After clicking save, you will have a Credentials tab. You can retrieve the secret from that location. +** When creating a Client in keycloak, ensure the access type is confidential under the settings tab. After clicking save, you will have a Credentials tab. You can retrieve the secret from that location. Under the Client area in Keycloak, click on the Mappers area and "create" the following: - + +1. displayName +Name: displayName +Consent Required: Off +Mapper Type: User Attribute +User Attribute: displayName +Token Claim Name: displayName +Claim JSON Type: String +Add to ID token: on +Add to access token : on +Add to userinfo : on +Multivalued: off + +2. id +Name: id +Consent Required: Off +Mapper Type: User Property +User Attribute: username +Token Claim Name: id +Claim JSON Type: String +Add to ID token: on +Add to access token : on +Add to userinfo : on + +Edit the existing username mapper: +Token Claim Name: uid + + +