SAML Team Mapping

Archives AWX Project
1

AWX v4.0.0.0.

I’ve organized our users into groups; This information is passed to AWX when user login as
`

<saml:Attribute Name=“companyGroups”
NameFormat=“urn:oasis:names:tc:SAML:2.0:attrname-format:basic”>
<saml:AttributeValue xsi:type=“xs:string”>cn=Group1,ou=memberlist,ou=cmpgroups,o=cpm.com</saml:AttributeValue>
<saml:AttributeValue xsi:type=“xs:string”>cn=Group2_AllUsers,ou=memberlist,ou=cmpgroups,o=cpm.com</saml:AttributeValue>
<saml:AttributeValue xsi:type=“xs:string”>cn=LargeGroup,ou=memberlist,ou=cmpgroups,o=cpm.com</saml:AttributeValue>
</saml:Attribute>

`

How can I map these groups to different teams in AWX? The documentation shows only email regular expression:

`

SOCIAL_AUTH_TEAM_MAP = {
"My Team": {
    "organization": "Test Org",
    "users": ["/^[^@]+?@test\.example\.com$/"],
    "remove": True,
},
"Other Team": {
    "organization": "Test Org 2",
    "users": ["/^[^@]+?@test\.example\.com$/"],
    "remove": False,
},
}

`

Thanks,
Larry

2

Larry,

According the following issue remapping groups in SAML is not currently supported. The recommended approach is to manage them through your directory server or SAML provider.

https://github.com/ansible/awx/issues/2688