-
-
Notifications
You must be signed in to change notification settings - Fork 91
Open
Labels
Description
I would like to be able to identify an SSO user's access level (admin, user) based on a claim returned during the initial oauth2 login exchange. This could, for example, look for something specific in the Roles claim or even look for a specific custom claim that explicitly states the user's group.
I believe this would be far cleaner and simpler to administer than having to add internal users with the admin group and matching on their email address.
As a side issue, it would be nice to hide the settings option in the UI if the user has no access to anything within them.