Make configurable which user identifier to use

[sauljabin]

We are using the claim: "sub" (subject that is the user id) to identify the users

Make this configurable, maybe we can use the preferred_username or email for this.

[sauljabin]

@muhammadqamar @jhosep-marin @coltmcnealy-lh does it make sense? is this possible?

This is a spike, we can check if this makes sense in a research

[jhosep-marin]

I think we can try this, but in case we find it feasible, then we'll also have to consider changing how we are currently fetching userInfo from Keycloak's Admin API.

RIght now, fetching userInfo from Keycloak is as easy as this:
keycloak.realm(realm).users().get(userId).toRepresentation();
But that's because we are using the userId that comes from the sub claim in the accessToken.

[sauljabin]

@coltmcnealy-lh please your comments

[coltmcnealy-lh]

@sauljabin this ticket is very high priority. Thank you for finding it. Let's put some effort into this to prioritize a better user experience.

[sauljabin]

This is also applicable for groups (groups name instead of group id)