Skip to content

feat: add support for syncing OIDC claims with user groups - #1491

Draft
Asleep123 wants to merge 2 commits into
moghtech:mainfrom
buape:oidc-group-sync
Draft

feat: add support for syncing OIDC claims with user groups#1491
Asleep123 wants to merge 2 commits into
moghtech:mainfrom
buape:oidc-group-sync

Conversation

@Asleep123

Copy link
Copy Markdown

Adds support to automatically add (and optionally create) user groups to users in Komodo using OIDC claim data.

This requires an update to the underlying auth server Komodo uses. Upon the merge of this PR, this PR will be updated with the new release version and undrafted.

Config shape:

  ## Sync Komodo User Group memberships from an OIDC claim on every OIDC login.
  ## Only memberships previously synced from OIDC are removed when claims change.
  oidc_sync_user_groups = false

  ## OIDC claim used for User Group sync.
  ## Supports an array of strings, a single string, or a dotted path like
  `realm_access.roles`.
  oidc_sync_user_groups_claim = "groups"

  ## Create Komodo User Groups found in OIDC claims when they do not exist.
  ## When false, only existing Komodo User Groups are synced.
  oidc_sync_user_groups_auto_create = false

Closes: #667, #1251

@pdsccode

pdsccode commented Sep 8, 2026

Copy link
Copy Markdown

I am rolling out Komodo in our company. Is there anything new around this? I'd love to see some progress :)

@Asleep123

Copy link
Copy Markdown
Author

I am rolling out Komodo in our company. Is there anything new around this? I'd love to see some progress :)

My company has just decided to build our own version of Komodo Core as role sync is really needed for our setup.

@pdsccode

pdsccode commented Sep 8, 2026

Copy link
Copy Markdown

So I guess the PR would be basically ready to go and just needs review?

@mbecker20

Copy link
Copy Markdown
Member

Why don't you guys reach out to contact@mogh.tech?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Feature] OIDC Groups support

3 participants