yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1888029] [NEW] RFE: allow automatically deprovisioning mapped assignments

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Jason Anderson <1888029@xxxxxxxxxxxxxxxxxx>
Date: Fri, 17 Jul 2020 22:46:21 -0000
Reply-to: Bug 1888029 <1888029@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Public bug reported:

Currently there is support for auto-provisioning role assignments within
projects that are created for the user when they authenticate. However,
there is no way to offboard users from these projects, either due to
mapping changes or due to dynamic changes in their group/role
memberships from the IdP.

It would be nice to have opt-in support for automatically deprovisioning
them as well for security/policy reasons.

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1888029

Title:
  RFE: allow automatically deprovisioning mapped assignments

Status in OpenStack Identity (keystone):
  New

Bug description:
  Currently there is support for auto-provisioning role assignments
  within projects that are created for the user when they authenticate.
  However, there is no way to offboard users from these projects, either
  due to mapping changes or due to dynamic changes in their group/role
  memberships from the IdP.

  It would be nice to have opt-in support for automatically
  deprovisioning them as well for security/policy reasons.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1888029/+subscriptions