Uploaded image for project: 'OpenOLAT'
  1. OpenOLAT
  2. OO-2892

Shibboleth: apply author role based on shib-attribute on login

    XMLWordPrintable

    Details

    • Funded by:

      Description

      To automate usermanagement in a Shibboleth enabled setting it can make sense to grant author rights based on a user attribute, eg. the affiliation. 

      Example: if a user has the following shib attribute:

      affiliation="staff@uni.org;member@uni-org"

      a new configuration should automatically add this user the author role because the attribute contains the segment "staff@uni.org". 

      • Add configuration to the shib module to enable automatic author mapping
      • Configuration for attribute name and required value (in a "contain" manner)
      • Code in shib manager to add the author role to a user 
      • Add the method call to the user sync method if enabled in the module

      The following business rules will apply: 

      1. If there is an author match and the author role does not exist, add the author role. 
      2. Manually removing an author role that has been added by shibboleth is possible. However, on the next login the role will be added again by rule 1)
      3. If the is no author match (1) but an author role exists, the author role remains untouched. Author roles must not be removed, only added. 

       

        Attachments

          Activity

            People

            Assignee:
            uhensler Urs Hensler
            Reporter:
            gnaegi Florian Gnägi
            Tester:
            Sabrina Scheiwiler (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 1 day
                1d
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 day
                1d