Xwiki role mapping from keycloak instead of groups

[schnillerman]

I honestly don’t understand your solution; I’m trying as described here:

Issue with Mapping Roles to Groups in XWiki using "OpenID Authentication with Keycloak

I have the same problem (Keycloak roles are not provisioned in XWiki), and do not have the line commented out: I’m using oidc.groups.claim=realm_access.roles. The token provided by Keycloak looks like this (xwiki_groups is a mapper which acts as a working backup with oidc.userinfoclaims): { "exp": XXX, "iat": XXX, "jti": "XXX", "iss": "https://keycloak.XXX.XX/auth/realms/XXX", "aud": "account", "sub": "xxx", "typ": "Bearer", "azp": "xwiki.XXX", "session_state": "XXX", "acr…