There is 1 comment.
 
 
OpenId Connect / cid:jira-generated-image-avatar-e57c2182-2655-467c-bb6f-f9ff9745d52e OIDC-203 Open

OIDC Authenticator will try to synchronize groups even if no mapping is defined

 
View issue   ยท   Add comment
 

1 comment

 
cid:jira-generated-image-avatar-944a2846-c1da-49c0-a575-6fbfd7556d3f Thomas Mortagne on 19/Nov/24 11:03
 

You are mixing very different things here.

OIDC-185 have nothing to do with what you are complaining about: the fact that group synchronization happen with all groups sent by the provider by default (and you can change that by providing an explicit mapping) is a feature that exist since group membership sync exist.

The only thing that changed with OIDC-185 is the criteria to know if the provided indicated groups for the user (it used to only check the userinfo, and now it also check the id token, or if you configured a custom group claim).