Advanced Claim to Role Regex

Getting advice
1

Hi,
I’d like to map an OIDC claim to a Realm Role.
If I use the advanced claim to role mapper with the exact
value of the clami it works as expected.

Now, I want to make it more general and use a RegEx to map multiple
claim values to this group but this does not work.
My claim is eduperson_entitlement and I would like to map any claim value of urn:geant:helmholtz.de:group: and anything that follows to this to my role.
How do I construct the RegEx?
It seems like I’m missing somethng, a simple search for \b does not work.
Does anyone have experience with this?
Cheers

2

Did you make any progress with this?

3

Hi @alansonsci ,
yes, I had to match the whole of the OIDC Claim with a regex matchall
(\b<MATCH>\b)(?s)(.*$)
This worked. Took a while and a lot of regex101.com :smiley:

1 Like
4

BTW did you write a script to do this or was it via the console? I am trying to learn about the REST API and trying and failing to get it working via my python script. import requestsimport jsonimport boto3# Set up variables for Keycloak se - Pastebin.com

5

hi,
no I just used the Web UI.