Project

General

Profile

Development #10599

saml auth: extend provision_attribute to all user attributes

Added by Frédéric Péters over 3 years ago. Updated about 3 years ago.

Status:
Fermé
Priority:
Normal
Category:
-
Target version:
Start date:
08 Apr 2016
Due date:
% Done:

100%

Patch proposed:
No
Planning:
No

Description

For the moment provision_attribute will setattr() the various attributes; this only works for model attributes (first_name, last_name, email).

Associated revisions

Revision e1789615 (diff)
Added by Benjamin Dauvergne over 3 years ago

auth_saml: allow provisionning all attributes from SAML attributs (fixes #10599)

A new mellon setting named A2_ATTRIBUTE_MAPPING must be used, whose syntax is:

MELLON_A2_ATTRIBUTE_MAPPING = [
    {
'attribute': 'email',
'saml_attribute': 'mail', # value from the Name attribute of the saml:Attribute node
'mandatory': True, # optional boolean, if True and attribute is missing, SSO will be refused
},
]

History

#1 Updated by Mikaël Ates over 3 years ago

  • Target version set to 2.2.0

#2 Updated by Benjamin Dauvergne over 3 years ago

  • Assignee set to Benjamin Dauvergne
  • Tracker changed from Bug to Development

#3 Updated by Benjamin Dauvergne over 3 years ago

  • % Done changed from 0 to 100
  • Status changed from Nouveau to Résolu (à déployer)

#4 Updated by Benjamin Dauvergne about 3 years ago

  • Status changed from Résolu (à déployer) to Fermé

Also available in: Atom PDF