Open Keycloak
Select Clients / Select the SAML Client and Select Mappers
Click on Add Builtin
Add the X500. givenName, sureName and email
Open the Application
Configure the Authentication
For the username you can use
...
This will concatenate the Firstname X500 givenName and the Last Namesurame
For the email you can use the X500 email
Code Block |
---|
urn:oid:1.2.840.113549.1.9.1 |
You can also define the default usersgroups that a new user will be added to