WrenSecurity/wrenidm

Allow custom operation-specific options in provisioner

karelmaxa opened this issue · 0 comments

In this issue i would like to enable definition of operation options for operations (CREATE, UPDATE, ...) in provisioner.

Motivation

I need to be able to enforce password policies during password reset.

Example of configuration

Below is example of configuration in provisioner.openicf-*.json. All operationOptionInfo properties are sent into OpenICF connector.

"operationOptions" : {
    "UPDATE": {
        "denied" : false,
        "supportedObjectTypes": [ "__ACCOUNT__" ],
        "objectFeatures" : {
            "account": {
                "denied": false,
                "operationOptionInfo": {
                    "$schema": "http://json-schema.org/draft-03/schema",
                    "id": "FIX_ME",
                    "type": "object",
                    "properties": {
                        "PWD_RESET_CONTROL": {
                            "type" : "string",
                            "default" : "1.2.840.113556.1.4.2066"
                        }
                    }
                }
            }
        }
    }
}