Skip to content

Add the possibility for a user-defined value for admin role in OIDC role_field (e.g. different than admin) #1939

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
nodje opened this issue Mar 25, 2025 · 1 comment
Labels
suggestion Feature suggestion

Comments

@nodje
Copy link

nodje commented Mar 25, 2025

Is your feature request related to a problem? Please describe.

Not an issue proper but a lack of flexibility.

An IDP instance usually serves many Service Providers and sources its authentication from an LDAP/Active Directory instance that may only provide a list of groups/roles under one list attribute.
In this context, authentications may come as ["admin_app1", "superadmin_app2", "project1_dev"]

AFAIU, the OIDC role_field, as defined for instance with "role_field": "sftpgo_role", needs to have admin value for the user to be considered an SFTPGo admin.

This could be difficult to provide in a context as described above.

Describe the solution you'd like

Have the ability to set the admin OIDC role_field value to a custom value.

It'd be handy to be able to say role_field value superadmin is the one that gives admin role to a user.

Describe alternatives you've considered

No response

What are you using SFTPGo for?

Enterprise

Additional context

No response

@nodje nodje added the suggestion Feature suggestion label Mar 25, 2025
@sourcx
Copy link

sourcx commented Apr 17, 2025

I think this is a great suggestion and I'm in need of it as well.

It might also be possible to set the correct group property with a pre_login_hook perhaps. Did you by any chance already take a look at that?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
suggestion Feature suggestion
Projects
None yet
Development

No branches or pull requests

2 participants