SSO - User Roles or ACLs to differentiate access levels

Product Support SSO

AI-generated summary

The discussion revolves around using SSO to manage access levels in Discourse based on user groups. Drancis seeks to automate access differentiation for customers A and B, where B has additional private category access, without manual intervention. RGJ suggests leveraging the groups, add_groups, and remove_groups parameters in the SSO payload to dynamically assign group memberships, enabling automated access control. pfaffman recommends reviewing the documentation on understanding groups and category permissions for further guidance.

1

Hi We are leveraging SSO for our community authentication. Within our system we have different customers, let’s just say A and B. We want to distinguish these groups in Discourse so that we have private Categories. In this scenario A gets general access and B get general access plus some private categories. These are not necessarily moderators, just higher level access. Moderators might be another level “C”. But right now we’re just looking for a way to implement special access based on our authentication with Discourse.

I read some information about Advanced SSO features for SSO but am not sure if we can leverage the custom fields to differentiate the access levels we want to implement. We don’t want to have to manually add customers to the private access categories, it needs to be automated based on our authentication levels. I am not a developer so if there is detailed documentation about how to do this please pass it my way. Thank you.

2

This is what you want.

3

You may also need to see Understanding groups and category permissions