redkubes / otomi-core

Application Platform for Kubernetes
https://otomi.io
Apache License 2.0
2.18k stars 165 forks source link

Custom group claim name #1561

Open j-zimnowoda opened 3 months ago

j-zimnowoda commented 3 months ago

Is your feature request related to a problem? Please describe.

Some IdP providers (like Auth0) do not allow to add groups scopes to JWT. Instead IdP appends it as namespaces scope, e.g.: https://claims.example.com/roles which contains "groups".

Describe the solution you'd like A clear and concise description of what you want to happen.

Allow to specify the oidc.groupsClaimName so the Identity Provider Mappers use it instead of hardcoded groups

See: https://github.com/redkubes/otomi-tasks/blob/923eb14a30422f5f9e76a8c1d1078aded5872875/src/tasks/keycloak/config.ts#L46

j-zimnowoda commented 3 months ago

Hey team! Please add your planning poker estimate with Zenhub @Ani1357 @dennisvankekem @ElderMatt @ferruhcihan @merll