From fd262b173ec43808dbf19659f9ae445e36569ce9 Mon Sep 17 00:00:00 2001
From: Stephen Marshall <stmarsh@uk.ibm.com>
Date: Fri, 26 Oct 2018 14:47:49 +0100
Subject: [PATCH] Add uniqueUserIdentifier

---
 cmd/runmqserver/webserver.go                                    | 1 +
 web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl | 1 +
 2 files changed, 2 insertions(+)

diff --git a/cmd/runmqserver/webserver.go b/cmd/runmqserver/webserver.go
index a58b9fc..e472970 100644
--- a/cmd/runmqserver/webserver.go
+++ b/cmd/runmqserver/webserver.go
@@ -98,6 +98,7 @@ func configureSSO() error {
 		"MQ_WEB_ADMIN_USERS",
 		"MQ_OIDC_CLIENT_ID",
 		"MQ_OIDC_CLIENT_SECRET",
+		"MQ_OIDC_UNIQUE_USER_IDENTIFIER",
 		"MQ_OIDC_AUTHORIZATION_ENDPOINT",
 		"MQ_OIDC_TOKEN_ENDPOINT",
 		"MQ_OIDC_JWK_ENDPOINT",
diff --git a/web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl b/web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl
index 3bb4b8c..5cebb71 100644
--- a/web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl
+++ b/web/installations/Installation1/servers/mqweb/mqwebuser.xml.tpl
@@ -27,6 +27,7 @@
     <openidConnectClient id="mqclient"
         clientId="${env.MQ_OIDC_CLIENT_ID}"
         clientSecret="${env.MQ_OIDC_CLIENT_SECRET}"
+        uniqueUserIdentifier="${env.MQ_OIDC_UNIQUE_USER_IDENTIFIER}"
         authorizationEndpointUrl="${env.MQ_OIDC_AUTHORIZATION_ENDPOINT}"
         tokenEndpointUrl="${env.MQ_OIDC_TOKEN_ENDPOINT}"
         scope="openid profile email"