adr: use eduation api for multi-tenancy provisioning#1548
Conversation
butonic
left a comment
There was a problem hiding this comment.
I think this summarizes our discussion well. Should we clarify wether or not the autoprovisioning mode is to be used in combination with external provisioning? We should be provisioning the same user data if the claims contain all necessary properties. It might be worth a dedicted ADR to discuss if we want to support only (auto)provisioning and drop the external LDAP integration (I'd love that).
I wrote this under the assumption that auto-provisioning would be turned off in this scenario. All user changes would need to be provisioned before the first login (and changes would also be done explicitly via the provisioning API). If that wasn't clear from the text, the I guess I need to add that. OTOH if we come to the conclusion that we need auto-provisioning to work in combination with the external provisioning we should write that down here as well.
Yeah. But let's keep that topic for another time. |
Co-authored-by: Jörn Friedrich Dreyer <[email protected]> Co-authored-by: Michael Barz <[email protected]>
@butonic @micbar This is trying to summarize what we discussed last week around the provisioning API for multi-tenancy.
Please comment.