Skip to content

OIDC: enable mapping groups claim to user groups #9969

Open
Open
OIDC: enable mapping groups claim to user groups#9969
Labels
Feature: APIFeature: Account & User InfoFeature: Admin GuideFeature: Installation GuideFeature: PermissionsNeeds Backend DesignFeature needs design input from backend devsSPAThese changes are required for the Dataverse SPAUser Role: CuratorCurates and reviews datasets, manages permissionsUser Role: SysadminInstalls, upgrades, and configures the system, connects via ssh

Description

@poikilotherm
poikilotherm
opened on Oct 3, 2023

Overview of the Feature Request

Currently, we cannot make the OIDC provider put remote users into certain groups based on the groups claim that can be received from an identity provider. This is crucial for SPA functionality and other use cases.

What kind of user is the feature intended for?
Sysadmin

What inspired the request?
The upcoming SPA and working on #9268

What existing behavior do you want changed?
Map users to groups using admin specified configuration.

Any brand new behavior do you want to add to Dataverse?
Nope

Any open or closed issues related to this feature request?
#9268 #8349 #6679 #5974

Activity

  1. poikilotherm
    added
    Feature: API
    Feature: Permissions
    Feature: Account & User Info
    Feature: Installation Guide
    Feature: Admin Guide
    SPAThese changes are required for the Dataverse SPA
    on Oct 3, 2023
  2. poikilotherm
    added this to IQSS Dataverse Projecton Oct 3, 2023
  3. poikilotherm
    added a commit that references this issue on Oct 3, 2023

    doc(oidc,test): remove group column for predefined Keycloak users

    379022c
  4. poikilotherm
    added this to IQSS Dataverse Project and removed this from IQSS Dataverse Projecton Oct 5, 2023
  5. poikilotherm
    moved this to Re-arch: Auth MVP (Phil) in IQSS Dataverse Projecton Oct 5, 2023

  6. cmbz commented on Jan 8, 2024

    @cmbz
    cmbz
    on Jan 8, 2024

    2024/01/08: @scolapasta will follow up with Oliver to discuss.

  7. poikilotherm
    added this to Forschungszentrum Jülichon Jul 10, 2024
  8. poikilotherm
    moved this to Important in Forschungszentrum Jülichon Jul 10, 2024

  9. johannes-darms commented on Sep 23, 2025

    @johannes-darms
    johannes-darms
    on Sep 23, 2025
    Contributor

    Shall we create a document to draft ideas how this can be resolved/implemented?

  10. pdurbin commented on Sep 23, 2025

    @pdurbin
    pdurbin
    on Sep 23, 2025
    Member

    @johannes-darms sure! Here's a doc! https://docs.google.com/document/d/1eSmPoPSiBVO_KMJTorVR0Jaomi8BnbjjDI8ZpFtDI48/edit?usp=sharing

  11. cmbz
    added
    FY26 Sprint 14FY26 Sprint 14 (2025-12-31 - 2026-01-14)
    and removed
    FY26 Sprint 14FY26 Sprint 14 (2025-12-31 - 2026-01-14)
    on Jan 14, 2026
  12. cmbz
    added
    Needs Backend DesignFeature needs design input from backend devs
    on Apr 6, 2026
  13. jp-tosca
    added
    User Role: CuratorCurates and reviews datasets, manages permissions
    User Role: SysadminInstalls, upgrades, and configures the system, connects via ssh
    on Oct 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Feature: APIFeature: Account & User InfoFeature: Admin GuideFeature: Installation GuideFeature: PermissionsNeeds Backend DesignFeature needs design input from backend devsSPAThese changes are required for the Dataverse SPAUser Role: CuratorCurates and reviews datasets, manages permissionsUser Role: SysadminInstalls, upgrades, and configures the system, connects via ssh

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions