OpenStack Identity (keystone)

RFE: allow automatically deprovisioning mapped assignments

Bug #1888029 reported by Jason Anderson
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
In Progress
Undecided
Jason Anderson

Bug Description

Currently there is support for auto-provisioning role assignments within projects that are created for the user when they authenticate. However, there is no way to offboard users from these projects, either due to mapping changes or due to dynamic changes in their group/role memberships from the IdP.

It would be nice to have opt-in support for automatically deprovisioning them as well for security/policy reasons.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.opendev.org/741785

Changed in keystone:
assignee: nobody → Jason Anderson (jasonandersonatuchicago)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on keystone (master)

Change abandoned by "Gage Hugo <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/keystone/+/741785
Reason: Abandoning since there hasn't been any recent activity, if anyone wants to continue this work, please feel free to restore this or create a new change.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.