search

goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
13.8k stars 928 forks source link

Provide custom user mapping logic via expression #8979

Open vertig0ne opened 8 months ago

vertig0ne commented 8 months ago

Is your feature request related to a problem? Please describe. When I am trying to add a trusted OIDC provider, I find it difficult with some sources to map to users properly.

Screenshot 2024-03-20 at 16 08 54

Describe the solution you'd like I would like for the ability to provide the usermapping via an Expression, this would allow for me in this instance. Use the subject line in the incoming JWT subject of project_path:mygroup/myproject:ref_type:branch:ref:main and map project_path:mygroup/myproject* to serviceUser_project_001

If I have not provided that mapping, to just flat out deny auth to that endpoint.

Describe alternatives you've considered Any sort of custom user mapping would be nice, to do something like string matching

rissson commented 8 months ago

So that option is only used for identifying a user uniquely when they authenticate later. We are currently working on property mappings for sources, which will allow you to customize the username, email and other attributes that you might need to change from that.

wsmith-selectech commented 2 weeks ago

@vertig0ne…. We have the exact same request for Oauth. Did the new source mappings help?