[CLOUDTRUST-8008] Add BO external IDP management flag

basbeu · basbeu · commit 3e5b50f37e2b · 2026-02-25T14:54:11.000+01:00
diff --git a/api/account/api.go b/api/account/api.go
@@ -157,7 +157,8 @@ type Configuration struct {
 	PhysicalIdentificationAllowedRoles       []string        `json:"physical_identification_allowed_roles"`
 	AllowedBackURLs                          []string        `json:"allowed_back_urls"`
 	AllowInitialPasswordDefinition           *bool           `json:"allow_initial_password_definition"`
-		IdentificationURL                     *string         `json:"identification_url"`
+	IdentificationURL                        *string         `json:"identification_url"`
+	BOExternalIDPManagementEnabled           *bool           `json:"bo_external_idp_management_enabled"`
 }
 
 // UpdatePasswordBody is the definition of the expected body content of UpdatePassword method
diff --git a/api/management/api.go b/api/management/api.go
@@ -339,6 +339,7 @@ type RealmAdminConfiguration struct {
 	AutoGeneratedUsernameEnabled                   *bool           `json:"auto_generated_username_enabled"`
 	AutoGeneratedUsernameToggleEnabled             *bool           `json:"auto_generated_username_toggle_enabled"`
 	RegisterMode                                   *string         `json:"register_mode"`
+	BOExternalIDPManagementEnabled                 *bool           `json:"bo_external_idp_management_enabled"`
 }
 
 // RealmAdminAccreditation struct
@@ -916,6 +917,7 @@ func ConvertRealmAdminConfigurationFromDBStruct(conf configuration.RealmAdminCon
 		AutoGeneratedUsernameEnabled:                   defaultBool(conf.AutoGeneratedUsernameEnabled, false),
 		AutoGeneratedUsernameToggleEnabled:             defaultBool(conf.AutoGeneratedUsernameToggleEnabled, false),
 		RegisterMode:                                   defaultString(conf.RegisterMode, "default"),
+		BOExternalIDPManagementEnabled:                 defaultBool(conf.BOExternalIDPManagementEnabled, false),
 	}
 }
 
@@ -952,6 +954,7 @@ func (rac RealmAdminConfiguration) ConvertToDBStruct() configuration.RealmAdminC
 		AutoGeneratedUsernameEnabled:                   rac.AutoGeneratedUsernameEnabled,
 		AutoGeneratedUsernameToggleEnabled:             rac.AutoGeneratedUsernameToggleEnabled,
 		RegisterMode:                                   rac.RegisterMode,
+		BOExternalIDPManagementEnabled:                 rac.BOExternalIDPManagementEnabled,
 	}
 }
 
diff --git a/go.mod b/go.mod
@@ -3,7 +3,7 @@ module github.com/cloudtrust/keycloak-bridge
 go 1.25.3
 
