Cannot define iss or acr using keycloak attribute mapper
Issue
It is no longer possible to define iss or acr using keycloak attribute mapper. Following error message is reported:
[org.keycloak.protocol.oidc.mappers.OIDCAttributeMapperHelper] (default task-3) Claim 'iss' is non-modifiable in IDToken. Ignoring the assignment for mapper 'issuer'
Environment
- Red Hat Single Sign-On (RH-SSO)
- 7.5.1 +
- attribute mapper with iss or acr attribute
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.