Skip to content

[OID4VCI] Attribute did should only be added to user profile if oid4vci is enabled for the realm#46311

Draft
tdiesler wants to merge 1 commit intokeycloak:mainfrom
tdiesler:ghi46297
Draft

[OID4VCI] Attribute did should only be added to user profile if oid4vci is enabled for the realm#46311
tdiesler wants to merge 1 commit intokeycloak:mainfrom
tdiesler:ghi46297

Conversation

@tdiesler
Copy link
Contributor

closes #46297

Copy link
Contributor

@mposolda mposolda left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems this is not really fixed.

The did attribute is not really added dynamically to the user-profile. For example when I create new realm test in the admin console, then I enable Verifiable credentials for that realm and I create some user in the realm, I do not see did attribute in the user's profile.

As I've pointed already, I think that you can use same pattern like it is used for example for the locale attribute, which is added trully dynamically to the user profile based on whether localization is enabled for the realm. See https://github.com/keycloak/keycloak/blob/release/26.5/services/src/main/java/org/keycloak/userprofile/DeclarativeUserProfileProviderFactory.java#L427 , https://github.com/keycloak/keycloak/blob/release/26.5/services/src/main/java/org/keycloak/userprofile/DeclarativeUserProfileProviderFactory.java#L490 , https://github.com/keycloak/keycloak/blob/release/26.5/services/src/main/java/org/keycloak/userprofile/DeclarativeUserProfileProviderFactory.java#L507 . I think same pattern should be possible to use for did attribute, which would be added when verifiable credentials is enabled for the realm though?

The attribute did is localized only in account console, but still not localized when looking at the admin console and when updating profile of the user in the "login" theme (Triggered by adding "Update profile" required action to the user). It may probably need update in js/apps/admin-ui/maven-resources/theme/keycloak.v2/admin/messages/messages_en.properties (for admin theme) and themes/src/main/resources/theme/base/login/messages/messages_en.properties (for login theme). There are separate files for "login" theme, "account" theme and "Admin" theme and some things (like user-profile attributes) need to be updated in all those places.

@mposolda mposolda self-assigned this Feb 13, 2026
@tdiesler tdiesler marked this pull request as draft February 14, 2026 15:50
@tdiesler tdiesler marked this pull request as ready for review February 14, 2026 16:55
@tdiesler tdiesler requested a review from a team as a code owner February 14, 2026 16:55
…CI is enabled for the realm

Signed-off-by: Thomas Diesler <tdiesler@ibm.com>
@tdiesler tdiesler marked this pull request as draft February 15, 2026 07:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[OID4VCI] Attribute did should be added to user profile just if OID4VCI is enabled for the realm

2 participants