Problem/Motivation
This proposes to add an option for mappings between the AD groups and the Drupal Groups ( from the Group module https://www.drupal.org/project/group )
Initially, I was thinking to contribute this as an additional module, but thought to maybe give it a chance to add it as a patch.
There is an increasing demand for community websites which is evident from the Group module popularity https://www.drupal.org/project/usage/group.
Larger enterprises using Azure AD usually wish to split their user base into different departments so they are also benefitting from this.
Proposed resolution
The module currently implements functionality for mapping between the AD groups and Drupal roles. I am proposing to use a similar approach to map users to Drupal groups and re-use existing code where possible.
User interface changes
There will be some additional elements in the OpenID configuration page that allow for group mapping info.
| Comment | File | Size | Author |
|---|---|---|---|
| #6 | 3273742-options-to-map-ad-group-and-local-group-6.patch | 20.23 KB | leanderjcc |
| #5 | 3273742-options-to-map-ad-group-and-local-group-5.patch | 19.76 KB | leanderjcc |
| #4 | Screenshot 2022-04-07 at 4.20.22 PM.png | 322.48 KB | msti |
Issue fork openid_connect_windows_aad-3273742
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #2
mstiComment #4
mstiComment #5
leanderjccI created a patch based on the above MR to support the 2.0.x branch.
Patch needs review.
Comment #6
leanderjccPatch from #5 did not add groups to userinfo.
Adding patch that fixes this issue.
The role mapping needs some work as this didn't seem to work.