Organizational Membership mapper

[magthe]

I might be missing something, but is there no support for Organizational Membership mappers yet?

[sschu]

No, the organization API is unfortunately not covered, yet.

[magthe]

That's too bad. Any known workarounds until it gets covered?

[sschu]

You could try using the nullor http provider to directly perform calls to Keycloak's admin API to configure it.

[magthe]

Well, after learning a bit more about the setup it turns out that the mapper I want can be handled with

resource "keycloak_generic_protocol_mapper" "organization_organization" {
  realm_id        = keycloak_realm.test.id
  client_scope_id = keycloak_openid_client_scope.organization.id

  name            = "organization"
  protocol        = "openid-connect"
  protocol_mapper = "oidc-organization-membership-mapper"
  ...
}