Support group replication from OAuth2 groups claim #763

New Issue

OVERLORD · 2026-02-04T21:15:47+03:00

OVERLORD commented

2026-02-04 21:15:47 +03:00

Originally created by @jorgecarleitao on GitHub (Jul 20, 2025).

Is this a feature for the backend or frontend?

Backend

What would you like?

I would like to be able to replicate some groups from oauth2 as "teams", so that I don't need to manage the team configuration within Planka, and instead manage it centrally in my IdP.

I.e. manage not only permissions in Planka via the OIDC_ROLES_ATTRIBUTE claim, but also access to the projects via it.

Why is this needed?

In a context where RBAC is more and more managed centrally via an IdP (Entra, etc.), it makes sense to be able to e.g. pass a set of group names as OIDC_GROUPS_AS_TEAMS='[...]' that represent a set of groups that are automatically mapped to a team.

When a new token arrives, the group membership is updated according to the set of groups the user belongs to (in claim OIDC_ROLES_ATTRIBUTE)

Other information

No response

Originally created by @jorgecarleitao on GitHub (Jul 20, 2025). ### Is this a feature for the backend or frontend? Backend ### What would you like? I would like to be able to replicate some groups from oauth2 as "teams", so that I don't need to manage the team configuration within Planka, and instead manage it centrally in my IdP. I.e. manage not only permissions in Planka via the `OIDC_ROLES_ATTRIBUTE` claim, but also access to the projects via it. ### Why is this needed? In a context where RBAC is more and more managed centrally via an IdP (Entra, etc.), it makes sense to be able to e.g. pass a set of group names as `OIDC_GROUPS_AS_TEAMS='[...]'` that represent a set of groups that are automatically mapped to a team. When a new token arrives, the group membership is updated according to the set of groups the user belongs to (in claim `OIDC_ROLES_ATTRIBUTE`) ### Other information _No response_

OVERLORD added the enhancement label 2026-02-04 21:15:47 +03:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/planka#763