Keycloak groups

ReportServer (EN)
1

Hi all,

We just install ReportServer with Keycloak. By default ReportServer put user to OIDC_IMPORTED group. Is there option in ReportServer to put user in specific group by reading groups claim in JWT that receive from Keycloak?

Thank you!

Kind regards,
Zoran

2

Hi Zoran,

currently, there is no built-in option in ReportServer to assign users to specific groups based on the groups claim in the JWT received from Keycloak.

At the moment, newly created users are placed in the default OIDC_IMPORTED group, and this behavior cannot be customized via configuration.

As a workaround, you can either:

  • manually move users to the desired groups after their initial login, or
  • create the users in ReportServer in advance and assign them to the appropriate groups

Once a user already exists in ReportServer, they will no longer be placed into OIDC_IMPORTED on subsequent logins.

Unfortunately, I cannot say if or when such a feature will be available.

Best regards,
Eduardo