keycloak active connectorType = 'jp.openstandia.connector.keycloak.KeycloakConnector' and connectorVersion = '1.1.8' and available = true http://host.docker.internal:8082 midPoint-connectionClient http://www.w3.org/2001/04/xmlenc#aes256-cbc ZktavQjlj2s7F2i8WAdIfdx8hBU= QWEiXSYkB7F8flrcYAxHEiXzNSO2S7CvUsQiavhpCp/A9qbvWYqeiYGbtNn9AjSlt/S7FG3YYhkbvcAFgGT0Sg== midpoint midpoint ri:group ri:user ri:client ri:clientRole account account account ri:user c:UserType ri:username username-out strong name username strong name ri:firstName firstName-out strong givenName firstname strong givenName ri:lastName lastName-out strong familyName lastname strong familyName ri:groups explicit ri:clientRoles explicit name linked-synchronize linked unlinked-link unlinked unmatched-add unmatched entitlement group group ri:group c:RoleType ri:groupId groupId-to-name strong identifier ri:name name-to-displayName strong displayName ri:path path-to-identifier strong name ri:parentGroup explicit parentGroup strong locale ri:clientRoles explicit name linked-synchronize linked unlinked-link unlinked unmatched-add unmatched entitlement clientRole clientRole ri:clientRole c:RoleType ri:name name-into name The full name of the clientrole {clientId}/{roleName} is being used as name. because the role name is only unique within a client. Displayname is set as only the roleName because the full name is not meaningfull for users strong name clientRoleName-into-displayName Setting display name to only be in the client role name not including the client identifier. As this name is only unique within a client this is not a unique identifier. strong displayName ri:clientRoleId roleId into identifier strong identifier ri:description description strong description name unmatched-add unmatched unlinked-link unlinked linked-sync linked generic client client ri:client c:ServiceType ri:name name-to-displayname strong displayName ri:clientId clientId-to-name strong name unmatched unlinked linked groupMembershipsAssociation account account groupMemberships groupMemberships outboundGroupAssociation inbound association groupMemberships inbound-memberships strong targetRef correlate targetRef unmatched unmatched matched matched true parentGroupAssociation entitlement group parentRef parentRef groupsIn parentRef targetRef-inbound strong targetRef correlate targetRef matched matched unmatched unmatched user-clientRole-Association account account clientRoleAssignments clientRoleAssignments outbound association clientRoleAssignments associationFromLink strong inbound association clientRoleAssignments targetRef-in strong targetRef targetRef unmatched matched group-clientRole-Association entitlement group clientRoleAssignment clientRoleAssignment outbound association clientRoleAssignment associationFromLink strong inbound association clientRoleAssignment targetRef-in strong targetRef targetRef matched unmatched true true groupMembership ri:user groups groupMemberships ri:group groupId subjectToObject parentGroupReference ri:group parentGroup parentRef ri:group groupId objectToSubject userClientRoleReference ri:user clientRoles clientRoleAssignments ri:clientRole name subjectToObject groupClientRoleReference ri:group clientRoles clientRoleAssignment ri:clientRole name subjectToObject