Uploaded image for project: 'RH-SSO'
  1. RH-SSO
  2. RHSSO-2343

Support Groups Overage Indicator of AzureAD SAML implementation

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Won't Do
    • Icon: Major Major
    • None
    • RH-SSO-7.6.1
    • Adapters
    • None
    • False
    • None
    • False

      As mentioned in [1], AzureAD returns a link to a service to get groups.
      (Please see the example of Attribute [2])
      We need a feature to access Groups Overage Indicator link and parse a response to get actual groups in SAML adapter.

      [1] https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-saml-tokens

      [2]

          <Attribute Name=" http://schemas.microsoft.com/claims/groups.link">
              <AttributeValue>
                  https://graph.windows.net/\{tenantID}/users/\{userID}/getMemberObjects
              <AttributeValue>
          </Attribute>
      

              Unassigned Unassigned
              rhn-support-hokuda Hisanobu Okuda
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: