OpenConext / OpenConext/OpenConext-Invite

Single-tennant application roles don't fit the role to application requirement

Open
#815 0 comments 0 reactions 3 assignees View on GitHub

@MarliesRikken is already working on this.

Since Sep 9, 2026.

discussion
Dominant language
Java
Stars
6
Forks
7
Avg merge
12h 24m
Merged PRs (30d)
11

Description

When configuring (CRM) roles a minimum of one manage entityID needs to be configured. However, some (CRM) roles allow access to many single-tennant instances of the same application. E.g. SURFeduhub-beheerder would allow access to 16 single-tennant manage entityID's.

This in itself isn't a problem, but the invitation for the role tells the user that they will have access to 16 applications of which they don't recognise 15 when they accept the role. Apart from not recognising the tennant, it also clutters the invitation mail and the welcome landingpage.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.