 require (
-	github.com/cloudtrust/common-service/v2 v2.17.0
+	github.com/cloudtrust/common-service/v2 v2.17.1-0.20260225124935-dc4023bd830e
 	github.com/cloudtrust/httpclient v1.6.0
 	github.com/cloudtrust/kafka-client v1.7.2
 	github.com/cloudtrust/keycloak-client/v2 v2.17.0
@@ -46,7 +46,7 @@ require (
 	github.com/jcmturner/gofork v1.7.6 // indirect
 	github.com/jcmturner/gokrb5/v8 v8.4.4 // indirect
 	github.com/jcmturner/rpc/v2 v2.0.3 // indirect
-	github.com/klauspost/compress v1.18.1 // indirect
+	github.com/klauspost/compress v1.18.4 // indirect
 	github.com/nyaruka/phonenumbers v1.6.10 // indirect
 	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
 	github.com/pierrec/lz4/v4 v4.1.22 // indirect
diff --git a/go.sum b/go.sum
@@ -8,6 +8,10 @@ github.com/VividCortex/gohistogram v1.0.0 h1:6+hBz+qvs0JOrrNhhmR7lFxo5sINxBCGXrd
 github.com/VividCortex/gohistogram v1.0.0/go.mod h1:Pf5mBqqDxYaXu3hDrrU+w6nw50o/4+TcAqDqk/vUH7g=
 github.com/cloudtrust/common-service/v2 v2.17.0 h1:0OWOZ+VQ0lWupp+wXPMKjgJFqLiXXDHQWHPmInrtK6k=
 github.com/cloudtrust/common-service/v2 v2.17.0/go.mod h1:p1jDdOVLkYAg6/0u9D9Akg+QBj1VbIT5aktbJ3DcQ14=
+github.com/cloudtrust/common-service/v2 v2.17.1-0.20260224142134-b7f60514c29f h1:ywLA+OC/bWSioF2umc0GONizuRURhkGvA74bs7XCx6c=
+github.com/cloudtrust/common-service/v2 v2.17.1-0.20260224142134-b7f60514c29f/go.mod h1:n31FTuCITidJUn0E1nLsR0b/VnAG6TztT8MYZtQFEuk=
+github.com/cloudtrust/common-service/v2 v2.17.1-0.20260225124935-dc4023bd830e h1:tRKO1Ans+5zjKE6Xo/ugpEnC9/7Xl067G7CW62szTUI=
+github.com/cloudtrust/common-service/v2 v2.17.1-0.20260225124935-dc4023bd830e/go.mod h1:n31FTuCITidJUn0E1nLsR0b/VnAG6TztT8MYZtQFEuk=
 github.com/cloudtrust/httpclient v1.6.0 h1:/E/y2wZNyUIjADbP3RLI2pLTWdNvcFSLe1MeRD6RlN4=
 github.com/cloudtrust/httpclient v1.6.0/go.mod h1:CK0idOHAQ2CiN2GFOwIYP5hDl2tfUgGdTI9n7Ygbnrs=
 github.com/cloudtrust/kafka-client v1.7.2 h1:wezQkWb4nMA2u6PP+x8e54GrZTvEOHQkFuyOziB7Ea0=
@@ -77,6 +81,8 @@ github.com/jcmturner/rpc/v2 v2.0.3 h1:7FXXj8Ti1IaVFpSAziCZWNzbNuZmnvw/i6CqLNdWfZ
 github.com/jcmturner/rpc/v2 v2.0.3/go.mod h1:VUJYCIDm3PVOEHw8sgt091/20OJjskO/YJki3ELg/Hc=
 github.com/klauspost/compress v1.18.1 h1:bcSGx7UbpBqMChDtsF28Lw6v/G94LPrrbMbdC3JH2co=
 github.com/klauspost/compress v1.18.1/go.mod h1:ZQFFVG+MdnR0P+l6wpXgIL4NTtwiKIdBnrBd8Nrxr+0=
+github.com/klauspost/compress v1.18.4 h1:RPhnKRAQ4Fh8zU2FY/6ZFDwTVTxgJ/EMydqSTzE9a2c=
+github.com/klauspost/compress v1.18.4/go.mod h1:R0h/fSBs8DE4ENlcrlib3PsXS61voFxhIs2DeRhCvJ4=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
diff --git a/pkg/account/component.go b/pkg/account/component.go
@@ -548,6 +548,7 @@ func (c *component) GetConfiguration(ctx context.Context, realmIDOverride string
 		OnboardingUserEditingEnabled:             config.OnboardingUserEditingEnabled,
 		AllowInitialPasswordDefinition:           config.APISelfInitialPasswordDefinitionAllowed,
 		IdentificationURL:                        config.IdentificationURL,
+		BOExternalIDPManagementEnabled:           adminConfig.BOExternalIDPManagementEnabled,
 	}
 
 	if realmIDOverride != "" {
diff --git a/vendor/modules.txt b/vendor/modules.txt
@@ -7,7 +7,7 @@ filippo.io/edwards25519/field
 github.com/IBM/sarama
 # github.com/VividCortex/gohistogram v1.0.0
 ## explicit
-# github.com/cloudtrust/common-service/v2 v2.17.0
+# github.com/cloudtrust/common-service/v2 v2.17.1-0.20260225124935-dc4023bd830e
 ## explicit; go 1.25.3
 github.com/cloudtrust/common-service/v2
 github.com/cloudtrust/common-service/v2/configuration
@@ -148,7 +148,7 @@ github.com/jcmturner/gokrb5/v8/types
 ## explicit; go 1.13
 github.com/jcmturner/rpc/v2/mstypes
 github.com/jcmturner/rpc/v2/ndr
-# github.com/klauspost/compress v1.18.1
+# github.com/klauspost/compress v1.18.4
 ## explicit; go 1.23
 github.com/klauspost/compress
 github.com/klauspost/compress/flate

