Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-26998

Apply Atlassian Crowd group membership to SAML user tokens

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Open
    • Resolution: Unresolved
    • Affects Version/s: 7.35.0
    • Fix Version/s: None
    • Labels:
      None
    • Environment:
    • Location:
      External

      Description

      Current behavior:

      Users log in with SAML SSO in the browser, and groups are applied to their browser login session. Personal identity tokens and API keys for SAML users can be generated in the browser. When using the tokens for API requests or artifact uploads, the users do not have any group permissions, since the groups for their accounts are managed as SAML SSO groups.

      Desired behavior:

      When a SAML user uses a personal identity token or API key, Artifactory uses the token's username and queries a connected Crowd server (or any/all other connected group services), matches group membership with groups currently "imported" or configured internally, and applies those groups to the token's session.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            peter.landoll Peter Landoll
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:

                Sync Status

                Connection: RTFACT Sync
                RTMID-27034 -
                SYNCHRONIZED
                • Last Sync Date: