简体繁体 English

范围和声明参数不会从 Keycloak 服务器转发到另一个 OIDC 提供商

[英]Scope and Claims parameters are not forwarded to another OIDC provider from Keycloak server

原文 2019-11-26 15:33:49 4 1 openid/ openid-connect/ keycloak

Just started to work with Keycloak.刚开始使用 Keycloak。 I created an Identity Provider, setup everything and when client performs openid request it successfully goes to my provider backend through keycloak.我创建了一个身份提供者，设置了一切，当客户端执行 openid 请求时，它通过 keycloak 成功进入我的提供者后端。 But scope field is fully replaced with 'Default claims' in provider settings and doesn't contain requested claims.但是范围字段在提供者设置中完全替换为“默认声明”，并且不包含请求的声明。 I created a client scope and put it in 'optional list', so it should be sent if requested by client but it doesn't help.我创建了一个客户端范围并将其放在“可选列表”中，因此如果客户端请求它应该发送但它没有帮助。 What can be a problem?有什么问题？

Also I have a question about claims parameter, now I found that in realm configuration “claims_parameter_supported”:false.另外我有一个关于 claim 参数的问题，现在我发现在领域配置中“claims_parameter_supported”：false。 is it possible to configure it?可以配置吗？

1 个解决方案

What can be a problem?有什么问题？

You need to add your client scope to "Assigned Optional Client Scopes" on "Client Scopes" page of your client.您需要将客户端范围添加到客户端“客户端范围”页面上的“已分配的可选客户端范围”。 You can check if it works as expected on the page which is shown after clicking "Evaluate" sub tab.您可以在单击“评估”子选项卡后显示的页面上检查它是否按预期工作。

Also I have a question about claims parameter, now I found that in realm configuration “claims_parameter_supported”:false.另外我有一个关于 claim 参数的问题，现在我发现在领域配置中“claims_parameter_supported”：false。 is it possible to configure it?可以配置吗？

Keycloak has not supported it yet. Keycloak 尚未支持它。 Please refer to this ticket .请参考这张票。