# Creating client scope with read only user meta data

**URL:** <https://forum.keycloak.org/t/creating-client-scope-with-read-only-user-meta-data/29253>\
**Category:** Getting advice\
**Tags:** user-federation, ldap\
**Created:** [December 17, 2024, 11:58am UTC](https://forum.keycloak.org/t/creating-client-scope-with-read-only-user-meta-data/29253 "2024-12-17T11:58:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![akhildaskailas](https://avatars.discourse-cdn.com/v4/letter/a/67e7ee/32.png) [@akhildaskailas](https://forum.keycloak.org/u/akhildaskailas)\
**Post date:** [December 17, 2024, 11:58am UTC](https://forum.keycloak.org/t/creating-client-scope-with-read-only-user-meta-data/29253/1 "2024-12-17T11:58:50Z")

</div>

I have set up LDAP integration and need to include LDAP group information in the JWT token. I found that mapping LDAP groups to Keycloak groups is a possible solution, but it’s not feasible for me since I already have existing implementations based on groups. To work around this, I created a user attribute and used the LDAP mapper with the `memberOf/member` property to update the user attribute, but this approach isn’t working. I also explored using the `LDAP_ENTRY_DN` user metadata and added a client scope with the user property set to `LDAP_ENTRY_DN`, but that didn’t work either. Is there another way to achieve this?