Configuring Role Mapping

This section describes the settings necessary to configure role mapping. The role mapping feature enables to map the application project types and the user roles with those defined in Keycloak identity provider system.

1. Make sure Use Role Mapping field in Configuration > SSO is set to true (see step 2 of Configuring Talend Administration Center in IdP-initiated mode with Keycloak).
2. Open the Mapping Configuration and set the values for:
   • project types
   • roles mapping

   

3. Go to Keycloak admin console, create a new user with the default attributes: firstName, lastName and email:

   

4. Add other attributes on the user manually: tacProjectType, tacRole:

   

5. Add the attributes mapping to Talend Administration Center Client:
   • User Property

     

   • User Attribute

     

     

   • All

     

6. Go to Keycloak account console page http://<host>:<port>/auth/realms/myrealm/account/, log in with the newly created user and click the Talend Administration Center application.