Keycloak：如何连接到 Google 身份提供程序以编程方式添加角色

Question

We use Keycloak with Google IDP to authenticate. When a user log in using Google, I want to hook into the flow to add some roles for that user session.

What should I do? I have tried creating to custom Authenticator but not sure this is the possible or best practice.

Please help! Thanks!

Answer 1

When a user log in using google, I want to hook into the flow to add some roles for that user session.

Not sure what you do mean by roles to the user session. However, if you mean add roles to the user yes you can do that out of the box for instance:

• Go to your Realm;
• Select Identity Providers;
• Select you google IDP;
• Switch to the tab Mappers;
• Click on [Create]
• Select as a Mapper Type : Hardcoded Role
• Select the Role;
• Click on [save].

Here is the list of Mapper Types available for the Google IDP: