[MGNLSSO-313] Make the target attribute name configurable for GroupsAuthorizationGenerator Created: 04/Oct/23  Updated: 17/Oct/23  Resolved: 17/Oct/23

Status: Closed
Project: Single Sign On
Component/s: None
Affects Version/s: 3.1.7
Fix Version/s: saas, 3.1.8

Type: Improvement Priority: Neutral
Reporter: Nguyen Phung Chi Assignee: Khayal Musayev
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Template:
Acceptance criteria:
Empty
Task DoD:
[X]* Doc/release notes changes? Comment present?
[X]* Downstream builds green?
[X]* Solution information and context easily available?
[X]* Tests
[X]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Testcase included:
Yes
Release notes required:
Yes
Documentation update required:
Yes
Epic Link: SSO maintenance
Team: AdminX
Work Started:
Approved:
Yes

 Description   

Context

There is a target property/attribute for getting user groups from the IdP in GroupsAuthorizationGenerator

The problem is it's not configurable at the moment, causing the inconvenience and our customers have to provide a custom implementation for AuthorizationGenerator just for the attribute name.

Proposed solution

  • Make the attribute name configurable (could place the config inĀ 
    GroupsAuthorizationGenerator class, like "mappings" attribute)
  • The default attribute name should be "groups" (as it's now)

Generated at Mon Feb 12 10:53:05 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.