Content
Feature OP-8523: Setting to assign global role automatically to new users (who authenticate via SSO)
View differences
Updated by Robin Wagner about 5 years ago
### Problem / Pain
* Many users sign into OpenProject (who are included in OIDC / SSO). Admins then need to assign global roles to them individually (so that they can create projects).
* This takes a lot of time and can be error-prone.
### Solution
* Add configuration option so that new users who sign into OpenProject for the first time (e.g. through SSO) automatically receive pre-defined global role.
### Unclear / Questions
* Is this only applicable to users who authenticate via LDAP / via SSO or to all new users?
* Should only global roles be assigned? -> Yes
* Many users sign into OpenProject (who are included in OIDC / SSO). Admins then need to assign global roles to them individually (so that they can create projects).
* This takes a lot of time and can be error-prone.
### Solution
* Add configuration option so that new users who sign into OpenProject for the first time (e.g. through SSO) automatically receive pre-defined global role.
### Unclear / Questions
* Is this only applicable to users who authenticate via LDAP / via SSO or to all new users?
* Should only global roles be assigned? -> Yes