-
Notifications
You must be signed in to change notification settings - Fork 39
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add missing configuration key in UpsertProvider (add provider via command) #1063
base: main
Are you sure you want to change the base?
Add missing configuration key in UpsertProvider (add provider via command) #1063
Conversation
Signed-off-by: Björn Bores <[email protected]>
Signed-off-by: Björn Bores <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good. A few adjustments in the README and let's get this in.
``` | ||
sudo -u www-data php /var/www/nextcloud/occ config:app:set user_oidc provider-X-groupProvisioning --value=1 | ||
sudo -u www-data php /var/www/nextcloud/occ config:app:set user_oidc provider-X-groupWhitelistRegex --value='/<regex>/' | ||
sudo -u www-data php /var/www/nextcloud/occ config:app:set user_oidc provider-X-restrictLoginToGroups --value=1 | ||
``` | ||
(where `X` is the numeric provider id) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is not the recommended way to update a provider.
Mentioning the occ user_oidc:provider
command should be enough in the README.
``` | ||
(where `X` is the numeric provider id) | ||
|
||
Or at provider creation: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Or at provider creation: | |
You can configure each provider: | |
* Toggle group provisioning | |
* Set the group whitelist regular expression | |
* Toggle login restriction to people who don't belong to any whitelisted group. | |
This can be done in the graphical settings, in the "OpenID Connect" admin settings section or with the occ command to create/update providers: |
closes #1062
Add missing extra options
Add documentation for group provisioning