03/21/2025

• Feature SI-47: Support OIDC in storage health status
  updated by Cécile Guiot on 03/21/2025 04:20 PM
  • Comment added

    All AC have been verified, one issue was found:
      
    which I added as relation on the epic
    Marking this as tested ✅
    Teste...

  • Status changed from in test to tested
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Cécile Guiot on 03/21/2025 03:44 PM
  • Status changed from in test to test failed
  • Assignee changed from Cécile Guiot to Jan Sandbrink
• Bug SI-107: Storage shows as healthy even if audience is misconfigured
  updated by Cécile Guiot on 03/21/2025 01:37 PM
  • Subject changed from Unclear error message when storage audience is misconfigured to Storage shows as healthy even if audience is misconfigured
  • Description changed (Details)
  • Version set to 15.5.0
  • Parent changed from Support OIDC in storage health status to Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  • File grafik.png added as attachment
• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by Jan Sandbrink on 03/21/2025 10:56 AM
  • Description changed (Details)
  • Status changed from in specification to specified
• Implementation SI-92: Breaking down the tests: Base Configuration Group
  updated by Marcello Rocha Pereira on 03/21/2025 10:50 AM
  • Status changed from new to closed
  • % Complete set to 100%
• Implementation SI-94: Breaking down the tests: Authentication Configuraiton Group
  updated by Marcello Rocha Pereira on 03/21/2025 10:50 AM
  • Status changed from new to needs review
  • Developers set to Marcello Rocha Pereira
• Implementation SI-93: Breaking down the tests: AMPF Configuration Group
  updated by Marcello Rocha Pereira on 03/21/2025 10:49 AM
  • Status changed from new to in development
  • Assignee set to Marcello Rocha Pereira
  • Developers set to Marcello Rocha Pereira

03/20/2025

• Implementation SI-94: Breaking down the tests: Authentication Configuraiton Group
  updated by GitHub ⁤ on 03/20/2025 03:34 PM
  • Comment added

• Feature SI-119: Validate scope of JWTs
  updated by GitHub ⁤ on 03/20/2025 01:56 PM
  • Comment added

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by Cécile Guiot on 03/20/2025 11:36 AM
  • Assignee deleted (Cécile Guiot)
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Jens Ulferts on 03/20/2025 10:30 AM
  • Comment added

    There will not be a 15.6. release. The one after 15.5. is 16.0

  • Version set to 16.0.0
• Feature SI-119: Validate scope of JWTs
  created by Jan Sandbrink on 03/20/2025 09:41 AM
• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by Jan Sandbrink on 03/20/2025 08:33 AM
  • Description changed (Details)
  • Status changed from new to in specification
  • Assignee set to Jan Sandbrink

03/19/2025

• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Niels Lindenthal on 03/19/2025 06:41 PM
  • Finish date changed from 05/30/2025 to 06/10/2025
  • Scheduling mode set to Manual
  • Duration changed from 108 days to 115 days
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Wieland Lindenthal on 03/19/2025 06:30 PM
  • Comment added

    FYI The attribute changes above on dates are due to Niels and me prototyping resource management. Those values might cha...

• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Niels Lindenthal on 03/19/2025 06:28 PM
  • Finish date set to 05/30/2025
  • Start date set to 01/01/2025
  • Duration set to 108 days
• Bug SI-118: First time opening files tab, files show as "non readable"
  created by Jan Sandbrink on 03/19/2025 04:36 PM
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Cécile Guiot on 03/19/2025 02:55 PM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    5caa1ee0927787127161977466162175b87c7673
    Product version
    4b55c8485559fa6ad277e54aea2b97536...

  • Status changed from in test to tested
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Feature SI-103: Script the SSO setup for openDesk
  updated by Wieland Lindenthal on 03/19/2025 01:57 PM
  • Description changed (Details)
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Cécile Guiot on 03/19/2025 01:35 PM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Cécile Guiot on 03/19/2025 01:35 PM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Markus Kahl on 03/19/2025 10:47 AM
  • Status changed from merged to closed
  • Assignee deleted (Markus Kahl)
  • % Complete set to 100%
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Cécile Guiot on 03/19/2025 10:17 AM
  • Status changed from in test to merged
  • Assignee changed from Cécile Guiot to Markus Kahl
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by GitHub ⁤ on 03/19/2025 09:45 AM
  • Comment added

    opf/openproject#18368 deployed to qa.openproject-stage.com

• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Cécile Guiot on 03/19/2025 09:33 AM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Markus Kahl on 03/19/2025 09:22 AM
  • Status changed from needs review to merged
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by GitHub ⁤ on 03/19/2025 09:21 AM
  • Comment added

