1
Map OpenID groups to internal Directus groups
Source: directus/directus#24443 · opened by @mykhailo-sindieiev
Summary Currently, Directus allows new users to log in the application and all of them are associated to one group provided in AUTH_<PROVIDER>_DEFAULT_ROLE_ID [environment variable]( The feature might be the configuration of the mapping of user group that comes from auth provider to different internal groups. Thus, access control to different views and different data is moved from the application to the Identity Provider Basic Example _No response_ Motivation Robust access control, moving security controls into one central place Detailed Design oauth2 jwt access token that comes from idp contains the information about user groups. Create a page in Directus frontend that allows administrator to manually map expected group that comes from idp to internal Directus group. For example, access token might contain group name "ABC" and Directus' admin can map group "ABC" to Directus' internal "READ ONLY" group. So, all users that ar…
No pledges yet. Be the first to back this.
Comments
Similar requests
v-map component
4 votes · 0 comments
Don't automatically cast all env-vars to numbers
1 vote · 0 comments
An option to add fields into relevant groups without dragging them.
8 votes · 0 comments
Issue INVALID_CREDENTIALS when SSO between Entra ID with Directus 11.5
1 vote · 0 comments
Single Sign On between Directus and Microsoft Entra ID does not working
2 votes · 0 comments
No comments yet.