OpenConext / OpenConext/OpenConext-access
eduID whitelisting only by admin
@teunfransen is already working on this.
Since Sep 16, 2026.
- Dominant language
- JavaScript
- Stars
- 4
- Forks
- 0
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 22
Description
New Feature Request
Summary
Problem: What is the pain point? (e.g., "Users cannot filter results by date.")
Now, every type of user is able to select the eduID IdP to be activated for the connection.
Value: Why should we build this? (e.g., "Improves data accessibility for
power users.")
For security reasons, only the admins of both intitutions as external organisations are able to manipulate this option
Proposed Solution
- Action: Only admin users have the posiblilty to enable the eduID IdP for their application. How should we show this to the user? Hide the option for non admins, or show and explain why they can't manipulate?
- Design: NO design yet
- Impact: Does this affect existing APIs or UI components?
Developer Checklist
To be completed by the developer during implementation.
- Add required changes and feature flags config files
- Create and document database changes and migrations
- Create and document API changes and migrations
- check for backwards compatibility
- Updated CHANGELOG and other documentation where needed
Testing and QA
Describe how to verify and test this change.
Test Environment and Setup
Test on test2
Test Checklist
- Verify that only the admin role is able to manipulate this option
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.