8000 User Attribute option of SAML "User Attribute Mapper for NameID" should be required · Issue #37648 · keycloak/keycloak · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
User Attribute option of SAML "User Attribute Mapper for NameID" should be required #37648
Closed
@ssilvert

Description

@ssilvert

Before reporting an issue

  • I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

admin/ui

Describe the bug

For this SAML mapper, User Attribute should be a required field.

Image

It doesn't make sense for this mapper to have a null User Attribute. And according to reports, it leads to a NullPointerException on the server:

2025-02-20 15:06:41,209 WARN  [org.keycloak.services] (executor-thread-116) KC-SERVICES0013: Failed authentication: java.lang.NullPointerException: Cannot invoke "String.equalsIgnoreCase(String)" because "name" is null
at org.keycloak.storage.ldap.mappers.UserAttributeLDAPStorageMapper$3.getFirstAttribute(UserAttributeLDAPStorageMapper.java:366)

Version

main

Regression

  • The issue is a regression

Expected behavior

User Attribute required

Actual behavior

User Attribute not required

How to Reproduce?

  1. Create a client scope with protocal SAML
  2. Go to the Mappers tab
  3. Add mapper by configuration
  4. Select "User Attribute Mapper For NameID"
  5. Observe User Attribute field that should be mandatory

Anything else?

No response

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

    0