Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Groups Phase 3 (LDAP) #1729

Merged
merged 10 commits into from
Apr 24, 2024
Merged

Groups Phase 3 (LDAP) #1729

merged 10 commits into from
Apr 24, 2024

Conversation

dangtony98
Copy link
Collaborator

Description 📣

This PR adds the ability to sync LDAP groups to internal groups in Infisical. More specifically:

  • It adds two fields that users can specify (Group Search Base / Group DN and Group Search Filter) for help Infisical query for an LDAP user's group memberships.
  • It adds a new table LdapGroupMap to keep track of which group CN in the LDAP server should be mapped to which groupId in Infisical.
  • Upon logging into Infisical via LDAP, Infisical will add/remove the user from internal group(s) based on their LDAP group membership.

For example, you can set up a map from an LDAP group with CN Engineers to an internal group in Infisical called Engineers. Upon completing their account, users part of Engineers in the LDAP server will be automatically added to the Engineers group and provisioned access to any project that the group is part of. If the user is removed from the LDAP group, then upon their next login into Infisical, they will be de-provisioned from the internal group.

This PR also updates the LDAP documentation to include instructions for configuring LDAP group mappings.

Type ✨

  • Bug fix
  • New feature
  • Breaking change
  • Documentation

@akhilmhdh
Copy link
Member

Other than some suggestions rest looks good to me

@dangtony98 dangtony98 merged commit 9992fbf into main Apr 24, 2024
5 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants