Keycloak with one realm with all users from several companies
XWiki with subwikis
OpenID integation between Xwiki and Keycloak
What I would like is that users in a subwiki are automatically recognized by their company-domain (email) ie by using an filter. I know such thing exists with the ldap configuration.
Is this possible or do I have to go the way to use Keycloak Usergroups and map the users that way to xwikI?
There is no equivalent to xwiki.authentication.ldap.remoteUserMapping in the OIDC authenticator if that’s what you have in mind. So yes, the only way to have a user end up in a specific XWiki group automatically is for this group to be mapped with an OIDC provider side group this user is part of.
Some questions to get that working. The users do not appear now in my xwiki group
Do I have to map Keycloak group on a local group or on global group? I have now made both.
I have used this configuration. And have named it this way in keycloak an xwiki:
oidc.groups.mapping=41ca13be-83bc-4444-8bd1-454f215dd1a3=41ca13be-83bc-4444-8bd1-454f215dd1a3