Repository navigation
[Enhancement]: SSO / OIDC Groups Mapping #157
Description
Problem / Motivation
Currently, when a user is using OIDC to log in, the admin needs to assign a group to the user in DBackup.
Initial login gives them no permissions until assinged by the admin after the first login.
The main reason for using OIDC is to make user management easier and streamlined by managing users, groups and permission in the identity provider.
Proposed Solution
Add an OIDC groups mapping setting in DBackup so that DBackup groups are automatically assigned to users when logging in based on the "groups" claim coming from the provider.
Alternatives Considered
No response
Area
Authentication / SSO
Additional Context
No response
Activity
[-][Feature Request]: SSO / OIDC Groups Mapping[/-][+][Enhancement]: SSO / OIDC Groups Mapping[/+]Skyfay commentedon Sep 7, 2026
Hey @KrzysztofKiser
Thanks for this suggestion. I think this would be a great improvement for environments with a lot of users. I'll try to implement that :)
Skyfay commentedon Oct 4, 2026
Hey @KrzysztofKiser
Quick update on this one. With v4.0.0 you can now pick a group directly on each SSO provider. Under Users & Groups → SSO, every provider has the option Add new people on their first sign-in together with the group they should land in. So new users get their permissions right away on their first login and no longer start without any access until an admin assigns a group. You can find more details in the docs.
This isn't a full mapping of the
groupsclaim from your identity provider yet, but it covers the first login part. Would that work for your setup, or do you need the mapping by claim, for example because people in different IdP groups should end up in different groups in DBackup?Thanks :)
KrzysztofKiser commentedon Oct 4, 2026
Hey @Skyfay 👋🏼
The initial group assignment is a great addition, but I think that a full group mapping would make DBackup perfect in terms of integrating an IdP.
I have separate groups in my IdP that I would love to map to DBackup's groups without manually changing it for each user (I and I believe more users when integrating an IdP have that IdP as their single source of truth so automatic group mapping would be a great benefit).
Skyfay commentedon Oct 4, 2026
All right, thanks for the quick reply. Give me a little more time, and I'll be able to take care of it :)