Identity providers on pam-keycloak-oidchttps://zhaow-de.github.io/pam-keycloak-oidc/servers/Recent content in Identity providers on pam-keycloak-oidcHugoen-us<link>https://zhaow-de.github.io/pam-keycloak-oidc/servers/keyclock-12.x/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://zhaow-de.github.io/pam-keycloak-oidc/servers/keyclock-12.x/</guid><description><h1 id="keycloak-12x">Keycloak 12.x<a class="anchor" href="#keycloak-12x">#</a></h1> <ol> <li> <p>Create a new Role at Keycloak, e.g. <code>demo-pam-authentication</code>. (Assuming the server is at <code>https://keycloak.example.com</code>)</p> </li> <li> <p>Create a new Client Scope, e.g. <code>pam_roles</code>:</p> <ul> <li>Protocol: <code>openid-connect</code></li> <li>Display On Consent Screen: <code>OFF</code></li> <li>Include in Token Scope: <code>ON</code></li> <li>Mapper: <ul> <li>Name: e.g. <code>pam roles</code></li> <li>Mapper Type: <code>User Realm Role</code></li> <li>Multivalued: <code>ON</code></li> <li>Token Claim Name: <code>pam_roles</code> (the name of the Client Scope)</li> <li>Claim JSON Type: <code>String</code></li> <li>Add to ID token: <code>OFF</code></li> <li>Add to access token: <code>ON</code></li> <li>Add to userinfo: <code>OFF</code></li> </ul> </li> <li>Scope: <ul> <li>Effective Roles: <code>demo-pam-authentication</code> (the name of the Role)</li> </ul> </li> </ul> </li> <li> <p>Create a new Keycloak Client:</p></description></item></channel></rss>