feat: map broker claims to realm roles

2026-07-25 16:26:59 +09:00
parent a84f7d50a1
commit ed064473dc
6 changed files with 125 additions and 1 deletions
@@ -144,6 +144,10 @@ upsert_mapper \
  "google-hosted-domain" \
  "oidc-user-attribute-idp-mapper" \
  '{"syncMode":"INHERIT","claim":"hd","user.attribute":"hd"}'
+upsert_mapper \
+  "google-example-domain-role" \
+  "oidc-role-idp-mapper" \
+  '{"syncMode":"INHERIT","claim":"hd","claim.value":"example.test","role":"employee-role"}'

 echo "Google Identity Provider $action for realm '$realm'"
 echo "Register this exact Google redirect URI:"