[AIRAVATA-3548] CILogon users can't change their first name or last name in user profile editor

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Django Portal, Security
• Labels: known_issue
• Assignee: Unassigned
• Reporter: Marcus Christie
• Created: 10/Dec/21 20:26
• Updated: 10/Dec/21 20:26

Description

Mostly I'm documenting this as a known issue.

Users who authenticate through CILogon are unable to change their First name and Last name in the User Profile Editor in the Airavata Django Portal. Or rather, they can change first and last name but the next time they log in, the values fro CILogon userinfo will overwrite their first and last name.

This is because we have configured attribute mappers to map given_name -> firstName and family_name to lastName in Keycloak. At least that's my guess. If we could configure these mappers to run only the first time a CILogon user logs in, I think that would fix it, but I'm not sure if Keycloak allows that kind of configuration.

Issue Links

• relates to: AIRAVATA-3319 Handle missing name and email attributes from CILogon