Terraform Cloud SSO user/team mappings from via SAML / Google Workspace aren't working.

alphagov / govuk-infrastructure

Terraform turnup automation for the EKS Kubernetes clusters that host GOV.UK. See https://github.com/alphagov/govuk-helm-charts for application config.

MIT License

139 stars 24 forks source link

Terraform Cloud SSO user/team mappings from via SAML / Google Workspace aren't working. #1134

Open sengi opened 7 months ago

sengi commented 7 months ago

We have Terrform Cloud hooked up to Google Workspace for single-sign-on, but it isn’t assigning groups to people correctly. Pretty sure it used to work back when we first started using TFC.

This means we’re having to manually assign groups as people request them, which is toil (and raises the chance of mistakes).

dj-maisy commented 6 months ago

Is this because people aren't authenticating via SSO once they've got an account, or is this because the groups only sync on initial account creation?

sengi commented 6 months ago

TFC ~definitely~ is supposed to require all users except org owners to authn via SSO in order to access projects owned by the org, so I don't think it's the first one. Perhaps the second one? (I haven't looked into it myself.)