On Sun, Oct 4, 2020, 12:49 Nick Couchman <vn...@apache.org> wrote: > On Sun, Oct 4, 2020 at 3:45 PM MARTINEZ, ARIEL <amarti...@hostos.cuny.edu> > wrote: > >> Does anyone know if the SAML extension is supposed to take the group >> membership of a user and associate it automatically to a group defined in >> Guacamole that has the same name? This is what happens with the LDAP >> authentication extension, not sure if something similar applies to the SAML >> one. >> > The SAML extension does not currently implement Group membership. >
Doesn't it? The "saml-group-attribute" property defines the SAML attribute used to retrieve groups. As for group identity, for any extension implementing groups, Guacamole should be using the name of the group to determine identity. This should happen regardless of whether the source of those groups is LDAP, SAML, etc. It's all opaque to guac. - Mike
