From b8227abf7f95f4537d02dd6040407ad0a4e09324 Mon Sep 17 00:00:00 2001
From: Stephen Marshall <stmarsh@uk.ibm.com>
Date: Fri, 26 Oct 2018 14:47:49 +0100
Subject: [PATCH] Add uniqueUserIdentifier

---
 cmd/runmqserver/webserver.go                                    | 1 +
 web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl | 1 +
 2 files changed, 2 insertions(+)

diff --git a/cmd/runmqserver/webserver.go b/cmd/runmqserver/webserver.go
index d3146a4..9b218ab 100644
--- a/cmd/runmqserver/webserver.go
+++ b/cmd/runmqserver/webserver.go
@@ -85,6 +85,7 @@ func configureSSO() error {
 		"MQ_WEB_ADMIN_USERS",
 		"MQ_OIDC_CLIENT_ID",
 		"MQ_OIDC_CLIENT_SECRET",
+		"MQ_OIDC_UNIQUE_USER_IDENTIFIER",
 		"MQ_OIDC_AUTHORIZATION_ENDPOINT",
 		"MQ_OIDC_TOKEN_ENDPOINT",
 		"MQ_OIDC_JWK_ENDPOINT",
diff --git a/web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl b/web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl
index 3bb4b8c..5cebb71 100644
--- a/web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl
+++ b/web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl
@@ -27,6 +27,7 @@
     <openidConnectClient id="mqclient"
         clientId="${env.MQ_OIDC_CLIENT_ID}"
         clientSecret="${env.MQ_OIDC_CLIENT_SECRET}"
+        uniqueUserIdentifier="${env.MQ_OIDC_UNIQUE_USER_IDENTIFIER}"
         authorizationEndpointUrl="${env.MQ_OIDC_AUTHORIZATION_ENDPOINT}"
         tokenEndpointUrl="${env.MQ_OIDC_TOKEN_ENDPOINT}"
         scope="openid profile email"