Skip to content

Commit

Permalink
fix: dead link in 2023-02-05-from-keycloak-to-kanidm
Browse files Browse the repository at this point in the history
  • Loading branch information
ashhhleyyy committed Jan 2, 2024
1 parent ba733bb commit feb588a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion blog/2023-02-05-from-keycloak-to-kanidm.md
Original file line number Diff line number Diff line change
Expand Up @@ -125,7 +125,7 @@ It doesn't work :/

## The scope of the issue

Kanidm has a feature called "scope maps", which controls which users/clients are able to request certain scopes when logging in. For OpenID Connect, a scope named `openid` [MUST](https://www.rfc-editor.org/rfc/rfc2119) be requested, along with additional scopes which control what user information is included in the provided token, such as [`profile`, `email` or `address`](https://github.com/kanidm/kanidm/blob/master/kanidm_book/src/integrations/oauth2.md#:~:text=HINT%20OpenID,connect).
Kanidm has a feature called "scope maps", which controls which users/clients are able to request certain scopes when logging in. For OpenID Connect, a scope named `openid` [MUST](https://www.rfc-editor.org/rfc/rfc2119) be requested, along with additional scopes which control what user information is included in the provided token, such as [`profile`, `email` or `address`](https://kanidm.github.io/kanidm/stable/integrations/oauth2.html#create-the-kanidm-configuration).

Vouch only needs the `openid` and `email` scopes to function, so we just need to create a scope mapping which grants those:

Expand Down

0 comments on commit feb588a

Please sign in to comment.