chamilo / chamilo-lms

Chamilo is a learning management system focused on ease of use and accessibility
https://chamilo.org
GNU General Public License v3.0
785 stars 478 forks source link

Add SCIM compatibility for automated provisioning of users #3982

Open ywarnier opened 3 years ago

ywarnier commented 3 years ago

SCIM is a set of rules to communicate users and groups provisioning through REST web services with JSON payloads: https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/use-scim-to-provision-users-and-groups#design-your-user-and-group-schema Between others, this would allow for a better integration with Azure AD.

Solution I'd like That Chamilo would provide an endpoint that can communicate through SCIM with external identity manager.

This is not urgent, just a nice to have.

lonesomewalker commented 3 years ago

I understand that this would be nice, however: https://twitter.com/amiluttwak/status/1437898746747097090 and disclosure timeline: https://twitter.com/_msw_/status/1438014701107957766

I think we should better focus on other authentication systems, like Keycloak... Microsoft has no future, and instead of wasting ressources now, we should plan some months/years ahead ;-)

I know, currently there is A LOT Azure, but we have several customers which are fed up after the last outages, and also there are SEVERAL ministries which are now switching to more open source in case of license costs.

But just my opinion ;-)

NicoDucou commented 3 years ago

I think we should better focus on other authentication systems, like Keycloak...

Just to mention that there is already a keycloak identification possible in Chamilo with the plugin here https://github.com/chamilo/chamilo-lms/tree/1.11.x/plugin/keycloak that you can extend if you need.

Best regards