FAQ | This is a LIVE service | Changelog

Skip to content
Snippets Groups Projects
Commit 4942a72e authored by Kayobe Automation's avatar Kayobe Automation
Browse files

Fix typos and define mapping rules for both IRIS IAM and Cambridge-local...

Fix typos and define mapping rules for both IRIS IAM and Cambridge-local Keycloak OIDC user federation
parent 27e83f88
No related branches found
No related tags found
2 merge requests!428Sync arcus/yoga-staging to arcus/yoga-production,!427Fix typos and define mapping rules for both IRIS IAM and Cambridge-local...
[
{
"local": [
{
"user": {
"name": "{0}",
"email": "{1}"
},
"group": {
"domain": {
"name": "iris"
},
"name": "iris-cambridge-testing-users"
}
}
],
"remote": [
{
"type": "OIDC-preferred_username"
},
{
"type": "OIDC-email"
},
{
"regex": true,
"type": "OIDC-email",
"any_one_of": [
"pfb29@cam.ac.uk"
]
}
]
}
]
......@@ -27,9 +27,11 @@ keystone_identity_providers:
protocol: "openid"
identifier: "https://iris-iam.stfc.ac.uk/"
public_name: "Authenticate via IRIS-IAM"
attribute_mapping: "keycloak_mapping"
attribute_mapping: "iris_mapping"
metadata_folder: "{{ kayobe_config_path }}/environments/staging/arcus-idp-conf/idp"
keystone_identity_mappings:
- name: "keycloak_mapping"
file: "{% raw %}{{ node_custom_config }}{% endraw %}/keystone/identity-mappings.json"
file: "{% raw %}{{ node_custom_config }}{% endraw %}/keystone/keycloak_identity-mappings.json"
- name: "iris_mapping"
file: "{% raw %}{{ node_custom_config }}{% endraw %}/keystone/iris_identity-mappings.json"
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment