Resource Type: keycloak_client_protocol_mapper

Defined in:

lib/puppet/type/keycloak_client_protocol_mapper.rb

Providers:

kcadm

Overview

Manage Keycloak protocol mappers

Examples:

Add email protocol mapper to test.example.com client in realm test

keycloak_client_protocol_mapper { "email for test.example.com on test":
  claim_name     => 'email',
  user_attribute => 'email',
}

Properties

• access_token_claim

  access.token.claim. Default to true for protocol openid-connect.

  Supported values:

  • true
  • false
• attribute_name

  attribute.name Default to resource_name for type saml-user-property-mapper.

• attribute_nameformat

  attribute.nameformat

• claim_name

  claim.name

• ensure (defaults to: present)

  The basic property that the resource should be in.

  Supported values:

  • present
  • absent
• friendly_name

  friendly.name. Default to resource_name for type saml-user-property-mapper.

• full_path

  full.path. Default to false for type oidc-group-membership-mapper.

  Supported values:

  • true
  • false
• id_token_claim

  id.token.claim. Default to true for protocol openid-connect.

  Supported values:

  • true
  • false
• included_client_audience

  included.client.audience Required for type of oidc-audience-mapper

• json_type_label

  json.type.label. Default to String for type oidc-usermodel-property-mapper and oidc-group-membership-mapper.

• multivalued

  multivalued

  Supported values:

  • true
  • false
• protocol (defaults to: openid-connect)

  protocol

  Supported values:

  • openid-connect
  • saml
• single

  single. Default to false for type saml-role-list-mapper.

  Supported values:

  • true
  • false
• user_attribute

  user.attribute. Default to resource_name for type oidc-usermodel-property-mapper or saml-user-property-mapper

• userinfo_token_claim

  userinfo.token.claim. Default to true for protocol openid-connect except type of oidc-audience-mapper.

  Supported values:

  • true
  • false
• usermodel_client_role_mapping_client_id

  usermodel.clientRoleMapping.clientId for type oidc-usermodel-client-role-mapper

Parameters

• client

  client

• id

  Id.

• name (namevar)

  The protocol mapper name

• provider

  The specific backend to use for this keycloak_client_protocol_mapper resource. You will seldom need to specify this — Puppet will usually discover the appropriate provider for your platform.

• realm

  realm

• resource_name

  The protocol mapper name. Defaults to name.

• type

  protocolMapper.

  Default is oidc-usermodel-property-mapper for protocol openid-connect and saml-user-property-mapper for protocol saml.

  Supported values:

  • oidc-usermodel-client-role-mapper
  • oidc-usermodel-property-mapper
  • oidc-full-name-mapper
  • oidc-group-membership-mapper
  • oidc-audience-mapper
  • saml-user-property-mapper
  • saml-role-list-mapper