server-auth icon indicating copy to clipboard operation
server-auth copied to clipboard

[16.0][IMP][auth_saml] Res.users autoprovisioning feature on login

Open arnaudlayec opened this issue 1 year ago • 2 comments

This commit add the possibility for Odoo administrator to specify a list of trusted "domains*" per SAML providers. When a user tries to authenticate to Odoo using SAML, coming from such domain* & providers, its Odoo res.users account is automatically created (copied from base.default_user) instead of showing him/her 'Permission denied' or 'No access granted to this database'. *domain refers to the suffix or login used for SAML authentication, like : [email protected], like from Google, Microsoft, ...

Thus, it removes for Odoo administrators who choose SAML authentication the tasks to pre-create all users manually or through SCIM connectors. However, it does not remove the need to tailor users access rights after the 1st login of the user.

arnaudlayec avatar May 27 '24 14:05 arnaudlayec

Hi @vincent-hatakeyama, some modules you are maintaining are being modified, check this out!

OCA-git-bot avatar May 27 '24 14:05 OCA-git-bot

There hasn't been any activity on this pull request in the past 4 months, so it has been marked as stale and it will be closed automatically if no further activity occurs in the next 30 days. If you want this PR to never become stale, please ask a PSC member to apply the "no stale" label.

github-actions[bot] avatar Sep 29 '24 12:09 github-actions[bot]