Public bug reported:
Currently there is support for auto-provisioning role assignments within
projects that are created for the user when they authenticate. However,
there is no way to offboard users from these projects, either due to
mapping changes or due to dynamic changes in their group/role
memberships from the IdP.
It would be nice to have opt-in support for automatically deprovisioning
them as well for security/policy reasons.
** Affects: keystone
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1888029
Title:
RFE: allow automatically deprovisioning mapped assignments
Status in OpenStack Identity (keystone):
New
Bug description:
Currently there is support for auto-provisioning role assignments
within projects that are created for the user when they authenticate.
However, there is no way to offboard users from these projects, either
due to mapping changes or due to dynamic changes in their group/role
memberships from the IdP.
It would be nice to have opt-in support for automatically
deprovisioning them as well for security/policy reasons.
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1888029/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
