keycloak.jsonnet

// scopes: openid,email,profile,groups

local claims = std.extVar('claims');
{
  identity: {
    traits: {
      email: claims.email,
      first_name: claims.given_name,
      last_name: claims.family_name,
      idp_groups: claims.groups,
    },
  },
}