feat: map broker claims to realm roles

2026-07-25 16:26:59 +09:00
parent a84f7d50a1
commit ed064473dc
6 changed files with 125 additions and 1 deletions
@@ -24,6 +24,10 @@
      {
        "name": "user-role",
        "description": "Regular authenticated user role"
+      },
+      {
+        "name": "employee-role",
+        "description": "Assigned to brokered identities whose hosted-domain claim is example.test"
      }
    ]
  },
@@ -213,6 +217,17 @@
        "claim": "hd",
        "user.attribute": "hd"
      }
+    },
+    {
+      "name": "mock-google-example-domain-role",
+      "identityProviderAlias": "mock-google",
+      "identityProviderMapper": "oidc-role-idp-mapper",
+      "config": {
+        "syncMode": "INHERIT",
+        "claim": "hd",
+        "claim.value": "example.test",
+        "role": "employee-role"
+      }
    }
  ],
  "users": [