Public bug reported: Currently there is support for auto-provisioning role assignments within projects that are created for the user when they authenticate. However, there is no way to offboard users from these projects, either due to mapping changes or due to dynamic changes in their group/role memberships from the IdP.
It would be nice to have opt-in support for automatically deprovisioning them as well for security/policy reasons. ** Affects: keystone Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1888029 Title: RFE: allow automatically deprovisioning mapped assignments Status in OpenStack Identity (keystone): New Bug description: Currently there is support for auto-provisioning role assignments within projects that are created for the user when they authenticate. However, there is no way to offboard users from these projects, either due to mapping changes or due to dynamic changes in their group/role memberships from the IdP. It would be nice to have opt-in support for automatically deprovisioning them as well for security/policy reasons. To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1888029/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp