Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Organization sync settings should be runtime configurable #86

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Emyrk opened this issue Sep 30, 2024 · 0 comments · Fixed by coder/coder#15431
Closed

Organization sync settings should be runtime configurable #86

Emyrk opened this issue Sep 30, 2024 · 0 comments · Fixed by coder/coder#15431
Assignees

Comments

@Emyrk
Copy link
Member

Emyrk commented Sep 30, 2024

Organization sync automatically assigns users to an organization based on their IDP claims. At present, this is configured by server flags.

https://github.com/coder/coder/blob/main/codersdk/deployment.go#L1587-L1598

This should be runtime configurable with a view in the global settings.

This page would look identical to the IDP sync pages today.

flowchart LR
    G[OIDC Claims] 

    subgraph D [Deployment]
        direction TB



        M[[CODER_OIDC_ORGANIZATION_FIELD]]
        GO[[CODER_OIDC_ORGANIZATION_MAPPING]]
        
   
        OM{{Organization Membership
        This decides what organizations
        the auth'd user is in. 
        Claims are passed to the org.
        }}

        style T fill:transparent,stroke:transparent
        T[Settings to map OIDC user --> org member]

        T ~~~ M

        M --> GO
        GO --> OM
    end

    subgraph OS [Organizations]
        direction TB    
        subgraph O1 [Organization #1 Settings]
            direction TB
            style TO fill:transparent,stroke:transparent
            TO[Organization settings map claims
            to organization groups and roles.]


            O1I{{OIDC Claims}}
            %% Groups
            OF[("Group filters")]
            OGM[("Group Link (mapping)")]
            OAC[("Group Auto Create")]
            O1G[Groups]

            %% Roles
            ORM[("Role Link (mapping)")]
            OR[Organization Roles]

            %% Arrows
            O1I --> ORM
            ORM --> OR

            O1I --> OF
            OF --> OGM
            OF --> OAC
            O1I ~~~ TO
            TO ~~~ OGM
            %% TO ~~~ OAC

            OGM --> O1G
            OAC --> O1G
        end

        subgraph O2 [Organization #2 Settings]
            ignore["... Repeat of above ..."]
        end
    end

    G --> D
    D --OIDC claims--> O1I
    D --OIDC claims--> O2
Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants