Support for more/custom keycloak_ldap_mapper types?

[nblock]

Currently, the list of supported types for the keycloak_ldap_mapper is hardcoded to:

• user-attribute-ldap-mapper
• full-name-ldap-mapper
• group-ldap-mapper
• role-ldap-mapper

In Keycloak 15.0.2 the following LDAP mappers (for AD) are available:

• msad-user-account-control-mapper
• group-ldap-mapper
• role-ldap-mapper
• hardcoded-attribute-mapper
• hardcoded-ldap-role-mapper
• msad-lds-user-account-control-mapper
• user-attribute-ldap-mapper
• certificate-ldap-mapper
• full-name-ldap-mapper
• hardcoded-ldap-group-mapper
• hardcoded-ldap-attribute-mapper

In addition to the built-in LDAP mappers one can add custom ones with their own ID. Do you see a way to support custom ldap mappers in the module?

Puppet module version: 7.12.0
Keycloak version: 15.0.2

[treydock]

There was some work in #228 to support arbitrary configuration options for realms that get passed directly to Keycloak API with rest of data from this module. That same approach might work for LDAP mapper too. The big downside to allowing arbitrary key/value pairs is you lose validation. Do you have any example data for some of those other LDAP mapper types I could use in validating new code works to add those LDAP mappers? Just one or two examples be good enough I think. If you just provide the JSON dump from kcadm that's fine, can redact as needed.

[nblock]

Here is the configuration of a self-written ldap mapper that converts LDAP's whenCreated to Keycloak's createdTimestamp. It supports the same parameters as the built-in ldap mapper:

{
  "id" : "3b1d2883-3b58-44d5-a060-dee13a5f0211",
  "name" : "creation-date",
  "providerId" : "user-attribute-enhanced-ldap-mapper",
  "providerType" : "org.keycloak.storage.ldap.mappers.LDAPStorageMapper",
  "parentId" : "ldap",
  "config" : {
    "ldap.attribute" : [ "whenCreated" ],
    "is.mandatory.in.ldap" : [ "true" ],
    "is.binary.attribute" : [ "false" ],
    "read.only" : [ "true" ],
    "always.read.value.from.ldap" : [ "false" ],
    "user.model.attribute" : [ "createdTimestamp" ]
  }
}