[Feature Request] Assign teams from OpenID Connect claims #950

Open
opened 11 months ago by EternalDeiwos · 3 comments

It would be fantastic to optionally add users to teams based on provided claims (if they are available/configured).

It would be fantastic to optionally add users to teams based on provided claims (if they are available/configured).
Owner

Would you do that with a custom claim in the id token or by some logic based on the existing claims?

How would you specify the team users get added to?

Would you do that with a custom claim in the id token or by some logic based on the existing claims? How would you specify the team users get added to?
konrad added the
kind/feature
label 11 months ago

It would probably be a custom claim. None of the standard OIDC claims are viable. If you had a "groups" claim (either string or array of strings) then it should add users to each of the corresponding teams or create the teams if they don't exist.

I'd recommend having an environment variable that configures which claim Vikunja looks for, as different IdPs will provide similar values but under different claim names.

This could be for either ID token or the user info endpoint.

It would probably be a custom claim. None of the standard OIDC claims are viable. If you had a "groups" claim (either string or array of strings) then it should add users to each of the corresponding teams or create the teams if they don't exist. I'd recommend having an environment variable that configures which claim Vikunja looks for, as different IdPs will provide similar values but under different claim names. This could be for either ID token or the user info endpoint.
Owner

That makes sense. You would probably need to pass in the id of the team and not the name because names aren't unique.

That makes sense. You would probably need to pass in the id of the team and not the name because names aren't unique.
Sign in to join this conversation.
No Milestone
No Assignees
2 Participants
Notifications
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Loading…
There is no content yet.