re-construct OIDC config and flatten keycloak groups #1934
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
claims_map
to extract the designed information by the name which was a fixed map. theusername
needs to be careful because now OIDC usesclaim.username
as USERNAME, if you want to keep same as before (Email), please setusername=email
.allowed_domains
,allowed_groups
,allowed_userd
toallowed
misc
to save the random thing. if you setmisc.flatten_groups=true
, it will try to flatten the groups. this is for keycloak which group format is "/group/subgroup".misc.strip_email_domain
only works when theusername
is email format, e.gclaims_map.usename=email
new OIDC config