mitodl/keycloak-scim

Keycloak-scim does not synchronize groups.

Opened this issue · 0 comments

moma8468 commented

Keycloak-scim does not synchronize groups.

Expected Behavior

Keycloak-scim should create/update/remove groups defined in realm to newly joined client.

Current Behavior

Keycloak-scim will not create groups defined in keycloak in newly created client

Steps to Reproduce

  1. Create some groups in keycloak.
  2. Join new client
  3. Existing groups are not created in new client APP.
  4. There is no way to force sync of group inside User federation provider action list

Possible Solution

  • provide period sync of groups, just like it is done for users
  • optionally: provide synhronization options for group in User federation -> Provider details

Additional Details

If the client goes down, and new groups are created it will suffer from the same problem.