[GitHub] [airavata-custos-portal] machristie commented on issue #39: When login in with CiLogon first name and last names are switched. Also an error is thrown "Cannot read property 'first_name'"

[GitBox <gi...@apache.org>]

machristie commented on issue #39:
URL: https://github.com/apache/airavata-custos-portal/issues/39#issuecomment-708490159


   I realized I posted my comment in the wrong issue, here it is:
   
   ---
   I'm pretty sure this is related to this bug in Keycloak where it prefers parsing `name` over using `given_name` and `family_name` claims: https://issues.redhat.com/browse/KEYCLOAK-10932
   
   We worked around this by explicitly mapping given_name to firstName and family_name to lastName using a Keycloak Attribute Mapper. From our internal CILogon notes:
   
   
   > Add the following attribute mappers
   > - family_name
   >   - name: family_name
   >   - Mapper Type: Attribute Importer
   >   - claim: family_name
   >   - User Attribute Name: lastName
   > - given_name
   >   - name: given_name
   >   - Mapper Type: Attribute Importer
   >   - claim: given_name
   >   - User Attribute Name: firstName
   > 
   > Claim mapping documentation: http://www.keycloak.org/docs/2.5/server_admin/topics/identity-broker/mappers.html
   
   
   That link is broken, but this one works: https://www.keycloak.org/docs/4.8/server_admin/index.html#_mappers


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org