Skip to content

Commit 9dbe104

Browse files
committed
Added occ command and updated Readme
Signed-off-by: Johan Bernhardsson <johan.bernhardsson@redpill-linpro.com>
1 parent aa521a4 commit 9dbe104

2 files changed

Lines changed: 14 additions & 0 deletions

File tree

README.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -431,6 +431,16 @@ The following formats are supported for the groups claim:
431431
* Array of group name strings: `"groups": ["group1", "group2", "group3"]`
432432
* Object with name and id: `"groups": [{ "gid": "id1", "displayName": "group1" }, ...]`
433433

434+
### EntraID and Microsoft graph
435+
436+
If using EntraID an option to turn on group name lookups via Microsoft Graph. It will loop through all guid a user has and store the names of the groups in Nextcloud.
437+
438+
This can be done in the graphical settings for the provider by toggling "Fetch group names from Microsoft Graph" or with the occ command to create/update providers:
439+
440+
```
441+
sudo -u www-data php occ user_oidc:provider demoprovider --entraid=1
442+
```
443+
434444
### Disable audience and azp checks
435445

436446
The `audience` and `azp` token claims will be checked when validating a login ID token.

lib/Command/UpsertProvider.php

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -155,6 +155,10 @@ class UpsertProvider extends Base {
155155
'shortcut' => null, 'mode' => InputOption::VALUE_REQUIRED, 'setting_key' => ProviderService::SETTING_MAPPING_GROUPS,
156156
'description' => 'Attribute mapping of the groups',
157157
],
158+
'entraid' => [
159+
'shortcut' => null, 'mode' => InputOption::VALUE_REQUIRED, 'setting_key' => ProviderService::SETTING_AZURE_GROUP_NAMES,
160+
'description' => 'Turn on usage of mapping guid to names with Microsoft Graph. 1 to enable, 0 to disable (default)',
161+
],
158162
'resolve-nested-claims' => [
159163
'shortcut' => null,
160164
'mode' => InputOption::VALUE_REQUIRED,

0 commit comments

Comments
 (0)