[JIRA] (JENKINS-59417) AD Groups do not refresh during a SAML Session

[rsmith@cloudbees.com (JIRA)]

Ryan Smith created an issue

Jenkins / JENKINS-59417 AD Groups do not refresh during a SAML Session Issue Type: Bug Assignee: Ivan Fernandez Calvo Components: saml-plugin Created: 2019-09-18 05:45 Environment: CloudBees Core - Traditional Platform 2.164.1.2 RBAC plugin version: 5.27 SAML plugin version: 1.1.2 Priority: Critical Reporter: Ryan Smith Steps to reproduce: 1.) User is logged into Jenkins via SAML session 2.) User is added to AD Group by AD Admin 3.) User can hit /whoAmI endpoint and see new group added 4.) User is not able to access folders with group 5.) User has to logout of SAML session 6.) Admin has to logout of SAML session 7.) Admin has to login to new SAML session 8.) Admin has to manually add user to group in Jenkins Groups UI. 9.) User can now login and access folders with group I've looked at this with Félix Belzunce Arcos and he believed it to be a problem with https://github.com/jenkinsci/saml-plugin/blob/master/src/main/java/org/jenkinsci/plugins/saml/SamlGroupDetails.java Add Comment

This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)

[kuisathaverat@gmail.com (JIRA)]

Ivan Fernandez Calvo commented on JENKINS-59417

Re: AD Groups do not refresh during a SAML Session I do not see which Jenkins core and SAML plugin version you are using in the issues, it use to be useful info, anyway, I guess you are using RBAC CouldBees to manage groups on Jenkins. The behavior that you see it is by design, you have to create your groups in Jenkins and associate then to your users or external groups in Jenkins.

Add Comment

[kuisathaverat@gmail.com (JIRA)]

Ivan Fernandez Calvo closed an issue as Not A Defect

Jenkins / JENKINS-59417

AD Groups do not refresh during a SAML Session

Change By: Ivan Fernandez Calvo Status: Open Closed Resolution: Not A Defect

Add Comment

[kuisathaverat@gmail.com (JIRA)]

Ivan Fernandez Calvo edited a comment on JENKINS-59417

Re: AD Groups do not refresh during a SAML Session I do not see which Jenkins core and SAML plugin version you are using in the issues, it use to be useful info, anyway, I guess you are using RBAC CouldBees to manage groups on Jenkins. The behavior that you see it is by design, you have to create your groups in Jenkins and associate then to your users or external groups in Jenkins.

Add Comment

[kuisathaverat@gmail.com (JIRA)]

Ivan Fernandez Calvo edited a comment on JENKINS-59417

Re: AD Groups do not refresh during a SAML Session

The behavior that you see it is by design, you have to create your groups in Jenkins and associate then them to your users or external groups in Jenkins , SAML plugin does not sync any data from external sources, it only read the groups from the SAMLResponse when you login, SAML services does not provide any kind of service to sync groups, SAML is an authentication and authorization system that's it .

Add Comment