Improved group synchronisation

- add exact path match condition to allow selection of specific groups
- add negative match conditions to exclude specific groups/users
- support group names derived from attibutes

docker-test/src/main/resources/keycloak/test-realm.json

@@ -1162,6 +1162,10 @@
     "groups": [
         {
             "name": "Test A",
+            "attributes": {
+                "alfrescoGroupName": ["Group_A"],
+                "alfrescoGroupDisplayName": ["Group with custom mapped attributes"]
+            },
             "subGroups": [
                 {
                     "name": "Test AA"

docker-test/src/main/resources/repository/alfresco-global.addition.properties

@@ -3,6 +3,7 @@ db.url=jdbc:postgresql://alf-pg:5432/alfresco
 db.username=alfresco
 db.password=alfresco
 
+index.subsystem.name=solr6
 solr.host=solr6
 solr.port=8983
 
@@ -29,5 +30,6 @@ keycloak.roles.requiredClientScopes=alfresco-role-service
 
 keycloak.synchronization.userFilter.containedInGroup.property.groupPaths=/Test A
 keycloak.synchronization.groupFilter.containedInGroup.property.groupPaths=/Test A
+keycloak.synchronization.groupFilter.pathMatch.property.groupPaths=/Test A
 
 keycloak.synchronization.requiredClientScopes=alfresco-authority-sync