admin管理员组

文章数量:1399940

I am setting up user import from AD to Keycloak. When I set the objectGUID (or objectSid) value to the UUID LDAP attribute parameter and click "Sync all user", I get the response "3 user failed". If I set the userPrincipalName value, I get the response "3 users update". For debugging, I added mappers for these two attributes with the user-attribute-ldap-mapper type to see their values ​​in the user card. The result is on the screenshot.
binary
Then I enable the "Is binary attribute" parameter in the mapper settings. The result is on the screenshot
base64
It turns out that the values ​​of these attributes come via LDAP in binary form. In the mapper settings, I can decode them in base64 (as I understand it). The question is, how can I make sure that the normal value comes to the UUID LDAP attribute parameter? Because, as I have found out, the values ​​come from LDAP in a different form than required. P.S. I'm still a newbie, sorry if the question is stupid

本文标签: active directoryProblems setting LDAP Attribute UUID to objectSidobjectGUID in KeycloakStack Overflow