[JIRA] (JENKINS-38779) Group Attribute while setting up Saml SSO

14 views
Skip to first unread message

priyadarshi035@gmail.com (JIRA)

unread,
Oct 6, 2016, 5:34:01 AM10/6/16
to jenkinsc...@googlegroups.com
Priyadarshi Peter created an issue
 
Jenkins / Task JENKINS-38779
Group Attribute while setting up Saml SSO
Issue Type: Task Task
Assignee: Ben McCann
Attachments: jenkins_settings.docx, saml-response.txt
Components: saml-plugin
Created: 2016/Oct/06 9:33 AM
Priority: Critical Critical
Reporter: Priyadarshi Peter

Hi Team,

Issue:We need help in figuring out what should be put in Group Attribute field

Explanation:
We have successfully setup Saml sso in jenkins.
We want to use Saml groups for Authentication as well as Authorization.
As of now Authentication is working fine with multiple Saml groups.
We want to authorize users based on which group he/she belongs to.
After going through the document provided in the Jenkins(Saml Plugin) site,we came to know that we have to specify the Group Attribute and only then it should be able to Authorize Users.
As per the Saml Response we have given the Group Attribute as "blueGroups" , but it doesn't authorize the users.
Please check the attached file for saml response.

Please Note:while adding the group names in the "Role Based Strategy Plugin" group icon is not coming.
Add Comment Add Comment
 
This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c)
Atlassian logo

tomi.pakarinen@gmail.com (JIRA)

unread,
Oct 6, 2016, 8:59:01 AM10/6/16
to jenkinsc...@googlegroups.com
Tomi Pakarinen commented on Task JENKINS-38779
 
Re: Group Attribute while setting up Saml SSO

Have you tried to use these groups?

  • cn=libertytest1,ou=memberlist,ou=ibmgroups,o=ibm.com
  • cn=libertytest2,ou=memberlist,ou=ibmgroups,o=ibm.com

priyadarshi035@gmail.com (JIRA)

unread,
Oct 10, 2016, 2:25:04 AM10/10/16
to jenkinsc...@googlegroups.com

Hi Tomi,
Yes i have tried that combination but it doesnot work.Please help.

tomi.pakarinen@gmail.com (JIRA)

unread,
Oct 10, 2016, 3:26:01 AM10/10/16
to jenkinsc...@googlegroups.com

You can add logger org.jenkinsci.plugins.saml and see does it give any extra information.

benjamin.j.mccann@gmail.com (JIRA)

unread,
Oct 20, 2016, 1:32:04 PM10/20/16
to jenkinsc...@googlegroups.com
Ben McCann assigned an issue to Unassigned
 
Change By: Ben McCann
Assignee: Ben McCann

ifernandezcalvo@cloudbees.com (JIRA)

unread,
Oct 28, 2016, 6:31:11 PM10/28/16
to jenkinsc...@googlegroups.com
Change By: Ivan Fernandez Calvo
Assignee: Ivan Fernandez Calvo

ifernandezcalvo@cloudbees.com (JIRA)

unread,
Jan 25, 2017, 6:19:02 AM1/25/17
to jenkinsc...@googlegroups.com
Issue Type: Task Bug

ifernandezcalvo@cloudbees.com (JIRA)

unread,
Jan 25, 2017, 6:19:02 AM1/25/17
to jenkinsc...@googlegroups.com
Ivan Fernandez Calvo updated an issue
Issue Type: Bug Task

ifernandezcalvo@cloudbees.com (JIRA)

unread,
Jan 25, 2017, 6:23:01 AM1/25/17
to jenkinsc...@googlegroups.com
Ivan Fernandez Calvo commented on Task JENKINS-38779
 
Re: Group Attribute while setting up Saml SSO

So, Do you created a group like "cn=BSO-IN_AMS_IGS_INDIA,ou=memberlist,ou=ibmgroups,o=ibm.com" and assigned roles to it and users that have this group does not have the correct permission?
I just released a new version with improvements on log if you set it to FINEST probably you get more information.

ifernandezcalvo@cloudbees.com (JIRA)

unread,
Mar 14, 2017, 6:46:01 PM3/14/17
to jenkinsc...@googlegroups.com
Ivan Fernandez Calvo updated an issue
Issue Type: Task Bug
This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e)
Atlassian logo

ifernandezcalvo@cloudbees.com (JIRA)

unread,
Mar 14, 2017, 6:46:01 PM3/14/17
to jenkinsc...@googlegroups.com
Ivan Fernandez Calvo updated an issue
Issue Type: Bug Task

ifernandezcalvo@cloudbees.com (JIRA)

unread,
Mar 14, 2017, 6:47:01 PM3/14/17
to jenkinsc...@googlegroups.com
Ivan Fernandez Calvo resolved as Incomplete
Status: Open Resolved
Resolution: Incomplete

deenaramu@gmail.com (JIRA)

unread,
Mar 2, 2020, 2:34:03 PM3/2/20
to jenkinsc...@googlegroups.com
Change By: Deenadayalan Ramamoorthy
Resolution: Incomplete
Status: Resolved In Review
This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)
Atlassian logo

deenaramu@gmail.com (JIRA)

unread,
Mar 2, 2020, 2:35:04 PM3/2/20
to jenkinsc...@googlegroups.com
Change By: Deenadayalan Ramamoorthy
Status: In Review Progress

deenaramu@gmail.com (JIRA)

unread,
Mar 2, 2020, 2:35:06 PM3/2/20
to jenkinsc...@googlegroups.com
Change By: Deenadayalan Ramamoorthy
Status: Open Fixed but Unreleased
Resolution: Fixed

deenaramu@gmail.com (JIRA)

unread,
Mar 2, 2020, 2:35:06 PM3/2/20
to jenkinsc...@googlegroups.com
Deenadayalan Ramamoorthy stopped work on Task JENKINS-38779
 
Change By: Deenadayalan Ramamoorthy
Status: In Progress Open

deenaramu@gmail.com (JIRA)

unread,
Mar 2, 2020, 2:36:02 PM3/2/20
to jenkinsc...@googlegroups.com
Change By: Deenadayalan Ramamoorthy
Status: Fixed but Unreleased Closed

kuisathaverat@gmail.com (JIRA)

unread,
Mar 2, 2020, 3:59:02 PM3/2/20
to jenkinsc...@googlegroups.com
 
Re: Group Attribute while setting up Saml SSO

Deenadayalan Ramamoorthy please, do not change closed issues, it was resolved as incomplete and in that state should be

kuisathaverat@gmail.com (JIRA)

unread,
Mar 2, 2020, 4:00:02 PM3/2/20
to jenkinsc...@googlegroups.com
Status: Closed Fixed but Unreleased
Resolution: Fixed Incomplete

kuisathaverat@gmail.com (JIRA)

unread,
Mar 2, 2020, 4:00:03 PM3/2/20
to jenkinsc...@googlegroups.com
Status: Fixed but Unreleased Closed
Reply all
Reply to author
Forward
0 new messages