hashicorp / boundary

Boundary enables identity-based access management for dynamic infrastructure.
https://boundaryproject.io
Other
3.86k stars 289 forks source link

support multiple user profules in boundary desktop #5210

Open ninjadude333 opened 1 month ago

ninjadude333 commented 1 month ago

Is your feature request related to a problem? Please describe. i have a few boundary accounts, multiple accounts from clients i commision to. now i have to logout and back in again for different accounts, and also providing bndry uri for each and every time is a big pain.

Describe the solution you'd like multiple account configuration or profiles if you preffer better. this will allow to store and save multiple accounts, and mybe in the future will allow to work with multiple accounts in different tabs simultaniously ;)

Describe alternatives you've considered manually creating a logoff and login account script for each account i have, risk secret harcoding etc...

Explain any additional use-cases this is marketed as the new age vpn. vpns are for external contractor access, and temporary fast access too. so just like a vpn client can support multiple accounts in one client, bndry dsktp should do too.

Additional context this is getting real, i have multiple target accounts $$)

anando-chatterjee commented 3 weeks ago

Hi @ninjadude333 thanks for logging this feature request! We included the ability to pass prompts during OIDC auth-n in Boundary's 0.14.3 release, which allows customers to customize their auth-n process, including the ability to prompt the user to select a different userID during the logon process. Is this what you're looking for?

ninjadude333 commented 3 weeks ago

Hi, i was more reffering to the desktop client, with multiple profiles.

anando-chatterjee commented 3 weeks ago

Just trying to understand the problem a bit more. Are you authenticating against the same controller but as different users? Or are you trying to authenticate against different controllers? If it is the latter, we have a FR which captures this usecase. This is on our roadmap, but not slotted for delivery in the immediate future.

If it is the former, which authentication source are you using? We have customers who have been able to incorporate logging in via multiple userIDs against Entra ID using the capability I linked above.

ninjadude333 commented 3 weeks ago

hi, actually both use cases, but mostly different boundary controllers. the FR looks to be covering my need.

On Mon, 4 Nov 2024 at 20:08, Anando Chatterjee @.***> wrote:

Just trying to understand the problem a bit more. Are you authenticating against the same controller but as different users? Or are you trying to authenticate against different controllers? If it is the latter, we have a FR https://github.com/hashicorp/boundary/issues/3157 which captures this usecase. This is on our roadmap, but not slotted for delivery in the immediate future.

If it is the former, which authentication source are you using? We have customers who have been able to incorporate logging in via multiple userIDs against Entra ID using the capability I linked above.

— Reply to this email directly, view it on GitHub https://github.com/hashicorp/boundary/issues/5210#issuecomment-2455380981, or unsubscribe https://github.com/notifications/unsubscribe-auth/AFL2R5YS56YZVZSVBOQTBN3Z66SXNAVCNFSM6AAAAABQWCSTE2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINJVGM4DAOJYGE . You are receiving this because you were mentioned.Message ID: @.***>