Apply da5890332 (Add client roles mapping section) to other doc versions/languages

This commit is contained in:
Billy Tat
2024-10-18 15:08:32 -07:00
parent da58903325
commit 11d4078f46
10 changed files with 85 additions and 7 deletions
@@ -35,6 +35,7 @@ If you have an existing configuration using the SAML protocol and want to switch
`Name` | `Groups Mapper`
`Mapper Type` | `Group Membership`
`Token Claim Name` | `groups`
`Full group path` | `OFF`
`Add to ID token` | `OFF`
`Add to access token` | `OFF`
`Add to user info` | `ON`
@@ -46,6 +47,7 @@ If you have an existing configuration using the SAML protocol and want to switch
`Name` | `Client Audience`
`Mapper Type` | `Audience`
`Included Client Audience` | <CLIENT_NAME>
`Add to ID token` | `OFF`
`Add to access token` | `ON`
- Create a new "Groups Path" with the settings below.
@@ -56,8 +58,15 @@ If you have an existing configuration using the SAML protocol and want to switch
`Mapper Type` | `Group Membership`
`Token Claim Name` | `full_group_path`
`Full group path` | `ON`
`Add to ID token` | `ON`
`Add to access token` | `ON`
`Add to user info` | `ON`
- Go to **Role Mappings > Client Roles > realm-management** and add the following Role Mappings to all users or groups that need to query the Keycloak users.
- query-users
- query-groups
- view-users
## Configuring Keycloak in Rancher
1. In the Rancher UI, click **☰ > Users & Authentication**.