concourse / concourse/concourse-chart

groupsKey in azure entra sync

Open
#362 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
Mustache
Stars
160
Forks
189
PR merge metrics
No merged PRs in 30d

Description

Describe the bug

I’m trying to configure concourse authentication with azure ad. For fetching the groups from my access/id token Is the below configuration is ok ?

groupsKey : groups
scopes: email openid group

Reproduction steps

I’m trying to configure concourse authentication with azure ad. For fetching the groups from my access/id token Is the below configuration is ok ?

groupsKey : groups

Expected behavior

I’m trying to configure concourse authentication with azure ad. For fetching the groups from my access/id token Is the below configuration is ok ?

groupsKey : groups
scopes: openid,email,group

Additional context

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the Helm chart's Azure Entra authentication configuration and how the groupsKey and scopes settings are documented or consumed. Verify whether groups: is the expected token claim and whether the listed scopes are valid for group fetching. Done means the configuration is confirmed or the required chart change is specified, with reproducible guidance for Azure AD users.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, helm
Domain
authentication, cloud
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.