I have successfully configured SAML SSO using Keycloak. The SAML handshake succeeds, Keycloak validates the login, and Part-DB successfully reads the identity and creates the user account in its database.
However, the user is greeted with a 403 Forbidden / Access Denied screen upon returning to Part-DB. When checking the newly created user profile via a local admin account, the user is not assigned to any Group.
I did the SAML configuration in the compose.yaml and have
- SAML_ROLE_MAPPING={"admin":1,"parts":3}
set like that.
In keycloak I assigned the mapper of type Role list to the dedicated scope and configured it to have the attribute name group.
Still no groups are assigned to SAML Users even through they are created and even given email and name according to keycloak user.
I'm rather sure this is a configuration issue on my part but i just can figure out how to fix it
I have successfully configured SAML SSO using Keycloak. The SAML handshake succeeds, Keycloak validates the login, and Part-DB successfully reads the identity and creates the user account in its database.
However, the user is greeted with a 403 Forbidden / Access Denied screen upon returning to Part-DB. When checking the newly created user profile via a local admin account, the user is not assigned to any Group.
I did the SAML configuration in the compose.yaml and have
- SAML_ROLE_MAPPING={"admin":1,"parts":3}set like that.
In keycloak I assigned the mapper of type
Role listto the dedicated scope and configured it to have the attribute namegroup.Still no groups are assigned to SAML Users even through they are created and even given email and name according to keycloak user.
I'm rather sure this is a configuration issue on my part but i just can figure out how to fix it