ENV(SITE) - Add IDP-driven group assignment via Keycloak mappers

[sumesh85]

SITE needs some custom roles in the token for the gov and non-gov users so that they can control certain permissions on their side.
This can be met with IDP mappers in keycloak (PS the POC done here)

This will essentially add a group to anyone who logs in with IDP (BCSC, BCeID or IDIR) and the group can map multiple realm roles OR client roles. We will use client roles in this case so that those roles wont be visible for other apps.

Steps

1. Create client role on client site-web: role name , description <...>.

2. Create group and map the client role to it (Groups → group → Role Mappings → Client Roles → assign).
3. Add IDP mapper on IDP :

• Mapper type: Hardcoded Group
• Group:

4. Add client role mapper to the client with claim name (such as sites_roles)