[Feature Request] Assign teams from OpenID Connect claims #950

Closed
opened 2021-08-17 19:11:05 +00:00 by EternalDeiwos · 5 comments

It would be fantastic to optionally add users to teams based on provided claims (if they are available/configured).

It would be fantastic to optionally add users to teams based on provided claims (if they are available/configured).
Owner

Would you do that with a custom claim in the id token or by some logic based on the existing claims?

How would you specify the team users get added to?

Would you do that with a custom claim in the id token or by some logic based on the existing claims? How would you specify the team users get added to?
konrad added the
kind/feature
label 2021-08-17 19:22:38 +00:00
Author

It would probably be a custom claim. None of the standard OIDC claims are viable. If you had a "groups" claim (either string or array of strings) then it should add users to each of the corresponding teams or create the teams if they don't exist.

I'd recommend having an environment variable that configures which claim Vikunja looks for, as different IdPs will provide similar values but under different claim names.

This could be for either ID token or the user info endpoint.

It would probably be a custom claim. None of the standard OIDC claims are viable. If you had a "groups" claim (either string or array of strings) then it should add users to each of the corresponding teams or create the teams if they don't exist. I'd recommend having an environment variable that configures which claim Vikunja looks for, as different IdPs will provide similar values but under different claim names. This could be for either ID token or the user info endpoint.
Owner

That makes sense. You would probably need to pass in the id of the team and not the name because names aren't unique.

That makes sense. You would probably need to pass in the id of the team and not the name because names aren't unique.

Yes please! I now have to prompt all people to log in so I can assign them to the team, which is rather annoying.

An option to share something for everyone on the instance would be handy here, too.

Yes please! I now have to prompt all people to log in so I can assign them to the team, which is rather annoying. An option to share something for everyone on the instance would be handy here, too.
Contributor

Hello. I am currently working on that feature.

there are several specifications that need to be adressed:
vikunja/api#1393

Hello. I am currently working on that feature. there are several specifications that need to be adressed: https://kolaente.dev/vikunja/api/pulls/1393
Sign in to join this conversation.
No Milestone
No Assignees
4 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: vikunja/vikunja#950
No description provided.