Andrea Cosentino created CAMEL-23453:
----------------------------------------

             Summary: camel-keycloak: Add federated identity linking operations
                 Key: CAMEL-23453
                 URL: https://issues.apache.org/jira/browse/CAMEL-23453
             Project: Camel
          Issue Type: Improvement
          Components: camel-keycloak
            Reporter: Andrea Cosentino


The component currently exposes user CRUD operations but does not surface 
federated-identity (IdP) link management. These operations are critical for SSO 
scenarios where a Keycloak user is linked to an external identity-provider 
account (Google, GitHub, SAML provider, etc.).

The Keycloak admin client already supports these via 
{{UserResource.getFederatedIdentity()}} / {{addFederatedIdentity()}} / 
{{removeFederatedIdentity()}}, but they are not yet exposed as Camel operations.

h3. Proposed new KeycloakOperations
* {{addFederatedIdentity}} — link a user to an IdP account
* {{removeFederatedIdentity}} — unlink a user from an IdP
* {{getFederatedIdentities}} — list all IdP links for a user

h3. New headers (KeycloakConstants)
* {{IDENTITY_PROVIDER}} — the IdP alias
* {{FEDERATED_USER_ID}} — the external user id
* {{FEDERATED_USERNAME}} — the external username

h3. References
* Keycloak Admin REST API: 
{{/admin/realms/\{realm\}/users/\{user-id\}/federated-identity}}
* Use case: provisioning users with pre-linked IdP accounts during migration

h3. Acceptance criteria
* All three operations implemented in {{KeycloakProducer}}
* Header constants added to {{KeycloakConstants}}
* Integration tests in {{KeycloakProducerIT}} (or a dedicated class) cover 
link/unlink/list against a configured IdP
* {{keycloak-component.adoc}} is updated with examples




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to