148506639a
* Beginning of work * Added instructions for skipobject to each source * removed saml * removed oauth * Updates * Added provider SkipObject instructions * combined examples into one * modified kerberos python snippet as per suggestion from Marc * Update website/docs/add-secure-apps/providers/property-mappings/index.md Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * Update website/docs/users-sources/sources/protocols/kerberos/index.md Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com> Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * Clarified how to use the exception * Update website/docs/add-secure-apps/providers/property-mappings/index.md Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com> Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * Update website/docs/add-secure-apps/providers/property-mappings/index.md Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com> Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * fixed missing ) after gws Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * fixed missing . from /scim Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * fixing broken links Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * Fixed links Signed-off-by: Dewi Roberts <dewi@goauthentik.io> --------- Signed-off-by: Dewi Roberts <dewi@goauthentik.io> Co-authored-by: Dominic R <dominic@sdko.org> Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
25 lines
1.0 KiB
Markdown
25 lines
1.0 KiB
Markdown
---
|
|
title: Provider property mappings
|
|
---
|
|
|
|
Property mappings allow you to pass information to external applications. For example, pass the current user's groups as a SAML parameter.
|
|
|
|
## SAML property mappings
|
|
|
|
SAML property mappings allow you embed information into the SAML authentication request. This information can then be used by the application to, for example, assign permissions to the object.
|
|
|
|
## Scope mappings
|
|
|
|
Scope mappings are used by the OAuth2 provider to map information from authentik to OAuth2/OpenID claims. Values returned by a scope mapping are added as custom claims to access and ID tokens.
|
|
|
|
## Skip objects during synchronization
|
|
|
|
To skip synchronization for a specific object, you can create a property mapping with an expression that triggers the `SkipObject` exception. This functionality is supported by the following providers: [**Google Workspace**](../gws/), [**Microsoft Entra ID**](../entra/), and [**SCIM**](../scim/).
|
|
|
|
**Example:**
|
|
|
|
```python
|
|
if request.user.username == "example_username":
|
|
raise SkipObject
|
|
```
|