Skip to content

Feature: Automatically add OIDC user to group #673

@alejones

Description

@alejones

I would like to have a new user automatically added to a group in Wishlist when they are in the same group in an idp provider. If the "Family" group exists in Wishlist and the idp, add the user to that group. If the "Other group" and "Family" exists in Wishlist and the idp, add them to both groups in Wishlist.

In Authentik I believe I am sending this info to Wishlist.

{
    "iss": "https://auth.mydomain.com/application/o/wishlist/",
    "sub": "asdfasdfasdf",
    "aud": "asdf",
    "exp": 1773590003,
    "iat": 1773588203,
    "auth_time": 1773588203,
    "acr": "goauthentik.io/providers/oauth2/default",
    "jti": "adfasdfasdf",
    "email": "alex@mydomain.com",
    "email_verified": true,
    "name": "Alex",
    "given_name": "Alex",
    "preferred_username": "Alex",
    "nickname": "Alex",
    "groups": [
        "Family",
        "users",
        "Other group"
    ]
}

Describe the solution you'd like
A user logs in for the first time with SSO and is in one or more groups. The Wishlist admin should not have to add them to a group.

Describe alternatives you've considered
A user must log in, tell the admin they aren't in a group. The admin adds them, then tells them to check again.

Thank you for all the work you have put into this app!

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions