[Suggestion]: Add OIDC_IGNORE_ROLES to disable updating user roles when logging in with SSO #373

Closed
opened 2026-02-04 18:51:37 +03:00 by OVERLORD · 0 comments
Owner

Originally created by @lebalz on GitHub (Oct 25, 2023).

I'd like the possibility to use OIDC as a way to log in but without managing the user roles over the claim. Like that users can log in to planka and can be granted admin privileges through the app (without loosing the permissions when logging out and in again - currently users are updated when logging in based on the claim...)

Suggestion:
Add a OIDC_IGNORE_ROLES option to disable updating the user roles when logging in with SSO...

Background: In my organisation, developers can create new OICD Applications in Azure AD, but are not allowed to create User Roles (and thus can not add roles to the auth token.

Originally created by @lebalz on GitHub (Oct 25, 2023). I'd like the possibility to use OIDC as a way to log in but **without** managing the user roles over the claim. Like that users can log in to planka and can be granted admin privileges through the app (without loosing the permissions when logging out and in again - currently users are updated when logging in based on the claim...) **Suggestion**: Add a `OIDC_IGNORE_ROLES` option to disable updating the user roles when logging in with SSO... Background: In my organisation, developers can create new OICD Applications in Azure AD, but are not allowed to create User Roles (and thus can not add roles to the auth token.
OVERLORD added the enhancement label 2026-02-04 18:51:37 +03:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/planka#373