element-hq / element-hq/synapse
Support attribute requirements for `jwt_login`
Open
A-SSO
O-Uncommon
S-Minor
T-Enhancement
- Dominant language
- Python
- Stars
- 4.6k
- Forks
- 600
- Avg merge
- 5d 22h
- Merged PRs (30d)
- 51
Description
This issue has been migrated from [#13774](https://github.com/matrix-org/synapse/issues/13774).
---
Hello,
I have custom SSO based on Keycloak and using JWT token with Synapse. some of SSO users have special "roles" to using messenger and other Not have. this roles are exist in JWT tokens and can be set per user in Keycloak. in Synapse homeserver JWT config, there is only "audiences" option that is client base and also can't set for each user separately. I think if you add "roles" option to JWT config, server admin can separate SSO users to access matrix based on their roles.
Thanks
Contributor guide
Assessment
This issue has not been assessed yet.