OpenConext / OpenConext/OpenConext-access

eduID whitelisting only by admin

Open
#965 0 comments 0 reactions 1 assignee View on GitHub

@teunfransen is already working on this.

Since Sep 16, 2026.

MVP
Dominant language
JavaScript
Stars
4
Forks
0
Avg merge
1d 14h
Merged PRs (30d)
22

Description

New Feature Request

Summary

Problem: What is the pain point? (e.g., "Users cannot filter results by date.")
Now, every type of user is able to select the eduID IdP to be activated for the connection.

Value: Why should we build this? (e.g., "Improves data accessibility for
power users.")
For security reasons, only the admins of both intitutions as external organisations are able to manipulate this option

Proposed Solution

  • Action: Only admin users have the posiblilty to enable the eduID IdP for their application. How should we show this to the user? Hide the option for non admins, or show and explain why they can't manipulate?
  • Design: NO design yet
  • Impact: Does this affect existing APIs or UI components?

Developer Checklist

To be completed by the developer during implementation.

  • Add required changes and feature flags config files
  • Create and document database changes and migrations
  • Create and document API changes and migrations
  • check for backwards compatibility
  • Updated CHANGELOG and other documentation where needed

Testing and QA

Describe how to verify and test this change.

Test Environment and Setup

Test on test2

Test Checklist
  • Verify that only the admin role is able to manipulate this option

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.