Connect Keycloak to LDAP or Active Directory
Federate an LDAP or Active Directory user store into Keycloak — the two settings to decide first, a tested kcadm setup, group mapping, and the four silent failures.
Keycloak Identity Provider Mappers: Map External IdP Claims
Map attributes and claims from an external IdP into Keycloak users, roles and tokens — the ten mapper types, the sync-mode matrix, and the four silent failures.