• Feature SI-70: Allow "system level" Bearer tokens
  updated by Jan Sandbrink on 03/19/2025 09:10 AM
  • Status changed from in development to on hold
  • Assignee deleted (Jan Sandbrink)
• Feature SI-117: Accept client credentials token issued by OIDC IDP
  created by Jan Sandbrink on 03/19/2025 09:06 AM
• Implementation SI-110: Add service classes to interact with system tokens
  updated by GitHub ⁤ on 03/19/2025 09:00 AM
  • Comment added

• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Jan Sandbrink on 03/19/2025 08:52 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by GitHub ⁤ on 03/19/2025 08:46 AM
  • Comment added

• Bug SI-116: OIDC can't handle expires_in as a string
  created by Jan Sandbrink on 03/19/2025 08:34 AM
• Feature SI-115: Extend OAuth applications to SCIM API
  created by Dominic Bräunlein on 03/19/2025 07:52 AM

03/18/2025

• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Cécile Guiot on 03/18/2025 05:43 PM
  • Status changed from tested to closed
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Jan Sandbrink on 03/18/2025 03:46 PM
  • Status changed from in specification to in development
  • Assignee changed from Pavel Balashou to Jan Sandbrink
• Implementation SI-114: Allow editing the name of an existing token
  created by Jan Sandbrink on 03/18/2025 03:31 PM
• Implementation SI-113: Allow deleting an existing token
  created by Jan Sandbrink on 03/18/2025 03:31 PM
• Implementation SI-112: Allow creating a new token
  created by Jan Sandbrink on 03/18/2025 03:31 PM
• Implementation SI-111: Implement list view UI
  created by Jan Sandbrink on 03/18/2025 03:30 PM
• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by Cécile Guiot on 03/18/2025 03:29 PM
  • Comment added

    All set ✅
    Tested on:
    Core build
    376c63237823fee4641fd1b4689e4e7aeda3d8de
    Product version
    4b55c8485559fa6ad277e54aea2b975...

  • Status changed from merged to tested
  • Assignee set to Cécile Guiot
  • % Complete set to 100%
• Implementation SI-110: Add service classes to interact with system tokens
  created by Jan Sandbrink on 03/18/2025 03:28 PM
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Parimal Satyal on 03/18/2025 03:10 PM
  • Comment added

    Hi team. Yes, I just realised it wasn't public, just changed it.

  • Description changed (Details)
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Jan Sandbrink on 03/18/2025 02:51 PM
  • Comment added

    I have access now, thanks

• Feature SI-70: Allow "system level" Bearer tokens
  updated by Dominic Bräunlein on 03/18/2025 02:48 PM
  • Comment added

    Jan Sandbrink You should have access now. Can you check again?

• Open Point SI-15: Is the setup for token exchange from one OIDC client to another scriptable in Keycloak?
  updated by Jan Sandbrink on 03/18/2025 01:52 PM
  • Status changed from new to decided
  • % Complete set to 100%
  • Decision set to yes, via API. Though for openDesk we don't need to code anything.
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Jan Sandbrink on 03/18/2025 01:48 PM
  • Comment added

    Parimal Satyal Doubling down here, instead of just pressing a "request access" button: I don't yet seem to have access t...

• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Jan Sandbrink on 03/18/2025 01:46 PM
  • Status changed from new to needs review
  • Assignee deleted (Jan Sandbrink)
• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by GitHub ⁤ on 03/18/2025 01:42 PM
  • Comment added

• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Jan Sandbrink on 03/18/2025 01:41 PM
  • Assignee set to Jan Sandbrink
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by GitHub ⁤ on 03/18/2025 12:15 PM
  • Comment added

    opf/openproject#18348 deployed to qa.openproject-edge.com

• Implementation SI-92: Breaking down the tests: Base Configuration Group
  updated by GitHub ⁤ on 03/18/2025 11:45 AM
  • Comment added

    opf/openproject#18316 deployed to qa.openproject-edge.com

• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Jan Sandbrink on 03/18/2025 11:42 AM
  • Status changed from needs review to merged
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by GitHub ⁤ on 03/18/2025 11:42 AM
  • Comment added

• Open Point SI-109: Do we need SCIM turn off checkbox admin setting?
  updated by Pavel Balashou on 03/18/2025 11:29 AM
  • Comment added

    Hi Oliver Günther,
    Could you provide your perspective whether it would be useful to have a turn off checkbox for SCIM AP...

  • Status changed from new to needs clarification
  • Involved people set to Pavel Balashou, Dominic Bräunlein, Oliver Günther
• Open Point SI-99: Do the system-level tokens expire and how would we handle that?
  updated by Pavel Balashou on 03/18/2025 11:28 AM
  • Status changed from new to resolved
  • % Complete set to 100%
  • Decision set to Yes, tokens expire. Admin are notified to do the rotation.
• Open Point SI-52: How should we behave for DELETE calls?
  updated by Pavel Balashou on 03/18/2025 11:27 AM
  • Status changed from new to resolved
  • % Complete set to 100%
  • Decision set to Delete user on delete request. Deactivate through an attribute update.
• Implementation SI-92: Breaking down the tests: Base Configuration Group
  updated by GitHub ⁤ on 03/18/2025 11:18 AM
  • Comment added

• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Jan Sandbrink on 03/18/2025 09:17 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by GitHub ⁤ on 03/18/2025 09:16 AM
  • Comment added

• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Jan Sandbrink on 03/18/2025 08:35 AM
  • Description changed (Details)
  • Status changed from confirmed to in development
  • Assignee set to Jan Sandbrink
  • Developers set to Jan Sandbrink
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by GitHub ⁤ on 03/18/2025 08:15 AM
  • Comment added

    opf/openproject#18336 deployed to qa.openproject-edge.com

• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Jan Sandbrink on 03/18/2025 07:48 AM
  • Status changed from needs review to merged
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by GitHub ⁤ on 03/18/2025 07:48 AM
  • Comment added

03/17/2025

• Feature SI-70: Allow "system level" Bearer tokens
  updated by Parimal Satyal on 03/17/2025 05:36 PM
  • Comment added

    Hi team. Figma mockups added. 
    This uses our regular box table for the display, a basic Primer form for creation and the...

  • Mockups set to https://www.figma.com/design/BcAqstklVSxzVJ1Na8jf5R/System-API-Tokens?node-id=0-1
• Feature SI-103: Script the SSO setup for openDesk
  updated by Jan Sandbrink on 03/17/2025 04:18 PM
  • Status changed from in specification to specified
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Jan Sandbrink on 03/17/2025 04:02 PM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by GitHub ⁤ on 03/17/2025 02:49 PM
  • Comment added

• Open Point SI-109: Do we need SCIM turn off checkbox admin setting?
  created by Dominic Bräunlein on 03/17/2025 01:17 PM
• Documentation SI-108: How to generate SCIM scoped token in OpenProject
  created by Dominic Bräunlein on 03/17/2025 01:14 PM
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Dominic Bräunlein on 03/17/2025 01:12 PM
  • Description changed (Details)
• Bug SI-107: Unclear error message when storage audience is misconfigured
  updated by Cécile Guiot on 03/17/2025 11:50 AM
  • Description changed (Details)
• Bug SI-107: Unclear error message when storage audience is misconfigured
  updated by Jan Sandbrink on 03/17/2025 10:30 AM
  • Comment added

    To add some detail: This is a misconfiguration that's possible on Edge or other environments with multiple clients that ...

• Bug SI-107: Unclear error message when storage audience is misconfigured
  created by Cécile Guiot on 03/17/2025 10:10 AM
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Cécile Guiot on 03/17/2025 10:09 AM
  • Comment added

    Working as expected ✅
    Tested on:
    Core build
    7fdfce2cd574a3ccd6e2a8ffe0a6bb2a46baddfc
    Product version
    c32c642cd2201e79821...

  • Status changed from in test to tested
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Jan Sandbrink on 03/17/2025 09:07 AM
  • Status changed from specified to in development
  • Assignee set to Jan Sandbrink
  • Version changed from Wish List to 15.5.0
  • Developers set to Jan Sandbrink
• Feature SI-103: Script the SSO setup for openDesk
  updated by Jan Sandbrink on 03/17/2025 08:58 AM
  • Subject changed from Script the SSO setup for OpenDesk to Script the SSO setup for openDesk
• Feature SI-98: Add SCIM server API
  updated by Pavel Balashou on 03/17/2025 08:50 AM
  • Comment added

    Hi Niels Lindenthal,
    There is no PR yet.

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by GitHub ⁤ on 03/17/2025 08:45 AM
  • Comment added

    opf/openproject#18313 deployed to qa.openproject-edge.com

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by Jan Sandbrink on 03/17/2025 08:12 AM
  • Status changed from needs review to merged
• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by GitHub ⁤ on 03/17/2025 08:12 AM
  • Comment added

03/16/2025

• Feature SI-98: Add SCIM server API
  updated by Niels Lindenthal on 03/16/2025 02:29 PM
  • Comment added

    Hi Wieland Lindenthal,
    Is there a PR for this?