OIDC: enable mapping `groups` claim to user groups
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 1.1k
- Forks
- 564
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 29
Description
Overview of the Feature Request
Currently, we cannot make the OIDC provider put remote users into certain groups based on the groups claim that can be received from an identity provider. This is crucial for SPA functionality and other use cases.
What kind of user is the feature intended for?
Sysadmin
What inspired the request?
The upcoming SPA and working on #9268
What existing behavior do you want changed?
Map users to groups using admin specified configuration.
Any brand new behavior do you want to add to Dataverse?
Nope
Any open or closed issues related to this feature request?
#9268 #8349 #6679 #5974
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the related issues #9268, #8349, #6679, and #5974, then locate Dataverse's OIDC provider configuration and user-group mapping flow. The work is done when an administrator can configure users to be placed into groups based on the identity provider's groups claim.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authentication, authorization
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100