Development #10599: saml auth: extend provision_attribute to all user attributes - Authentic 2 - Entr'ouvert Projects — Projets d'Entr'ouvert

Development #10599

saml auth: extend provision_attribute to all user attributes

Added by Frédéric Péters over 3 years ago. Updated about 3 years ago.

Status:

Fermé

Priority:

Normal

Assignee:

Benjamin Dauvergne

Category:

Target version:

2.2.0

Start date:

08 Apr 2016

Due date:

% Done:

100%

Patch proposed:

Planning:

Description

For the moment provision_attribute will setattr() the various attributes; this only works for model attributes (first_name, last_name, email).

Associated revisions

Revision e1789615 (diff)
Added by Benjamin Dauvergne over 3 years ago

auth_saml: allow provisionning all attributes from SAML attributs (fixes #10599)

A new mellon setting named A2_ATTRIBUTE_MAPPING must be used, whose syntax is:

MELLON_A2_ATTRIBUTE_MAPPING = [
    {
            'attribute': 'email',
            'saml_attribute': 'mail',  # value from the Name attribute of the saml:Attribute node
            'mandatory': True,  # optional boolean, if True and attribute is missing, SSO will be refused
        },
    ]