ligoj/plugin-id

Ligoj plugin for identity (IAM) service. Delegation, user, group, companies with full UI

🔗 Ligoj Identity plugin

API plugin used for compatibility check

Ligoj Identity plugin This a very complex plugin managing security constraints depending on the authorization of current user and are massively based on RBAC and delegates. Provides the following features :

• User, group and company management
• Scope of container (group and company) to name macro set of containers
• Delegates to user/group/company of a subset of current user depending on propagation constraints
• Activity export for a group

Dashboard features :

• Amount of users in the linked group

Related plugins:

• plugin-id-sql
• plugin-id-cognito
• plugin-id-ldap
• plugin-id-ldap-embedded

Plugin parameters

Parameter	Scope	Default	Note
service:id:user-display	Global	id	Display mode of user. mail and mail-short are accepted.
service:id:uid-pattern	Node, Subscription	.*	Pattern determining the login is valid for an authentication.
service:id:ou	Node, Subscription	null	Parent OU.
service:id:group	Node, Subscription	null	Normalized Group name (CN).
service:id:parent-group	Node, Subscription	null	Normalized parent Group name (CN).

plugin-id's Issues

Add plugin-id option to disable password management

By default this plugin can manage the password reset management on LDAP.
Add flag to disable this feature.

Save the query filters in /#/id URL

Save the query filters in /#/id URL
Filters:

• generic string filter
• company
• group

This navigation (back) will restore the previous filters.

Company/Group filters does not work

There : http://localhost:8080/ligoj/#/id
Company/Group filters does not work

The underlining issue comes from the Select2 identifier.

Not working URL based group filter in users UI

There #/id, when you come from #/id/container/group of #/id/container/company, the URL is well built "https://sample.com/logioj/#/id/home/group=_my_group_" however, the filter is not applied.
The filters work well the selects are filled, but the URL is not updated.
So there is a broken symetric behavior between URL/selects

Ability to notify or not imported users

Hi,

I suggest a new feature that gives the ability to switch off notifications for bulk import operation.
Use case:
I've 10k users to import, and i don't want (for X reason) to send 10K mails, so with a simple checkbox i can always create users w/o notify them.

Paging does not work for groups

There: http://localhost:8080/ligoj/#/id/container/group
Paging does not work for groups, only the first page is displayed.

Only first 10 groups are displayed

There "/#/id/container/group", only first 10 groups are displayed. Sorts and filters features are ok.

Enhanced notify content for delegate actions

Enhanced notify content for delegate actions : create, update and delete show only identifier.
The notify should display the target, right and the related resources

Add live feedback of existing mail

Add live feedback of existing existing on "mail" input

Error feedback is not reset with "create another" option

There "#/id" with "create another" cheched option, when there is an error (duplicate user for sample), then succeed, the UI is well reset but the error indicators.

Add live feedback of existing login

Add live feedback of existing existing on "login" input

Change the user name displayed in right corner in UI for mail

Currently the user login is displayed in the UI (upper left corner), for some organization, the login is meaningless. It's the case of LDAP and AWS Cognito.
Add an option to change the display mode of this part:

• id (default)
• mail
• mail-no-domain, only the left part of the mail

Missing title in password reset modal

While processing a reset of the user's password, the modal is displayed without title in some FR locale