-
Notifications
You must be signed in to change notification settings - Fork 2.9k
Description
NetBox version
v3.0.8
Feature type
Change to existing functionality
Proposed functionality
Allow NetBox to auto-create groups referenced in the REMOTE_AUTH_GROUP_HEADER.
Use case
As a data center administrator using Keycloak to manage auth/authz, I would like NetBox to automatically instantiate groups provided by Keycloak when using REMOTE_AUTH_ENABLED.
With REMOTE_AUTH_ENABLED and REMOTE_AUTH_GROUP_SYNC_ENABLED, it's still necessary to manually create groups before the group sync is effective. I would like to see a REMOTE_AUTH_AUTO_CREATE_GROUPS setting, analagous to REMOTE_AUTH_AUTO_CREATE_USER but for groups, that would cause NetBox to automatically create any groups in the REMOTE_AUTH_GROUP_HEADER. This would allow authorization to be completely delegated to the identity management platform.
This is the same feature requested by this comment in #5775.
Database changes
No response
External dependencies
No response