[Feature Request] Assign teams from OpenID Connect claims #950

Open
opened 1 year ago by EternalDeiwos · 5 comments

It would be fantastic to optionally add users to teams based on provided claims (if they are available/configured).

It would be fantastic to optionally add users to teams based on provided claims (if they are available/configured).
Owner

Would you do that with a custom claim in the id token or by some logic based on the existing claims?

How would you specify the team users get added to?

Would you do that with a custom claim in the id token or by some logic based on the existing claims? How would you specify the team users get added to?
konrad added the
kind/feature
label 1 year ago

It would probably be a custom claim. None of the standard OIDC claims are viable. If you had a "groups" claim (either string or array of strings) then it should add users to each of the corresponding teams or create the teams if they don't exist.

I'd recommend having an environment variable that configures which claim Vikunja looks for, as different IdPs will provide similar values but under different claim names.

This could be for either ID token or the user info endpoint.

It would probably be a custom claim. None of the standard OIDC claims are viable. If you had a "groups" claim (either string or array of strings) then it should add users to each of the corresponding teams or create the teams if they don't exist. I'd recommend having an environment variable that configures which claim Vikunja looks for, as different IdPs will provide similar values but under different claim names. This could be for either ID token or the user info endpoint.
Owner

That makes sense. You would probably need to pass in the id of the team and not the name because names aren't unique.

That makes sense. You would probably need to pass in the id of the team and not the name because names aren't unique.

Yes please! I now have to prompt all people to log in so I can assign them to the team, which is rather annoying.

An option to share something for everyone on the instance would be handy here, too.

Yes please! I now have to prompt all people to log in so I can assign them to the team, which is rather annoying. An option to share something for everyone on the instance would be handy here, too.

Hello. I am currently working on that feature.

there are several specifications that need to be adressed:
#1279

Hello. I am currently working on that feature. there are several specifications that need to be adressed: https://kolaente.dev/vikunja/api/pulls/1279
Sign in to join this conversation.
No Milestone
No Assignees
4 Participants
Notifications
Due Date

No due date set.

Dependencies

No dependencies set.

Reference: vikunja/api#950
Loading…
There is no content yet.