Feature request for resource "aws-sso-scim_user"

[wernerwws]

I just tested the provider and it works great for creating groups and assigning group members, however it would be great to also have the ability to create users with it.

Is there something planned in that direction?

[JanKoppe]

Hello @wernerwws,

thanks for testing the provider! Great to hear that it works great.

We currently did not need the functionality of creating users, but I will take a look into enabling those features as well. Totally makes sense.

[JanKoppe]

Hello @wernerwws,

the current feature branch (feature/7-aws-sso-scim_user, #8) contains a minimal implementation to create users, but I would like to spend more time on making it a feature complete (with the remaining attributes) resource. Is there any time requirement from your side? If so I can cut a release with that minimal implementation first.

[htquanq]

I also need this feature, just to create SSO user. Thank you a lot for spending time on it @JanKoppe

[wernerwws]

Hi @JanKoppe ,

it is not urgent on my side. Thank you for your work!

Best Werner

[htquanq]

Hi @JanKoppe, can you cut a release with minimal implementation please?

[JanKoppe]

Hello @quanght55,

I've just released v0.3.1, which includes the current state of the aws-sso-scim_user resource. Hopefully that helps you already for now. v0.3.0 sadly did not include the documentation page for that, because I forgot to generate it. Functionally they are identical otherwise. Sorry about that.

[manospasj]

Hello, I just tried the aws-sso-scim_user, it works great but created users are disabled by default. I'm also using GSuite as the SSO provider, which requires setting the primary email for each user. Can we add support for the active and emails fields please?

[wernerwws]

@manospasj I also use it with Gsuite and providing the email as the user_name worked for me. I think you can also configure a mapping on the GSuite side, but that was not needed in my case.

[manospasj]

Thanks @wernerwws, the email is required in the AWS console and I assumed it was needed for GSuite as well. I will try just with the user_name as you suggested

[JanKoppe]

Hey! Sorry for not responding earlier, actually starting a 2-week vacation right now. I saw your PR already, that's really great to see. Let's try and get that in, I think I can spend a bit of time on that to get you up and running, despite my vacation.

[manospasj]

Thanks for that! I appreciate it! I can now confirm that the emails field is not required. Hopefully adding the active field is a small enough change that can be implemented relatively quickly.