148506639a
* Beginning of work * Added instructions for skipobject to each source * removed saml * removed oauth * Updates * Added provider SkipObject instructions * combined examples into one * modified kerberos python snippet as per suggestion from Marc * Update website/docs/add-secure-apps/providers/property-mappings/index.md Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * Update website/docs/users-sources/sources/protocols/kerberos/index.md Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com> Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * Clarified how to use the exception * Update website/docs/add-secure-apps/providers/property-mappings/index.md Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com> Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * Update website/docs/add-secure-apps/providers/property-mappings/index.md Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com> Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * fixed missing ) after gws Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * fixed missing . from /scim Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * fixing broken links Signed-off-by: Dewi Roberts <dewi@goauthentik.io> * Fixed links Signed-off-by: Dewi Roberts <dewi@goauthentik.io> --------- Signed-off-by: Dewi Roberts <dewi@goauthentik.io> Co-authored-by: Dominic R <dominic@sdko.org> Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
1.0 KiB
title
| title |
|---|
| Provider property mappings |
Property mappings allow you to pass information to external applications. For example, pass the current user's groups as a SAML parameter.
SAML property mappings
SAML property mappings allow you embed information into the SAML authentication request. This information can then be used by the application to, for example, assign permissions to the object.
Scope mappings
Scope mappings are used by the OAuth2 provider to map information from authentik to OAuth2/OpenID claims. Values returned by a scope mapping are added as custom claims to access and ID tokens.
Skip objects during synchronization
To skip synchronization for a specific object, you can create a property mapping with an expression that triggers the SkipObject exception. This functionality is supported by the following providers: Google Workspace, Microsoft Entra ID, and SCIM.
Example:
if request.user.username == "example_username":
raise SkipObject