Skip to content

Allow to disable uid transformation for an IDP#266

Merged
f-necas merged 2 commits intogeorchestra:mainfrom
jusabatier:preserve_uid_patch
Apr 9, 2026
Merged

Allow to disable uid transformation for an IDP#266
f-necas merged 2 commits intogeorchestra:mainfrom
jusabatier:preserve_uid_patch

Conversation

@jusabatier
Copy link
Copy Markdown
Contributor

This is a better approach for #256

We can only target a single IDP by it's identifier :

georchestra:
  gateway:
    security:
      # You can disable UID transformation for an IDP by its identifier
      # This lead to not prefixing or sanitize the UID from this IDP
      disableUidTransformation: 'icu'

will target only IDP with identifier icu.

The targeted IDP will perform mapping on RAW uids, it's necessary when you use same LDAP for geOrchestra and OAuth2 provider (Keycloak for example).

@pmauduit @f-necas

Copy link
Copy Markdown
Collaborator

@f-necas f-necas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome thx ! Way cleaner than the other PR 👍🏼

@f-necas f-necas merged commit 055f28d into georchestra:main Apr 9, 2026
2 checks passed
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 9, 2026

💔 All backports failed

Status Branch Result
3.0.x Backport failed because of merge conflicts

Manual backport

To create the backport manually run:

backport --pr 266

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

f-necas added a commit that referenced this pull request Apr 9, 2026
Allow to disable uid transformation for an IDP
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants