FeatureFuel
1

Map OpenID groups to internal Directus groups

Source: directus/directus#24443 · opened by @mykhailo-sindieiev
Summary Currently, Directus allows new users to log in the application and all of them are associated to one group provided in AUTH_<PROVIDER>_DEFAULT_ROLE_ID [environment variable]( The feature might be the configuration of the mapping of user group that comes from auth provider to different internal groups. Thus, access control to different views and different data is moved from the application to the Identity Provider Basic Example _No response_ Motivation Robust access control, moving security controls into one central place Detailed Design oauth2 jwt access token that comes from idp contains the information about user groups. Create a page in Directus frontend that allows administrator to manually map expected group that comes from idp to internal Directus group. For example, access token might contain group name "ABC" and Directus' admin can map group "ABC" to Directus' internal "READ ONLY" group. So, all users that ar…

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests