Skip to content

feat: add support for syncing OIDC claims with user groups#1491

Draft
Asleep123 wants to merge 2 commits into
moghtech:mainfrom
buape:oidc-group-sync
Draft

feat: add support for syncing OIDC claims with user groups#1491
Asleep123 wants to merge 2 commits into
moghtech:mainfrom
buape:oidc-group-sync

Conversation

@Asleep123

Copy link
Copy Markdown

Adds support to automatically add (and optionally create) user groups to users in Komodo using OIDC claim data.

This requires an update to the underlying auth server Komodo uses. Upon the merge of this PR, this PR will be updated with the new release version and undrafted.

Config shape:

  ## Sync Komodo User Group memberships from an OIDC claim on every OIDC login.
  ## Only memberships previously synced from OIDC are removed when claims change.
  oidc_sync_user_groups = false

  ## OIDC claim used for User Group sync.
  ## Supports an array of strings, a single string, or a dotted path like
  `realm_access.roles`.
  oidc_sync_user_groups_claim = "groups"

  ## Create Komodo User Groups found in OIDC claims when they do not exist.
  ## When false, only existing Komodo User Groups are synced.
  oidc_sync_user_groups_auto_create = false

Closes: #667, #1251

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Feature] OIDC Groups support

1 participant