You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In 0.7 we explicitly need to have 'group' claim in the ID Token for role assignment to work. In some cases it may be desirable to give default role to new user logging into the page.
Proposal
create a special role parseable:public that can be configured with role api. In cases where group claim is not found or group claim is insufficient we fallback to assigning this role to user so that console works for them.
The text was updated successfully, but these errors were encountered:
trueleo
changed the title
Add default role for new user
Add default role for new oidc user
Sep 20, 2023
This PR adds an API to set default role to be
assigned to any new OIDC user. This is needed
for identity providers like Google where there is
no group membership for a given user.
Fixes#513
Description
In 0.7 we explicitly need to have 'group' claim in the ID Token for role assignment to work. In some cases it may be desirable to give default role to new user logging into the page.
Proposal
create a special role
parseable:public
that can be configured with role api. In cases where group claim is not found or group claim is insufficient we fallback to assigning this role to user so that console works for them.The text was updated successfully, but these errors were encountered: