# Feature SI-1 - SAML group sync

Project: Stream Integration Basics
Status: new
URL: https://community.openproject.org/work_packages/SI-1

## Planning

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Target versions | Wish List |
| Votes | 4 |
| List |  |
| Roadmap |  |
| Relevance |  |

## OPEN POINTS / FEEDBACK

_No work packages_

## Features and Chunks

_No work packages_

## Bugs and other work packages

_No work packages_

## Technical Details

| Attribute | Value |
| --- | --- |
| Module |  |
| Feature Flag |  |
| Requires doc change | No |
| Enterprise plan |  |

## Details

| Attribute | Value |
| --- | --- |
| Pull preview |  |
| Mockups |  |
| Accessibility | No |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Estimates and progress

| Attribute | Value |
| --- | --- |
| PD (min) |  |
| PD (max) |  |
| Work |  |
| Labor costs |  |

## Description

**As** an OpenProject admin  
**I want** users' groups to be synchronized on login via SAML  
**so that** I can control their group memberships in my identity provider.

**Acceptance criteria**

  - evaluate groups in SAML response on login
      - synchronize groups between OpenProject and IdP (identity provider) in some way (e.g. simple name-based matching)
      - assign user to groups passed in groups claim
      - cf. [SAML group sync in GitLab](https://docs.gitlab.com/ee/user/group/saml_sso/group_sync.html#:~:text=SAML%20Group%20Sync%20only%20manages,from%20the%20group%20during%20sync.)