[JIRA] (JENKINS-60176) Groups are not working | SAML | Authorization Matrix

48 views
Skip to first unread message

daljit.in@gmail.com (JIRA)

unread,
Nov 14, 2019, 12:23:03 PM11/14/19
to jenkinsc...@googlegroups.com
Daljit singh created an issue
 
Jenkins / Bug JENKINS-60176
Groups are not working | SAML | Authorization Matrix
Issue Type: Bug Bug
Assignee: Ivan Fernandez Calvo
Components: saml-plugin
Created: 2019-11-14 17:22
Labels: pipeline SAML2 ProjectMatrixAuthorization
Priority: Minor Minor
Reporter: Daljit singh

When we create a group in authorization-based matrix and assine an EMAIL address/User to a group

 

Using the same Group in Pipeline Input with permissions

 

It Just prompt with error message 

 

You are not the member of "TEST Group"
Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)
Atlassian logo

daljit.in@gmail.com (JIRA)

unread,
Nov 14, 2019, 12:38:02 PM11/14/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: image-2019-11-14-23-07-36-764.png

kuisathaverat@gmail.com (JIRA)

unread,
Nov 14, 2019, 1:23:03 PM11/14/19
to jenkinsc...@googlegroups.com
Ivan Fernandez Calvo commented on Bug JENKINS-60176
 
Re: Groups are not working | SAML | Authorization Matrix

Did you set up the correct group attribute in the SAML configuration? Did you check if the groups are assigned to the users? Go to people to one of the users, then to configure and check at the end of the page the groups grabbed from SAML

kuisathaverat@gmail.com (JIRA)

unread,
Nov 14, 2019, 1:24:02 PM11/14/19
to jenkinsc...@googlegroups.com
Did you set up the correct group attribute in the SAML configuration? Did you check if the groups are assigned to the users? Go to people to one of the users, then to configure and check at the end of the page the groups grabbed from SAML


This Jira is not a support site if you have questions please use the google groups, see https://wiki.jenkins.io/display/JENKINS/How+to+report+an+issue

daljit.in@gmail.com (JIRA)

unread,
Nov 15, 2019, 3:07:03 AM11/15/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Environment: REDHAT LINUX 7.0
Jenkins ver. 2.176.2

kuisathaverat@gmail.com (JIRA)

unread,
Nov 27, 2019, 5:59:02 AM11/27/19
to jenkinsc...@googlegroups.com
Ivan Fernandez Calvo closed an issue as Cannot Reproduce
Change By: Ivan Fernandez Calvo
Status: Open Closed
Resolution: Cannot Reproduce

daljit.in@gmail.com (JIRA)

unread,
Dec 2, 2019, 2:27:03 AM12/2/19
to jenkinsc...@googlegroups.com
Daljit singh reopened an issue
 

Please Find the attached Files where the Issue is still persisting 

 

Will share the Version as well
Change By: Daljit singh
Resolution: Cannot Reproduce
Status: Closed Reopened

daljit.in@gmail.com (JIRA)

unread,
Dec 2, 2019, 2:28:03 AM12/2/19
to jenkinsc...@googlegroups.com

daljit.in@gmail.com (JIRA)

unread,
Dec 2, 2019, 2:28:03 AM12/2/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: 1.png
Attachment: 2.png

kuisathaverat@gmail.com (JIRA)

unread,
Dec 2, 2019, 2:54:02 AM12/2/19
to jenkinsc...@googlegroups.com
Ivan Fernandez Calvo closed an issue as Not A Defect
 

This is not an issue is a configuration problem, please use the google groups to ask questions
Change By: Ivan Fernandez Calvo
Status: Reopened Closed
Resolution: Not A Defect

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:11:06 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: 1.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:12:02 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: 3.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:12:03 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: 2.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:13:02 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: image-2019-12-03-19-42-11-938.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:13:02 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: image-2019-12-03-19-42-54-249.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:14:02 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: image-2019-12-03-19-43-17-429.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:15:02 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: image-2019-12-03-19-44-08-344.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:16:02 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: image-2019-12-03-19-44-59-440.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:17:02 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: image-2019-12-03-19-46-41-526.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:17:02 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: image-2019-12-03-19-46-03-659.png

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:18:02 AM12/3/19
to jenkinsc...@googlegroups.com
Daljit singh updated an issue
Change By: Daljit singh
Attachment: OKTA_1.jpg

daljit.in@gmail.com (JIRA)

unread,
Dec 3, 2019, 9:23:04 AM12/3/19
to jenkinsc...@googlegroups.com
 
Re: Groups are not working | SAML | Authorization Matrix

I have tried all the ways as per my documentations

 

Jenkins: SAML Settings

++ Settings

Role based

 

Created a Global Role

 

Now Assigned Global role to an OKTA Group the same name group exist in OKTA

 

 

Okta setting as per Okta portal:

Test User who can access OKTA application

 

 

 

Group settings in Okta

 

But after doing this all the groups are not resolving by Jenkins as the issue remains on the Jenkins Input based Job 

but If I write the Email address in Jenkins file it works perfectly fine 

as authentication with OKTA is happening perfectly fine

but the Group based strategy is not working

 

as the SAML inspect response in Browser is not showing the group payload is not coming as well.

 

followed later this document :

https://dev.to/setevoy/jenkins-saml-authentication-via-okta-and-users-groups-2koh

 

and in last slide it's not showing the icon in front of DevOps Group name. Not Sure.

 

kuisathaverat@gmail.com (JIRA)

unread,
Dec 3, 2019, 10:02:04 AM12/3/19
to jenkinsc...@googlegroups.com

This Jira is not a support site if you have questions please use the google groups, see https://wiki.jenkins.io/display/JENKINS/How+to+report+an+issue
Add Comment Add Comment
 
Reply all
Reply to author
Forward
0 new messages