I am trying to migrate a userbase from azure entraid into a keycloak. I need to access the oid from Azure inside my keycloak to map it into the tokens. Since profile information is linked via the oid.

To avoid a complicated 2 step migration switching to a different unique attribute, I wanted to map the oid into the user as he logs in.

I tried setting up mappers but I cannot manage to access the oid claim from the azure tokens in the mappers at Identity Provider mappers level.

Summary: I basically want to map the oid from azure into the userprofile inside keycloak or access the USER_ID from the linked identity provider directly to make it available on AT oder IDT.