Original file line number	Diff line number	Diff line change
`@@ -157,7 +157,8 @@ type Configuration struct {`
`157`	`157`	PhysicalIdentificationAllowedRoles []string `json:"physical_identification_allowed_roles"`
`158`	`158`	AllowedBackURLs []string `json:"allowed_back_urls"`
`159`	`159`	AllowInitialPasswordDefinition *bool `json:"allow_initial_password_definition"`
`160`		- IdentificationURL *string `json:"identification_url"`
	`160`	+ IdentificationURL *string `json:"identification_url"`
	`161`	+ BOExternalIDPManagementEnabled *bool `json:"bo_external_idp_management_enabled"`
`161`	`162`	`}`
`162`	`163`
`163`	`164`	`// UpdatePasswordBody is the definition of the expected body content of UpdatePassword method`
Original file line number	Diff line number	Diff line change
`@@ -339,6 +339,7 @@ type RealmAdminConfiguration struct {`
`339`	`339`	AutoGeneratedUsernameEnabled *bool `json:"auto_generated_username_enabled"`
`340`	`340`	AutoGeneratedUsernameToggleEnabled *bool `json:"auto_generated_username_toggle_enabled"`
`341`	`341`	RegisterMode *string `json:"register_mode"`
	`342`	+ BOExternalIDPManagementEnabled *bool `json:"bo_external_idp_management_enabled"`
`342`	`343`	`}`
`343`	`344`
`344`	`345`	`// RealmAdminAccreditation struct`
`@@ -916,6 +917,7 @@ func ConvertRealmAdminConfigurationFromDBStruct(conf configuration.RealmAdminCon`
`916`	`917`	`AutoGeneratedUsernameEnabled: defaultBool(conf.AutoGeneratedUsernameEnabled, false),`
`917`	`918`	`AutoGeneratedUsernameToggleEnabled: defaultBool(conf.AutoGeneratedUsernameToggleEnabled, false),`
`918`	`919`	`RegisterMode: defaultString(conf.RegisterMode, "default"),`
	`920`	`+ BOExternalIDPManagementEnabled: defaultBool(conf.BOExternalIDPManagementEnabled, false),`
`919`	`921`	`}`
`920`	`922`	`}`
`921`	`923`
`@@ -952,6 +954,7 @@ func (rac RealmAdminConfiguration) ConvertToDBStruct() configuration.RealmAdminC`
`952`	`954`	`AutoGeneratedUsernameEnabled: rac.AutoGeneratedUsernameEnabled,`
`953`	`955`	`AutoGeneratedUsernameToggleEnabled: rac.AutoGeneratedUsernameToggleEnabled,`
`954`	`956`	`RegisterMode: rac.RegisterMode,`
	`957`	`+ BOExternalIDPManagementEnabled: rac.BOExternalIDPManagementEnabled,`
`955`	`958`	`}`
`956`	`959`	`}`
`957`	`960`
-Original file line number
+Diff line change
 go 1.25.3
 require (
 -	github.com/cloudtrust/common-service/v2 v2.17.0
 +	github.com/cloudtrust/common-service/v2 v2.17.1-0.20260225124935-dc4023bd830e
 	github.com/cloudtrust/httpclient v1.6.0
 	github.com/cloudtrust/kafka-client v1.7.2
 	github.com/cloudtrust/keycloak-client/v2 v2.17.0
 	github.com/jcmturner/gofork v1.7.6 // indirect
 	github.com/jcmturner/gokrb5/v8 v8.4.4 // indirect
 	github.com/jcmturner/rpc/v2 v2.0.3 // indirect
 -	github.com/klauspost/compress v1.18.1 // indirect
 +	github.com/klauspost/compress v1.18.4 // indirect
 	github.com/nyaruka/phonenumbers v1.6.10 // indirect
 	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
 	github.com/pierrec/lz4/v4 v4.1.22 // indirect
Original file line number	Diff line number	Diff line change
`@@ -548,6 +548,7 @@ func (c *component) GetConfiguration(ctx context.Context, realmIDOverride string`
`548`	`548`	`OnboardingUserEditingEnabled: config.OnboardingUserEditingEnabled,`
`549`	`549`	`AllowInitialPasswordDefinition: config.APISelfInitialPasswordDefinitionAllowed,`
`550`	`550`	`IdentificationURL: config.IdentificationURL,`
	`551`	`+ BOExternalIDPManagementEnabled: adminConfig.BOExternalIDPManagementEnabled,`
`551`	`552`	`}`
`552`	`553`
`553`	`554`	`if realmIDOverride != "" {`