Netbox 4.x + KeyCloak + SAML2 SSO

[elg0ch0]

Hi,

How can I "tell" Netbox what the mapping is from SAML attributes when using Keycloak SAML2 SSO + python-social-auth?

It works for authentication (after setting Client signature required = Off), but Netbox GUI does not display the user's attributes (even if they are present in the SAML response). For example, email fields in user's profile remains blank.

configuration.py contains:

...
SOCIAL_AUTH_SAML_ENABLED_IDPS   = {
    "KeyCloak": {
        "entity_id":                "https://keycloak.localdomain/realms/Netbox",
        "url":                      "https://keycloak.localdomain/realms/Netbox/protocol/saml",
        "attr_email":               "email", 
        "attr_user_permanent_id":   "uid",
        "attr_username":            "username",

        "x509cert": "-----BEGIN CERTIFICATE-----MY_CERT-----END CERTIFICATE-----"
    }
}
...

Keycloak´s mappings looks like:

Thanks in advance!