rancher
Manually entered Groups names in ADFS Auth Provider does not work
Internal Reference: SURE-5789
Connected Rancher server to ADFS for authentication. When we try to restrict which groups are allowed to login and enter the Distinguished Name manually in the field it do not work.
When we select it from the DropDown List everything is fine.
First step: Reproduce issue and document how to setup environment for reproducing.
I was able to reproduce this with Keycloak SAML.
The issue is that when you start typing a name, you're not searching, you're specifying a new name and hence we assume it is a user.
When you click the drop-down, we show you a group - I think we only have access to the group for the current user, so we show that.
The issue is the SAML does not allow you to search. We need to re-think the UX and be clearer to the user.
I don't think showing the groups in the dropdown is useful.
In terms of the groups shown when clicking the drop down, if it works the same way as GH you're correct. The groups shown are those returned when we requests principals ... which are the ones the user is a member of
@nwmac do we need to update JIRA (SURE-5789) about this issue? Is it blocked by backend?
