Development #10599: saml auth: extend provision_attribute to all user attributes - Authentic 2 - Redmine Entr'ouvert

Development #10599

saml auth: extend provision_attribute to all user attributes

Added by Frédéric Péters almost 7 years ago. Updated about 6 years ago.

Status:

Fermé

Priority:

Normal

Assignee:

Benjamin Dauvergne

Category:

Target version:

2.2.0

Start date:

08 April 2016

Due date:

% Done:

100%

Estimated time:

Patch proposed:

Planning:

Description

For the moment provision_attribute will setattr() the various attributes; this only works for model attributes (first_name, last_name, email).

Associated revisions

Revision e1789615 (diff)
Added by Benjamin Dauvergne over 6 years ago

auth_saml: allow provisionning all attributes from SAML attributs (fixes #10599)

A new mellon setting named A2_ATTRIBUTE_MAPPING must be used, whose syntax is:

MELLON_A2_ATTRIBUTE_MAPPING = [
        {
            'attribute': 'email',
            'saml_attribute': 'mail',  # value from the Name attribute of the saml:Attribute node
            'mandatory': True,  # optional boolean, if True and attribute is missing, SSO will be refused
        },
    ]