oVirt does not get keycloak groups

Hi everyone. I have setup a oVirt Installation with Keycloak for a PoC-Evaluation but i'm actually struggling with Keycloak Groups sync to oVirt. I Added Active Directory Users and also a Group Mapper for LDAP Groups -> in Keycloak i see all Users and also that they belong to Groups but the Group-Membership is not populated to oVirt back. As a result i can't grant Permissions groupwise - only per user. For the initial group-sync i ticked the Option "Drop non-existing groups during sync" which also deleted the ovirt-administrator group. Maybe this is the main Problem here. I created this group again and unchecked this option but it still does not sync the groups. What do you recommend? Purge the system and do a clean install or is there another easy fix out there? Thanks, have a nice weekend. Greetings Christian
participants (1)
-
Christian Fischer