Comments (4)
This is intended, we'll need to add this as a "breaking" change to the release notes @rissson @tanberry
from authentik.
Thanks for clarifying @BeryJu .
I still think that having groups with the same name could be useful in some scenarios, for example using nested groups.
Is there any technical or design reason which cause the removal of this feature?
Without this feature, nesting groups may be less useful, and users will end up using a flat group setup..
This feature is also beneficial for mapping groups to Apps. For instance, OIDC apps obtain group names via claims. If group names are unique, OIDC applications may end up with unnatural group names, such as /org/division/administrators instead of simply administrators. While this issue can be resolved through policies, it requires additional effort.
from authentik.
@marcportabellaclotet-mt the main reason fir this is compatibility with external systems (it was changed as part of adding GWS support), as with a lot of external systems that are also identity providers (like google workspace and entra), group names are unique. Also with how groups are currently returned in scopes and in the API it can be quite difficult to differentiate two different groups with the same name (when not using the UUID). This might be something we'll revisit in the future or make configurable in the future
from authentik.
That makes a lot of sense.
Making this configurable could be useful for different scenarios.
Thanks for the explanation @BeryJu .
from authentik.
Related Issues (20)
- AMR MFA field not being sent to OIDC client?
- Blueprint validation failures not returned to web UI
- How to use apache2 auth_openidc? HOT 1
- Redirect failing on initial login HOT 1
- 404 errors for flows on full development environment HOT 1
- authentik Embedded Outpost Proxy Doesn't work when there are many Providers HOT 1
- UI is messed up when forcing light mode with system set to dark mode
- Nextcloud SAML: Found an Attribute element with duplicated Name HOT 1
- What is the TLS version of the OIDC provider of Authentik?
- Authentik occasionally times out HOT 1
- Add documentation surrounding configuring PhotoPrism in Integrations section of website HOT 1
- How about semantic versioning? HOT 1
- No outposts found with given token, ensure the given token corresponds to an authenitk Outpost HOT 2
- Docker Compose Setup Does Not Work on MacOS or Other POSIX OSes
- Application icons disappear after a few weeks
- GET /api/v3/flows/executor/google-enrollment-flow/
- Discord docs expression policy doubt
- Getting 500 error on subpages
- (1, 'failed to sign') when using ECDSA certificate for SAML HOT 3
- LDAP outpost doesn't work with if user has TOTP HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from authentik.