Hello.
I am posting because there are some issues when linking AWS and Keycloak.
Authentication is being linked to AWS through Keycloak using SAML, but the role attribute information included in the SAML response is too large to be authenticated with AWS.
Is it possible to filter out only some of the roles assigned to a specific client of Keycloak and deliver them as a SAML response? For example, I would like to filter out AWS account ID information contained in the role name and include it in the SAML response information.
If anyone knows a good solution, please advise.
Thank you in advance.